non-intrusively monitored subnetwork connection protection