In short: Zero Networks Network Segmentation is agentless microsegmentation for servers and workstations. It learns network traffic for around 30 days, generates least-privilege firewall rules enforced through each machine's built-in host firewall, and keeps admin ports closed until a user passes just-in-time MFA. Forever Systems licenses it per server and per workstation, billed monthly.
What Zero Networks Network Segmentation is
Network Segmentation is Zero Networks' core product. It places a firewall boundary around every server and workstation so that each can communicate only with the systems it genuinely needs. If ransomware or an attacker compromises one machine, they cannot simply move on to the next over RDP, SMB, WinRM or RPC.
What sets it apart from traditional segmentation projects is automation. Instead of drawing up rules by hand, redesigning VLANs or installing agents, Zero Networks discovers your assets, watches real connections during a learning period of around 30 days, then proposes rules based on what it has seen. Rules can be simulated against live traffic before enforcement, and new assets are picked up automatically.
What is included
| Capability | What it does |
|---|---|
| Automated discovery | Finds servers, workstations and other assets across on-premises and cloud environments |
| Learning mode | Observes real connections and builds least-privilege rules from actual traffic |
| Agentless enforcement | Applies policy through each machine's built-in host firewall, with no agent to install |
| Just-in-time MFA | Keeps privileged ports closed until the user completes MFA, then opens them for a limited time |
| RPC firewall | Controls remote procedure calls that attackers commonly abuse |
| Domain controller hardening | Restricts access to your most critical identity infrastructure |
| Network map | Visual view of connections between assets |
MFA can be delivered through your existing identity provider, with Zero Networks naming providers such as Duo and Okta as examples, so users authenticate the way they already do.
How it is licensed: servers and workstations
Network Segmentation is licensed per protected machine, with servers and workstations priced separately.
| Option | Licensing unit | Typical use |
|---|---|---|
| Network Segmentation for servers | Per server | Domain controllers, file, application and database servers, on-premises or in the cloud |
| Network Segmentation for workstations | Per workstation | Desktops and laptops, to stop ransomware spreading between users |
Both are billed monthly on your Forever Systems invoice. Many organisations protect servers first and add workstations later; you only pay for what is protected. For devices that cannot be managed at all, such as industrial controllers, see OT and IoT segmentation. Ask us for a quote based on your server and workstation counts.
Requirements and deployment
Zero Networks is managed from its web console and connects to your environment and directory so it can discover assets and manage their host firewalls. Because enforcement uses the firewall already in the operating system, there is nothing to install on each machine and no network redesign.
We deploy in stages:
- Connect Zero Networks and discover your assets.
- Run the learning period and review proposed rules with your application owners.
- Enforce on an initial group, often domain controllers and critical servers.
- Switch on just-in-time MFA for admin protocols.
- Extend to remaining servers and workstations.
We confirm detailed operating system and identity provider requirements against Zero Networks' current documentation when we scope your project.
Who it suits and how we help
Network Segmentation suits organisations worried about ransomware spreading across their estate, those asked by insurers or auditors for lateral movement controls and MFA on privileged access, and IT teams that have previously abandoned segmentation because it was too much manual work. It complements, rather than replaces, endpoint protection and your perimeter firewalls.
We scope, deploy and run the platform with you, review rules before enforcement and handle new assets and licence changes. Add Identity Segmentation to restrict privileged accounts too, or go back to the Zero Networks overview.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is Zero Networks Network Segmentation agentless?
Yes. It uses the host-based firewall built into each operating system to enforce policy, so there is no agent to install on servers or workstations.
Are servers and workstations licensed differently?
Yes. Network Segmentation for servers is licensed per server and for workstations per workstation, and you can buy either or both.
How long does the learning period take?
Zero Networks observes connections for around 30 days before generating rules. We review the rules with you before anything is enforced.
Does it work in the cloud as well as on-premises?
Yes. Zero Networks protects assets on-premises and in cloud environments from the same console.