imeter problem. The answer is based on trust in layers of protection, but in today's ASTRA model, the controls will be implemented in new and novel ways where the security protection is dynamically aligned and provisioned to the business application using concentric rings to provide a seamless and intelligent security model for the enterprise. Micro-perimeter controls are required to secure cloud platform environments and especially critical initiatives like network cloud. These micro-perimeters provide security in east-west (VM to VM) communications as well as north-south (outside to inside) communications. The ASTRA security ecosystem and framework enables these micro-perimeter virtual security protections to be enabled effortlessly via APIs and automatically orchestrated using intelligent provisioning. The result is microperimeters protecting each VM, the protection of collections of system (tenant and projects), and then extended to the entire compute center. In summary, security is enable around each VM, each application, and around the compute fabric. ASTRA enables this through SVF as well as dynamic real-time security controls in response, adapting to the ever-evolving threat landscape. For example, based on security analytics using big data analysis, ASTRA enables virtual security functions on-demand, leveraging the SDN-enabled network, dynamically mitigating security threats. Let us look at each layer of the security defense in depth starting with the microperimeter and working outward to tenant or project level and finally to the classic perimeter. The finest grain security control is to establish intelligent micro-security protections right on top of (or around) each computing resource-conceptually as "a ring around" each resource, with the protections spe- cifically required for that resource. These microperimeters are automatically provisioned when the resource is created and carry the necessary policy controls for the work that the resource provides. This "workload" policy management is established 