- Flows, routes, zones, and destinations
- Segmentation and boundary policy
- Service and workload communication
- Ingress, egress, and lateral movement
NETWORK SECURITY · OLLANDI DIP
Monitor communication paths, segmentation, service reach, and movement across cloud, campus, data center, and hybrid networks.
Specialized network security that contributes live evidence and domain actions to Ollandi’s cross-domain defense loop.
WHAT THE NETWORK DIP DOES
From domain telemetry to a decision operators can use.
- Rare or unauthorized destinations
- Segmentation-policy violations
- Command, control, or exfiltration patterns
- Unexpected lateral movement between services
- Which identity, device, or workload opened the path
- Whether the route is expected for the service
- What other systems are reachable
- The likely effect of blocking or isolating traffic
- Increase evidence capture
- Apply a temporary network block
- Restrict egress or service communication
- Escalate wider isolation when required
COVERAGE
The context this DIP brings into Ollandi.
The DIP normalizes domain evidence with source and time preserved. Ollandi then relates it to other DIPs, service dependencies, policy, authority, and historical state.
- Flow and firewall telemetry
- Routes and network topology
- Segmentation policy
- DNS and destination context
- Identity, endpoint, and workload signals
- Service dependencies
SOURCE
ZONE
ZONE
POLICY BOUNDARY
SERVICE
DESTINATION
DESTINATION
ONE INCIDENT · COMPLETE LOOP
See how the Network DIP moves from signal to verified outcome.
A trusted workload begins communicating through a rare external path.
Ollandi tests an approved service change against misconfiguration, data movement, and attacker control.
A temporary localized block is validated against service dependency and rollback requirements.
The path closes without wider disruption and the result is recorded.
PART OF OLLANDI - NOT ANOTHER SILO
The DIP supplies depth. Ollandi supplies the shared state, threat reasoning, action validation, and evidence.
Domain state→Cross-domain hypothesis→Policy-checked action→Verified evidence
See the complete Ollandi lifecycle