You need to segment your network to protect critical business assets. But traditional approaches are complex. Cisco TrustSec software-defined segmentation is simpler to enable than VLAN-based segmentation. Policy is defined through security groups. It is open through IETF, available within OpenDaylight, and supported on third-party and Cisco platforms.