• Use Case would establish an on-demand Administration layer style ANS Security Zone that locks out non-authenticated access while allowing only approved administrator or elevated privilege access.
• Uses the ANS Security Zone construct for secure management of critical components such as; servers, firewalls, appliances, and datacenters remotely or within the same facility using Nano, Micro and/or Macro network segments.
• Facilitates service provider or vendor access on-demand within a contained and secure communication segment.
• Mitigates potential elevated access from external or internal threat actors and server/services hopping within a datacenter or other processing facility.
• Meets/exceeds all common compliance requirements for Administration security while reducing overall OPEX.

Use Case would establish multi-layered authentication using the low level (L2) ANS Security Zone to secure user or application credential authentication in higher layered (L3 and above) federated or non-federated identity management communications within networked systems and/or applications.

• Uses the ANS Security Zone construct to protect communications between endpoints and their authentication system to pass secure attribute based or common access control credentials across highly secure and available Nano, Micro and/or Macro network segments.
• Establishes a multi-layered and highly secure authentication transport process which is invisible and impervious to internal and external threat actors.
• Protects authentication systems from compromise while enabling cross domain secure access control.
• Supports common Active Directory/LDAP user access control policy based solutions while capable of enhancing future attribute based granular role based access control systems or protocols.
• Meets/exceeds all common compliance requirements for Access Control security while reducing overall OPEX.

Use Case would establish ANS Security Zones based on functional or operation requirements to rapidly integrate systems and/or collapse redundant processes.

• Uses the ANS Security Zone construct for cross-domain or intra-domain highly security network communication using Micro and/or Macro network segments.
• Facilitates connecting common functional requirements from M&A activities to swiftly change the resource utilization composition to gain faster consolidation of operations and the subsequent overhead cost reductions.
• Mitigates potential loss of Confidentiality, Integrity and Availability of sensitive information within M&A and/or operational functions.
• Enables an M&A quiet period segment to be established with highly restrictive and secure access requirements without CAPEX costs of physical/virtual systems, architectural planning or deployment requirements while reducing overall OPEX.

Use Case would establish ANS Security Zones based on PCI Card Holder Data (CHD) to carve out and segment the CHD from external or unauthorized access.

• Uses the ANS Security Zone construct to limit access to the CHD to only those processes and authorized users that have the need to access for a specific functional purpose using Micro network segments.
• Facilitates full CHD (PCI carve-out) protection through ANS Security Zone overlays from Point of Sale (POS) systems to payment processing demark and all the supplemental operational processes supporting CHD transactions.
• ANS Security Zone segmentation secures the CHD from loss of Confidentiality, mitigates any potential loss of Integrity and enables operational Availability within extreme threat conditions.
• Meets/exceeds all common PCI compliance requirements for CHD security while reducing overall OPEX.

Use Case would establish an Appliance on-demand ANS Security Zone to restrict access allowing only approved administrator, elevated or appliance system privilege access.

• Uses the ANS Security Zone construct for secure operation and management of appliance remotely or locally using Nano, Micro and/or Macro network segments.
• Facilitates appliance process level access on-demand within a contained and secure communication segment to sensory or other appliance application touch points.
• Enables cross domain private communication without changes to network.
• Mitigates potential Confidentiality, Integrity and Availability of appliance Administration and its sensitive communication functions.

Use Case would establish an on-demand ANS Security Zone for SEIM tools, systems or functions to restrict access to approved administrator or system privileges.

• Uses the ANS Security Zone construct for secure operation and management of SEIM systems remotely or locally using Nano, Micro and/or Macro network segments.
• Facilitates SEIM process level access on-demand within a contained and secure communication segment to event information collection points.
• Enables cross domain private communication without changes to network while reducing overall OPEX.
• Mitigates potential Confidentiality, Integrity and Availability of SEIM administration and sensitive operational functions.

Use Case would setup high capacity and sustainable secure public SDWAN communication channels to replace existing dedicated point to point or broadcast pipes.

• Uses the ANS Security Zone construct to protect a point to point high bandwidth private cross domain communication using Micro and/or Macro network segments.
• Facilitates the creation of on-demand session based telco class communication channels over public networks (internet) to take advantage of a much lower cost structure than dedicated circuits (e.g. Dark Fiber, MPLS, Frame Relay, & Com-Sat).
• Mitigates WAN spin up and spin down timeline and adds a level of security not found in traditional solutions to protect the Confidentiality, Integrity and Availability of sensitive information.
• Enables extending LANs without CAPEX costs of physical/virtual systems, architectural planning or deployment requirements while reducing overall OPEX.
• Applicable to SDLANs for localized communication requirements.

Use Case would establish highly secure communication segments between physical, logical or virtual Data Center devices, components or layers protected from external influence.

• Uses the ANS Security Zone construct to protect communications between critical infrastructure within a physical or virtual data processing facility within the same domain or across domains using Micro and/or Macro network segments.
• Establishes high capacity private sub-circuits which are not visible to other traffic within the same facility.
• Protects against Loss of Confidentiality, Integrity, and Availability (CIA).
• Provides high availability and mitigation against most threats e.g. network flood attacks (DoS, DDoS, APDoS), man-in-the-middle, service/server hopping and most other current day and zero day attacks.
• Enables protected overlaid Administration layer to be established separate from operational data layer with same CIA benefits that conform to specific administrative requirements or resources.
• Enables SDDC segmentation with minimal CAPEX costs of physical/virtual systems, architectural planning or deployment requirements while reducing overall OPEX.

Use Case would establish highly secure and authenticated communications within or from outside a Cloud Service solution.

• Uses the ANS Security Zone construct to protect on-demand communications between cloud services and the respective endpoints with highly dynamic and autonomous polymorphic network segmentation using Nano, Micro and/or Macro segments.
• Establishes highly efficient and secure on-demand session based communications irrespective to geographic location or connection methods as long as endpoints are deemed reachable.
• Enables private communication not visible to others within or outside the same endpoint network segment.
• Protects against external eaves-dropping, spoofing, or other common network attack types.
• Facilitates secure communications within and between all interfaces (virtual or physical) including service, administration and user level ports.
• Mitigates potential Confidentiality, Integrity and Availability of Cloud Services administration and sensitive service functions.
• Enables Cloud Services and functional segmentation with minimal CAPEX costs of physical/virtual systems, architectural planning or deployment requirements while reducing overall OPEX.

Use Case would establish highly secure and authenticated communications within or from outside a Cloud Service solution.

• Uses the ANS Security Zone construct to protect on-demand communications between cloud services and the respective endpoints with highly dynamic and autonomous polymorphic network segmentation using Nano, Micro and/or Macro segments.
• Establishes highly efficient and secure on-demand session based communications irrespective to geographic location or connection methods as long as endpoints are deemed reachable.
• Enables private communication not visible to others within or outside the same endpoint network segment.
• Protects against external eaves-dropping, spoofing, or other common network attack types.
• Facilitates secure communications within and between all interfaces (virtual or physical) including service, administration and user level ports.
• Mitigates potential Confidentiality, Integrity and Availability of Cloud Services administration and sensitive service functions.
• Enables Cloud Services and functional segmentation with minimal CAPEX costs of physical/virtual systems, architectural planning or deployment requirements while reducing overall OPEX.