Network Segmentation

Standards-based segmentation for traditional networks – flexible, supported, and integrated.

Not every environment is Zero Trust – yet. Many networks still rely on traditional segmentation methods like VLANs, VRFs, and physical separation to isolate traffic and maintain control.

That’s the reality of working with legacy infrastructure, hybrid estates, and interoperability requirements.

The evolving ZERO platform supports full, standards-based network segmentation – including L2 and L3 constructs like VLANs, tagged trunks, virtual routing tables (VRFs), and custom route domains. Whether you’re segmenting services, customer environments, or security zones, we make it possible to replicate and extend your existing design within a modern, policy-aware platform.

Not a workaround

We treat traditional segmentation as a first-class option – not something to be deprecated or forced into a new model before you're ready. You can run classic network segmentation today, with the option to move toward Zero Trust microsegmentation when the time is right.

Key Features

VLAN-aware at all edge points

EVX and fabric nodes support tagged interfaces, trunk links, and VLAN-specific policy controls.

VRF and routing table isolation

Create multiple routing domains to isolate customer environments, tenants, or service classes.

Supports complex hybrid topologies

Mix routed and bridged segments, static or dynamic routes, and L2/L3 boundaries as needed.

Standards-based interoperability

Integrates cleanly with third-party switches, routers, and firewalls – no proprietary lock-in.

Per-segment access control

Apply policy rules to traffic between VLANs, VRFs, or external networks using FWaaS or SD-WAN features.

Future-ready

Combine traditional segmentation with Zero Trust enforcement for gradual migration paths.

Case Studies

Care Protect

Real time audio & video ready Network as a Service provided to health care monitoring provider.

Bleach of Lavant

Troublesome VPN replaced with Network as a Service, delivering aggregated multi-carrier SD-WAN solution to rural HQ with Layer 2 link to remote depot.

Kimbolton School

Multi-gigabit bandwidth and resilience for over 1000 users.

Connectivity, security and compute through one unified zero-trust networking architecture

Home