How Visibility and Segmentation Can "Improve Your Sleep"
summary
Mondi runs Illumio agent-based microsegmentation across ~110 sites with 10–15k endpoints and about 6,000 external companies accessing systems, mapping flows into the Illumio PCE (six weeks of flow history) to convert a spaghetti of connections into application-aligned policies. Deployment per application usually finishes in two to four weeks, lateral traffic drops (formerly ~80–90% waste), and a red team reaches SAP in 17 minutes without Illumio but gives up after a week with it active.
AI-written summary · about
chapters (19)
- 0:00Introduction
- 3:13Thomas Vavra from Mondi
- 7:27Global paper packaging ops
- 12:31Cybersecurity threats in manufacturing
- 15:21Remote and legacy site challenges
- 18:10Acquisitions and outdated infrastructure
- 20:41Threat landscape and attack vectors
- 21:46Securing suppliers and external access
- 23:10Limitations of WAN segmentation
- 27:12Why microsegmentation was needed
- 30:24Illumio’s segmentation approach
- 32:15Identity-based segmentation and zero trust
- 35:30Deployment process and rules
- 41:57Balancing security and functionality
- 44:42Vendor challenges and deployment
- 45:48Q&A: Visibility and data collection
- 47:35Q&A: Firewalls and threat detection
- 48:40Q&A: Cyber insurance impact
- 49:43Closing remarks
related talks
24mMicro-Segmentation's Impact on Cloud Environments
14mConfidence in cloud security: One step ahead of cyber threats
12mTransparent Microsegmentation in Smart Home IoT Networks
19mReal-Time Edge Observability: Security Monitoring
49mVisibility Without Borders: NETSCOUT to help migrate apps to
49mBuilding digital resilience with unified security and observability
40mOptimizing Operations: Simplification, Visibility, Response and Automation
17mPrivateEye: Scalable and Privacy Preserving Compromise Detection in the Cloud