Skip to main content

Home Micro-segmentation


(also network micro-segmentation)

Micro-segmentation definition

Micro-segmentation is a network security technique that divides a network into multiple isolated segments or zones. Each segment holds a specific group of resources, and policies can be applied to control traffic flow between these zones. This granular approach allows for tighter control and improved security compared to traditional perimeter-based defenses.

See also: firewall, network intrusion protection system

Micro-segmentation examples

  • Data center security: Micro-segmentation is widely used in data centers to isolate workloads and protect them from lateral movements of threats.
  • Cloud security: Cloud providers leverage micro-segmentation to provide individual security boundaries for customers sharing the same infrastructure.

Advantages and disadvantages of micro-segmentation


  • Enhanced security: Micro-segmentation limits unauthorized access and the lateral spread of threats within a network.
  • Compliance: It helps businesses meet regulatory standards by securing sensitive data in isolated network segments.


  • Complexity: Implementing micro-segmentation requires a detailed understanding of the network and can be complex to manage.
  • Cost: Initial setup and maintenance could be resource-intensive.

Using micro-segmentation

  • Consider a software-based approach for more flexibility and scalability than hardware-based solutions.
  • Start with high-value assets or resources, segmenting and securing them first.