Zone: Field notes

The Perimeter One blog

Practical notes on firewalls, microsegmentation, SASE economics, AI security, and managed operations. Product claims are tied to dated sources, and opinion is labeled as opinion.

Every summary below is free to read. The full articles ask for your name and contact details once — one form covers all of them, and the details stay on our own server.

2026-09-07 9 min read Full article · one-time form

AI Is Just Traffic: Network Controls for the Four AI Flows

Inventory the four AI flows, map them to controls you already own, apply five policies that need no new products, and report four quarterly metrics.

AI Security Agentic AI Segmentation SSE
2026-07-23 5 min read Full article · one-time form

Choosing a Managed Security Provider: The Questions That Matter

A practical checklist for provider access, logging, incident roles, subcontractors, service levels, and exit terms, based on CISA and NIST guidance.

Managed Services MSSP Vendor Selection Risk Management
2026-07-14 5 min read Full article · one-time form

SASE or On-Premises? Build the Cost Model Before You Pick

There is no universal crossover point. Compare complete designs using current quotes, measured traffic, staffing, migration overlap, and contract terms.

SASE SSE ZTNA Cost Analysis
2026-07-02 4 min read Full article · one-time form

pfSense, OPNsense, nftables, or VyOS? Start With the Job

Two appliance-style platforms, a Linux packet-filtering framework, and a network operating system compared by role, support, and operating model.

Open Source pfSense OPNsense nftables
2026-06-20 4 min read Full article · one-time form

Check Point Firewalls: What Holds Up in 2026

A careful look at stateful inspection, R82 management, policy verification, Maestro, and migration planning without unsupported market claims.

Firewalls Check Point NGFW R82
2026-06-09 4 min read Full article · one-time form

Palo Alto’s AI Security Stack: Three Products, Three Jobs

Workforce AI access, runtime protection for AI applications, and model or agent security require different controls and different tests.

AI Security Palo Alto Networks Prisma AIRS LLM Security
2026-05-15 4 min read Full article · one-time form

Akamai Guardicore Segmentation: What to Test Before You Buy

Dependency mapping, labels, agent and agentless coverage, enforcement, rollout, and a proof-of-concept plan tied to current documentation.

Microsegmentation Zero Trust Guardicore Akamai

Start with an assessment

Tell us what you run, what needs to change, and which constraints cannot move. We will help define a practical next step.

Start the conversation