Replaced an Overly Complex Microsegmentation Solution Without Disrupting Critical Financial Systems

Challenge

Baron Funds oversees ~$49B in client assets, where continuity and access integrity are extremely critical. After multiple penetration tests uncovered the need for network segmentation, Baron Capital leveraged firewalls for macrosegmentation. Still, they needed a more granular approach – other microsegmentation solutions were too complex and disruptive for an environment responsible for protecting sensitive financial data and supporting daily investment operations.

We tried NSX from VMware and that proved to be too complex. We looked at a couple of other companies, and they broke the network.

Henry Mayorga, CISO at Baron Capital

Solution

Zero’s radically simple approach to microsegmentation, managing native firewalls for non-disruptive protection, seemed too good to be true after other solutions left Baron Capital disappointed. After testing the product, Mayorga and his team realized Zero Networks had made “too good to be true” automated microsegmentation a practical reality.

My first impression of Zero Networks was that it was too good to be true. I had already thought about the possibility of managing the Windows firewalls for segmentation and I knew it was very difficult to do, and I didn’t think it would work. But then we actually tested it.

Henry Mayorga, CISO at Baron Capital

Result

With Zero Networks, Baron Capital gained comprehensive visibility into their network, uncovering (and addressing) unnecessary connections. Zero’s agentless architecture and robust automation engine made deployment easy and seamless, delivering the granular microsegmentation Baron Capital needed to strengthen protection around the systems supporting its ~$49B investment operation with none of the legacy complexity.