A security platform, comprising: one or more processors to: receive policy information associated with a first application group and a second application group, the first application group including a first set of virtual application components and a first set of physical application components, the second application group including a second set of virtual application components and a second set of physical application components; receive network topology information associated with a network; generate a first policy, to be provided to a virtual network device of the network, based on the policy information and the network topology information, the first policy including a rule that is to be applied to network traffic that includes at least a virtual application component as a source or destination of the network traffic; a virtual application component, of the first set of virtual application components, being connected to the virtual network device; generate a second policy, to be provided to a physical network device of the network, based on the policy information and the network topology information, the second policy referring to a set of rules, that is to be provided to a physical network device, that permits the physical network device to implement the second policy in association with network traffic transferred between physical application components of the first application group and physical application components of the second application group; a physical application component, of the first set of physical application components, being connected to the physical network device; provide, to the virtual network device of the network, information associated with the first policy to permit the virtual network device to implement the first policy in association with network traffic transferred between the virtual application component, of the first set of virtual application components, and the second set of virtual application components; and provide, to the physical network device, information associated with the second policy to permit the physical network device to implement the second policy in association with network traffic transferred between the physical application component, of the first set of physical application components, and another physical application component of the second set of physical application components. one or more processors to: receive policy information associated with a first application group and a second application group, the first application group including a first set of virtual application components and a first set of physical application components, the second application group including a second set of virtual application components and a second set of physical application components; receive network topology information associated with a network; generate a first policy, to be provided to a virtual network device of the network, based on the policy information and the network topology information, receive policy information associated with a first application group and a second application group, the first application group including a first set of virtual application components and a first set of physical application components, the second application group including a second set of virtual application components and a second set of physical application components; the first application group including a first set of virtual application components and a first set of physical application components, the second application group including a second set of virtual application components and a second set of physical application components; receive network topology information associated with a network; generate a first policy, to be provided to a virtual network device of the network, based on the policy information and the network topology information, the first policy including a rule that is to be applied to network traffic that includes at least a virtual application component as a source or destination of the network traffic; a virtual application component, of the first set of virtual application components, being connected to the virtual network device; generate a second policy, to be provided to a physical network device of the network, based on the policy information and the network topology information, the second policy referring to a set of rules, that is to be provided to a physical network device, that permits the physical network device to implement the second policy in association with network traffic transferred between physical application components of the first application group and physical application components of the second application group; a physical application component, of the first set of physical application components, being connected to the physical network device; provide, to the virtual network device of the network, information associated with the first policy to permit the virtual network device to implement the first policy in association with network traffic transferred between the virtual application component, of the first set of virtual application components, and the second set of virtual application components; and provide, to the physical network device, information associated with the second policy to permit the physical network device to implement the second policy in association with network traffic transferred between the physical application component, of the first set of physical application components, and another physical application component of the second set of physical application components.