Application segment best practises

Hi there,
Is there any best practises on how to group applications together? For instance, should it be grouped by “application port”? Access rights?

I mean, is it best practise to have an application segment group with several applications but listening on different ports? E.g. ssh, https, rdp etc.?

Thanks

Hello Murilo,

There are a couple of ways to think about grouping Apps in an App Segment. One common approach is to group Apps based on type i.e an App segment for all web apps… This makes it easy to define policies based on types of apps. Another approach is to group Apps based on user persona… i.e. an App Segment that has apps for 3rd party users. This makes it easy to define policies to control access towards a specific set of users. The app config framework is very flexible and hence you have the option of trying out different approaches to determine the one that works best for your use case.

1 Like