Illumio has the ability to simplify Zero Trust segmentation across all OS platforms modifying native OS firewall policies across hybrid IT environments while providing immediate visibility around all managed workloads.  The Illumio platform is available to work in Cloud Native as well as traditional on-prem / customer hosted environments that is capable of being automated and scalable.  It works with container and legacy systems. Also, the solution can be a choice for Air Gap environments.

Visibility & Containment Are critical to the segmentation journey (please see sample native visual with using Illumio):

https://www.illumio.com/resource-center/illumio-architecture