Macro-Segmentation Service (MSS)
Addresses a gap in security deployment models wherein embedded security in the virtualization hypervisors addresses inter-VM communication and physical firewalls address at-depth protection for north-south traffic, leaving the data center. But no solution exists yet to dynamically insert advanced security services for east-west traffic in hybrid data centers utilizing a combination of hypervisors or containing non-virtualized workloads like big data and storage or attaching legacy systems to the same networks as new cloud applications.
A more holistic network-wide segmentation approach at the macro- and micro-level is now becoming a mandate to mitigate security threats. This has been addressed in part by the implementation of distributed fine-grain security services within networking and computing hypervisors, often called micro-segmentation.