Skip to content
Zappsec
Case Study · Healthcare

Zero Trust Microsegmentation for a Leading Healthcare Organization

A flat data center replaced by workload-level segmentation and continuous east-west inspection - a defensible Zero Trust architecture.

Zero TrustCybersecurityNetworking
Zero Trust Microsegmentation for a Leading Healthcare Organization - architecture illustration
Enterprise overview

Leading healthcare organization

HIPAA
Regulated posture
Multi-cluster
Data center estate

A leading healthcare organization ran a flat data-center network that had become indefensible against modern threats and difficult to evidence for regulators.

The Problem

A flat data center could not carry a defensible security posture.

Flat east-west traffic

Lateral movement had no meaningful boundaries.

Regulatory pressure

HIPAA and CMS expectations exceeded what the estate could evidence.

Change friction

Segmentation changes required physical network work.

The Zappsec Solution

Workload-level segmentation and continuous inspection.

  1. 1
    Distributed segmentation

    VMware NSX distributed firewall enforcing workload-level policy.

  2. 2
    Continuous inspection

    IDS/IPS and threat prevention on east-west traffic.

  3. 3
    Auditable evidence

    Continuous evidence for HIPAA and CMS obligations.

Architecture

Reference architecture at a glance

A distributed firewall enforces workload-level Zero Trust policy, with continuous east-west inspection and auditable evidence.
A distributed firewall enforces workload-level Zero Trust policy, with continuous east-west inspection and auditable evidence.
Outcomes

Outcomes that changed the operating model

100%
East-west visibility

Every workload interaction observable and controllable.

Workload-level
Zero Trust enforcement

Policy travels with the workload, not the switch.

The data center became defensible - and demonstrably so, for the regulators that matter.

Technologies and platforms

The stack behind the transformation

VMware NSXTerraform

Related Zappsec capabilities

Cybersecurity

Zero Trust, SSE, workload and OT security delivered as policy-as-code.

Explore capability
Networking

Campus, SD-WAN, data center and hybrid cloud networking as one architecture.

Explore capability

More transformation stories

What could this architecture unlock for your enterprise?

Talk with a Zappsec architect about the cloud, network, security, identity or data platform behind your next transformation program.

Talk to an Architect Explore all insights