For some customers it would be desirable to isolate the ICAP traffic for 3rd party DLP on a dedicated vlan. If P1 and P2 are already in use (ingress and egress) and C is on a management vlan, then this isn't possible without compromising the customer's security / network flow design philosophies.
It would be great if E1 and E2 could be assigned as eth2 and eth3 in Content Gateway.