Microsegmentation was initially designed to control server-to-server traffic within a network segment. Today, it has been extended to segment-to-segment traffic, regulating how servers, applications, and hosts can communicate with each other.
Microsegmentation policies and permissions are usually based on the resource identity, making each resource independent of the host infrastructure. Microsegmentation is thus an ideal way to create intelligent workload groupings based on the characteristics of the individual workloads within a data center.
As a fundamental part of zero trust network access (ZTNA) solutions, microsegmentation provides stronger and more reliable network security. Microsegmentation-based security is also easier to manage. Instead of writing hundreds of rules based on addresses, you can secure segments with a handful of identity-based policies.