Matt Haedo runs down the change in network security from focusing on rigid perimeter boundaries to micro-segmentation, which eliminates implied trust on all devices. He then looks at current solutions for micro-segmentation, which mostly either enforce policy in the network device, or in the hypervisor kernel. Finally, he looks at what makes Illumio’s approach to micro-segmentation different, which pushes enforcement to the endpoint, relying on its native enforcement policy. Matt seemed impressed by what he saw from Illumio at Networking Field Day in August. Check out the rest of the piece for his full rundown!
