The micro-segmentation feature helps to manage network security effectively because it helps the virtual machines that are already on the cluster and the applications inside the cluster itself. It protects them and helps them communicate with each other without needing a complex external or internal firewall in this use case. Working with the zero-trust security model means never trust but always verify. Every VM, application, and service in your environment must explicitly prove it's allowed to communicate with others. An application would be able to talk to a VM and vice versa. This zero-trust means explicitly proving that they are allowed to talk to each other, with no implicit trust just because they are on the same VLAN, subnet, cluster, or environment. Nutanix Flow brings the zero-trust model natively to the virtual layer inside the Nutanix software itself, the AHV. The AHV software enforces strict communication rules between workloads. Integration between Nutanix Flow and other products natively benefits the infrastructure itself as this is a networking segmentation software coming from Nutanix itself. This provides ultimate compatibility. There is no need for extra firewall VMs such as Palo Alto or third-party switches. Security becomes established at the hypervisor level, which creates a new conglomeration of security segmentation. The network performance analysis that Nutanix Flow Network Security provides is very beneficial and effective.
