# What is microsegmentation, and do small companies need it?

Microsegmentation means controlling traffic between individual servers or workloads, not only between network zones, so that two servers in the same segment cannot talk to each other unless a rule allows it. It is usually done with host firewalls, hypervisor or cloud security groups, or an agent that enforces policy on each machine. It is very effective against an intruder moving from one server to the next, and common in data centres and cloud environments. Most small companies get more from ordinary segmentation first: separate networks for guests, devices, users and servers. If you run many servers, the inexpensive version of microsegmentation is to switch on each server's own firewall and allow only the connections it needs. Whatever you choose, let real traffic guide the rules. The NetSenX network map shows which hosts talk to which on monitored segments, on every plan, and lateral movement alerts show sessions that do not match a host's normal.

FAQ: [Zero trust, identity and segmentation](https://netsenx.com/en/faq/zero-trust) · https://netsenx.com/en/faq/what-is-microsegmentation

## Read next

- https://netsenx.com/en/detect-lateral-movement-c2-beaconing
- https://netsenx.com/en/what-is-ndr

## Related questions

- [Is a VLAN a security boundary?](https://netsenx.com/en/faq/is-a-vlan-a-security-boundary)
- [How do I check that guest Wi-Fi cannot reach our internal network?](https://netsenx.com/en/faq/how-to-check-guest-wifi-cannot-reach-the-internal-network)
- [Is a separate guest Wi-Fi enough for security?](https://netsenx.com/en/faq/is-a-separate-guest-wifi-enough)
- [Can someone plug a device into a free network socket in our office?](https://netsenx.com/en/faq/can-someone-plug-a-device-into-a-free-network-socket)
- [What is 802.1X, and does a small office need it?](https://netsenx.com/en/faq/what-is-802-1x-and-does-a-small-office-need-it)