A network security engineer needs to implement segmentation but is under strict compliance requirements to...

In cloud environments like Azure, theVM-Series NGFWis deployed to createLayer 3 segmentation zonesclosest to the application workloads.

“In Azure, deploy VM-Series firewalls in Layer 3 mode to enforce security policies closest to private applications, meeting strict compliance and segmentation requirements.”

(Source: VM-Series in Public Clouds)

Layer 3 segmentation ensures security policies are enforced at the right boundary to isolate traffic within Azure’s virtual networks.