---
title: What is microsegmentation?
url: https://www.vmware.com/topics/microsegmentation
description: Learn how microsegmentation secures east-west traffic to prevent an attacker's lateral movement.
---

# What is microsegmentation?

Microsegmentation is a [network security](https://www.vmware.com/topics/network-security) technique that enables security architects to logically divide the [data center](https://www.vmware.com/topics/data-center) into distinct security segments down to the individual workload level, and then define security controls and deliver services for each unique segment. Microsegmentation enables IT to deploy flexible security policies deep inside a data center using network virtualization technology instead of installing multiple physical firewalls. Also, microsegmentation can be used to protect every [virtual machine](https://www.vmware.com/topics/virtual-machine) (VM) in an enterprise network with policy-driven, application-level security controls. Because security policies are applied to separate workloads, microsegmentation software can significantly bolster a company’s resistance to attack.

Microsegmentation software uses [network virtualization](https://www.vmware.com/topics/network-virtualization) technology to create increasingly granular secure zones in data centers and cloud deployments, which isolate each individual workload and secure it separately.

## Recommended for You

## Microsegmentation in networking

Microsegmentation helps in networking by creating “demilitarized zones” for security within one data center and across multiple data centers. By tying fine-grained security policies to individual workloads, microsegmentation software limits an attacker’s ability to move laterally through a data center, even after infiltrating the perimeter defenses. This means that it can eliminate server-to-server threats within the data center, securely isolate networks from each other, and reduce the total attack surface of a network security incident.

## How VMware products can help

[vDefend](https://www.vmware.com/products/security/vdefend-gateway-firewall) is purpose-built to auto-discover application communications, provide guidance on security rules, and verify policy correctness in a non-disruptive manner. The result: 360-degree segmentation with built-in automated workflows that include both macro and microsegmentation, as well as continuous monitoring, all in a prescriptive manner.

Enhance your [VCF](https://www.vmware.com/products/cloud-infrastructure/vmware-cloud-foundation) private cloud security posture across all workloads by protecting east-west traffic from lateral threat spread and accelerating your Zero Trust journey.

## Recommended for You

- [Application Security](https://www.broadcom.com/topics/application-security)
- [Network Security](https://www.vmware.com/topics/network-security)
- [Data Center Security](https://www.vmware.com/topics/data-center-security)

## Related Products and Solutions

- [VMware NSX](https://www.vmware.com/products/cloud-infrastructure/vcf-networking)
- [VMware vDefend Distributed Firewall](https://www.vmware.com/products/security/vdefend-distributed-firewall)
- [Security and Resiliency](https://www.vmware.com/solutions/security)

## Also of Interest

- [What is Platform Engineering?](https://www.vmware.com/topics/platform-engineering)
- [What is Network Segmentation?](https://www.vmware.com/topics/network-segmentation)
- [VMware Cloud Foundation Networking (NSX)](https://www.vmware.com/products/cloud-infrastructure/nsx)