EpiForce allows an organization to create an identity-aware network that protects data and network communications by isolating users, servers, clients and mission critical data into security zones, regardless of system platform or physical location. Access to these zones is based on policy and traffic is selectively encrypted. EpiForce provides flexibility and efficiency not available with traditional network security solutions. EpiForce builds an identity-aware network through a software-based architecture that enables two critical disciplines: Logical Security Zoning Based on Identity controls access to resources by isolating users, virtual or physical servers and clients into one or more private communities without regard to their physical or virtual location. For increased flexibility, zones may be based on users, user groups, IP addresses or ranges, ports and geographic regions - almost any factor. Policy-Based Encryption of Data in Motion Based on Identity offers a superior alternative to the rigid all-or-nothing encryption approaches common today. It secures communications between users, VMs, physical servers and clients based on policies dictated by the security administrator. EpiForce is centrally administered to manage security policies for users and systems from anywhere through a single console. Software resides on the server or client and is available for Windows, UNIX, Linux, VMware and LPAR systems. By operating at the network layer, it is transparent to users and applications – making EpiForce quicker to deploy and less costly to manage than security appliance solutions.