Aside from financial and operational impacts of re-architecting the network, the mechanics of segmenting development from production wouldn’t work. With a large number of multi-tenant hosts running multiple instances of the same process, VLANs were ineffective. Software-defined networking solutions could not be deployed successfully. The last option was moving development, but no one could explicitly define what development was, and the risk of breaking production was too great.
The bank’s infrastructure team saw the need for a host-based solution leveraging native application firewalls that follow the workload regardless of where it runs. But when they attempted a homegrown solution leveraging iptable batching, they struggled to scale it in the Windows portion of their environment.
The bank chose Illumio Core™ (formerly ASP) for its ability to segment development from production environments without requiring network changes. It is now fully automated and operated overseas by less than one full-time equivalent employee.