Skill UI

Guide to architecting and implementing microsegmentation policies so workloads only communicate over approved channels, using tools like VMware NSX, Illumio, and Calico to prevent lateral movement in zero trust environments.

Guide for using Calico CNI and calicoctl to create and audit network and global network policies in Kubernetes, enforcing pod-to-pod/egress control, namespace isolation, and zero-trust microsegmentation with connectivity validation.

Provides guidance on installing Calico CNI and writing Kubernetes NetworkPolicy and Calico GlobalNetworkPolicy definitions to enforce default-deny, pod-to-pod, namespace, service-account, and host endpoint controls, enabling zero-trust communication and compliance-ready segmentation in clusters.