D3-NI

Network Isolation

Segment networks to contain threats and limit lateral movement by restricting communications between zones.

D3FEND / Isolate

Implementation

  • Implement network segmentation
  • Deploy micro-segmentation
  • Use VLANs and subnets
  • Implement zero trust network access
  • Monitor inter-zone traffic

Tools

  • Cisco ACI
  • VMware NSX
  • Illumio
  • Palo Alto Networks
  • Zscaler

ATT&CK mappings

3

MITRE D3FEND ↗