Using a centralized controller to programmatically manage, segment, and monitor network traffic.

Separates the brain (control plane) from the hardware (data plane) and allows organizations to dynamically deploy security policies and enforce segmentation of resources