You can use Cisco APIC to configure Microsegmentation with Cisco ACI. Microsegmentation gives you the ability to assign endpoints to special endpoint groups, or EPGs, based on various attributes. These attribute-based EPGs are called microsegments and function as logical security zones because you can apply filtering and forwarding policies to them.

See the chapter "Microsegmentation with Cisco ACI" in the Cisco ACI Virtualization Guide for information about using and configuring microsegmentation.