Scalable and on-demand multi-tenant and multi region secure network

A computer implemented method of applying security policies in a cloud based network segmented to a plurality of virtual private networks based on Internet Protocol (IP) segmentation, comprising:

• using at least one processor configured for:
• receiving at least one security policy defined for at least one of a plurality of private virtual networks of at least one multi-tenant multi-regional cloud based network segmented to a plurality of segments each serving as a respective one of the plurality of private virtual networks, each of the plurality of segments is mapped by a respective IP address range which is a low layer IP address range and is non-conflicting with the low layer IP address range of any other of the plurality of segments;
• deploying automatically at least one security engine configured to apply the at least one security policy for at least one of a plurality of client devices accessing the at least one private virtual network by:
• intercepting at least one packet transmitted by the at least one client device which is assigned an IP address in the IP address range mapping the respective segment serving as the at least one virtual private network, and
• identifying the IP address of the at least one client device in the at least one intercepted packet, and
• applying the at least one security policy according to the identified IP address.

A computer program with a program code for applying security policies in a cloud based network segmented to a plurality of virtual private networks based on Internet Protocol (IP) segmentation, comprising a non-transitory medium storing thereon computer program instructions which, when executed by at least one hardware processor, cause the at least one hardware processor to:

• receive at least one security policy defined for at least one of a plurality of private virtual networks of at least one multi-tenant multi-regional cloud based network segmented to a plurality of segments each serving as a respective one of the plurality of private virtual networks, each of the plurality of segments is mapped by a respective IP address range which is a low layer IP address range and is non-conflicting with the low layer IP address range of any other of the plurality of segments;
• deploy automatically at least one security engine configured to apply the at least one security policy for at least one of a plurality of client devices accessing the at least one private virtual network by:
• intercepting at least one packet transmitted by the at least one client device which is assigned an IP address in the IP address range mapping the respective segment serving as the at least one virtual private network, and
• identifying the IP address of the at least one client device in the at least one intercepted packet, and
• applying the at least one security policy according to the identified IP address.