Source: https://www.cisco.com/c/dam/en/us/products/collateral/security/network-visibility-segmentation/ise-use-case-segmentation-aag.pdf