<<Control Measure>> Ensure only known, allowed traffic or legitimate application communication is allowed by segmentation ()