Zero Networks Segment Alternatives

I feel the streamlined gateway for automations and taking overview of your devices topology. The new patches installed recently in our infra on algosec, so GUI is also impressive and viewing option in algosec analyzer is exceptional good.

Overall experience has been positive, particularly in terms of visibility, segmentation capabilities, and lateral movement prevention. From a security operation perspective, the platform provides deep and granular visibility over network communication and workloads, enabling our security and IT departments to better understand application behavior, detect anormalies, misconfigurations and perform threat hunting. Micro-segmentation approach has proven valuable in strengthening our security posture by reducing the risk of lateral movement, which is a key requirement in modern defense strategies. We are also very happy of the support we receive from Akamai professional services which is always highly responsive and provide strong support under quick delays. Many challenges have been overcome throughout our experience and many more are yet to come.

I have worked with Illumio for a little over two years now. My experience with their support and sales team has been very good. Their support staff has always seemed to have a good depth of knowledge and provided thorough answers to my questions and typically quick resolution to any problem I have had.

Overall, we ha a good experience with Tufin. There are still some areas that require improvement (Such as Gui enhancements and certain functions), but in general, the platform is very helpful, especially when compliance is involved. Tufin allows us to gain better visibility into our network and understand what is happening based on our configurations, suck risky ports and usage.

VMware's vDefend firewall is the best to protect each network segment when we implement micro-segmentation to protect each workload from potential attacks, especially in east-west traffic. vDefend gives great visibility into the kinds of traffic that traverses through each of the micro-segments. Every VM is protected thru zero trust enablement. I have deployed vDefend in my tenure at a commercial datacenter as well as in a captive datacenter to ensure highest degree of protection of the workloads.

Overall, our journey with Microsoft Azure over the past five years has been very positive. What has worked really well for us is is how naturally Azure handles multi environment deployment. We operate across a mixed hybrid footprint, and the interoperability between our on-prem infrastructure and cloud resources feels genuinely smooth compared to other platforms.

New platform is much easier to use. It streamlines a lot of our workflows and allows us to respond to issues quicker and have better insight into our infrastructure.

Cisco ACI was selected as our primary DC fabric for several reasons. Initially as an alternative to standard CLI type DC deployments and ultimately for its large scale deployment ability via a centralized architecture. This allows us to expand our overall services with a minimal amount of effort.