A procedure in Zero Trust wherein segments of a network are secured individually.

These segments include:

  • Data plane (Data Layer devices)
  • Control plane (Managing actions of dataplane, policies and rules, NAT tables)