Importance of Natural Resources

Flexible Labeling – The Only Simple Way to Build a Segmentation Policy | Guardicore Centra™ Security

Why are labels so important? Because this is the only simple way to build
a segmentation policy. We want to manage a single policy for bare
metal servers, public clouds and even containers and all this without changing the network
infrastructure. Anchoring the policy to IP addresses does
NOT make sense. With every change – an application tier scales
out, workloads migrating to the cloud – the IP address changes. Even more importantly, IP addresses are meaningless
– we want to allow the database server to communicate with the application server and
not dot 20 to communicate with dot 21. So instead of relying on IP addresses, we’re
using labels. A label is a snippet of metadata that is attached
to a workload and provides context about that workload. For example, a server can be labeled with
“Environment Production”, “Application SWIFT” or “OS: Solaris”. Using meaningful parameters allows us to formulate
the policy the way we speak or think, for example – allow the Dev environment to communicate
with the Production Active Directory. Unlike other vendors that provide a limited
number of labels, we provide flexible labeling schema to adapt to your specific organizational needs. For example, need application segmentation? Use the “Application” label. Need to segment your PCI compliant machines
from others? Use the “PCI compliant” label. Labels are dynamic and can be applied to any
assets as these spin up – Existing public cloud tags, CMDB systems, or even the naming conventions of
your servers. And if you don’t have any of these, don’t worry – our experts together
with our smart algorithms will analyze your traffic and label it for you. Labels help you better understand your data
center and build a policy that suits your unique business requirements. It helps make segmentation simpler. If you want to learn more watch our demo video.

Leave a Reply

Your email address will not be published. Required fields are marked *