Skill UI

This guide details the process of configuring microsegmentation policies to enforce least-privilege access between workloads. It covers the entire workflow, from application dependency mapping and discovery (Phase 1) to defining label-based, default-deny security zones (Phase 2). It is crucial for preventing lateral movement in highly secure, zero-trust architectures using tools like VMware NSX, Illumio, and Calico.

This skill provides comprehensive guidance on implementing robust network security controls in Kubernetes using Calico's CNI capabilities. Learn to define and audit NetworkPolicy and GlobalNetworkPolicy resources to achieve zero-trust microsegmentation, restrict egress traffic, and control all pod-to-pod communications, ensuring compliance and enhanced security posture.

This skill guides the design and implementation of security zones and conduits for Industrial Automation and Control Systems (IACS) following IEC 62443-3-2 standards. It covers risk-based zone partitioning, defining security levels (SL-T), deploying microsegmentation using industrial firewalls, and validating the architecture against the Purdue Model.

This guide details the implementation of microsegmentation using Akamai Guardicore, enabling organizations to map complex application dependencies, visualize east-west traffic flows, and enforce least-privilege network policies. It is crucial for achieving zero-trust compliance by preventing lateral movement across heterogeneous workloads in data centers, cloud environments, and Kubernetes clusters.

This guide details how to use Kubernetes NetworkPolicies to enforce granular, pod-level network segmentation. It covers establishing default deny rules, defining specific ingress and egress rules for services, and implementing zero-trust microsegmentation. Use this skill to build robust security architecture and prevent lateral movement within a container cluster.

This skill guides the design and implementation of robust network segmentation using firewall zones, VLANs, ACLs, and microsegmentation. Learn to build secure, isolated zones (like DMZ, PCI CDE, Management) to enforce least-privilege access, restrict lateral movement, and meet stringent compliance requirements (PCI DSS, HIPAA).

This comprehensive guide details the implementation of Zero Trust Architecture (ZTA) in multi-cloud environments (AWS, Azure, GCP). Following NIST SP 800-207 and BeyondCorp principles, it covers identity-centric access controls, micro-segmentation, continuous verification, and deploying Identity-Aware Proxies (IAP) to eliminate implicit network trust.

A comprehensive guide to implementing Zero Trust Network Access (ZTNA) across major cloud platforms (AWS, Azure, GCP). This skill replaces traditional VPNs with identity-aware proxies, micro-segmentation, and conditional access policies. It ensures secure, context-aware access to cloud workloads, limiting lateral movement and adhering to BeyondCorp architectural principles.

This skill guides the end-to-end deployment of Zero Trust Network Access (ZTNA) using Zscaler Private Access (ZPA). It replaces traditional, perimeter-based VPNs by enforcing identity-based, context-aware microsegmentation. Learn to configure Identity Provider integration, deploy App Connectors, define granular application segments, and establish robust access policies for secure, outbound-only connections.