Which two technologies support multilayer segmentation?
Multilayer segmentation is achieved by combining enforcement at different layers of the network. Firewalls (A) create and enforce segmentation boundaries and security policy at Layer 3/4 and above, and policy-based routing (E) steers selected traffic flows along different paths (for example redirecting East-West traffic to a firewall or into different VRFs), enforcing logical separation at the routing layer. Data plane markings (B) and filter lists (C) are components used within those mechanisms rather than the segmentation technologies themselves, and segment routing (D) is a transport/forwarding technology, not the answer this item expects. Cisco design references pair firewalls with policy-based routing for this multilayer approach.
Community Discussion