create$($s$)$ a variety of new opportunities for having security practices that are focused NOT on perimeter defenses, but on securing traffic inside of the data center. One way it does this is with micro$-$segmentation. Part of this technology allows new networks to be easily created. It also allows policies to be assigned to the networks, allowing only certain types of traffic to flow on that network. If an infected threat attempts to use the network, it will not be authorized to$.$ And because the networks are segmented, even if an attacking agent gets on to the network, it will not have free reign within the data center, it will be confined to a single segmented network.

Firewalls

Virtualization

VPN

DMZ