| CPC H04L 67/1008 (2013.01) | 19 Claims |

|
1. A device, comprising:
a processor;
at least one network interface controller configured to provide access to a network; and
a memory communicatively coupled to the processor, wherein the memory comprises a workload protection logic that is configured to:
establish a workload protection solution onto a network comprising a plurality of network devices;
deploy a plurality of agents onto one or more network devices;
receive telemetry data;
evaluate a subnet boundary associated with the telemetry data;
define one or more labels based on the subnet boundary;
assign the one or more labels to reflect any one of a functional, security, and communication characteristic corresponding to the subnet boundary; and
generate at least one policy recommendation based on the received telemetry data.
|