Provides instructions for evaluating observed traffic against the current segmentation model before changing segmentation rules on a device.
Use simulation to evaluate how segmentation rules would allow or deny observed traffic before you change the rules.
Simulation is calculated on traffic observed across all segmentation-enabled switches while showing only asset groups observed on the selected switch.
Procedure
-
On the Segmentation page, select a switch.
-
Select the Simulation tab.
-
Review observed, denied, and allowed traffic totals.
-
Use Source, Action, Protocol, and Destination filters to isolate flows in the sankey chart representation.
-
Inspect high-hit source and destination flows.
-
Select Reset to default only when you want to clear simulation filters.
The simulation helps you understand which rules would match the observed communication, the resulting allow or deny action, whether the traffic matched an explicit protocol row or the catch-all behavior, and the switch used for evaluation.