Welcome to the new era of Zero Trust Segmentation (ZTS) 

Unlike prevention and detection technologies, ZTS contains the spread of breaches and ransomware across the hybrid attack surface by continually visualizing how workloads and devices are communicating, creating granular policies that only allow wanted and necessary communication, and automatically isolating breaches by restricting lateral movement proactively or during an active attack. ZTS is a foundational and strategic pillar of any Zero Trust architecture. 

One platform. One console. Any environment. 

The Illumio Zero Trust Segmentation (ZTS) Platform is the industry's first platform for breach containment. Scalable yet easy to use, Illumio ZTS provides a consistent approach to microsegmentation across the entire hybrid attack surface — from multi-cloud to data center to remote endpoints, from IT to OT. With Illumio ZTS, organizations can quickly and easily see risk, set policy, and stop the spread of breaches. 

1. See risk - See risk by visualizing all communication and traffic between workloads and devices across the entire hybrid attack surface. For example, which servers are talking to business-critical apps, and which applications have open lines to the internet.
2. Set policy - With every change, automatically set granular and flexible segmentation policies that control communication between workloads and devices to only allow what is necessary and wanted. For example, restrict server-to-app communications, dev to prod, or IT to OT.
3. Stop the spread - Proactively isolate high-value assets or reactively isolate compromised systems during an active attack to stop the spread of a breach. For example, see how a global law firm instantly isolated a ransomware breach. 

Why re-invent segmentation?

Segmentation is the best way to prevent the spread of breaches inside data centers and cloud environments. Traditional network segmentation, well understood by security and infrastructure teams, was designed to subdivide the network into smaller network segments through VLANs, subnets and zones. Although these constructs can provide some isolation, their primary function is to boost network performance and requires control of the infrastructure, which is often a challenge in the public cloud. In contrast, Illumio's adaptive micro-segmentation technology enforces security policies – what should and should not be allowed to communicate among various points on the network – by filtering traffic. If networking supports how things can communicate, security dictates if they should. 

What does adaptive micro-segmentation give you? Segmentation your way.

Illumio's adaptive micro-segmentation technology lets you choose the level of segmentation that is right for your environment. We offer the widest range of segmentation options available without all the manual work normally associated with traditional segmentation.