Endpoint security groups in private multi-access edge compute networks

One or more hardware-based non-transitory computer-readable memory devices storing computer-executable instructions which, upon execution by one or more processors disposed in a computing server, cause the server to:

• receive requests through an access network from a plurality of Internet-of-Things (IoT) endpoints to join an enterprise computing environment, in which the access network supports multiple different access protocols;
• in response to the requests, authenticate the IoT endpoints using an authentication process, the authentication process being dependent on the access protocol used by the IoT endpoints;
• subject to successful authentication, associate the IoT endpoints to endpoint security groups, in which a plurality of different endpoint security groups is utilized and the association of the IoT endpoints to the endpoint security groups is based on features and functionalities specific to the IoT endpoints and physical locations within an area served by the access network specific to the IoT endpoints;
• apply micro-segmentation to data traffic of authenticated IoT endpoints based on endpoint security group association;
• and
• apply individual policies to each micro-segment of the micro-segmented data traffic.

A computing device endpoint, comprising:

• at least one processor;
• a network interface;
• a memory operatively coupled to the at least one processor;
• and
• at least one hardware-based non-transitory computer-readable storage device having computer-executable instructions stored thereon which, when executed by the least one processor, cause the endpoint to:
• operate dynamically in a cyclical manner to interact with a computing network controlled by an enterprise, the operations including sending data traffic to the computing network and receiving data traffic from the computing network;
• establish membership in one of a plurality of endpoint security groups, in which membership in a given endpoint security group is based on the functional role or physical location of the endpoint in the enterprise;
• and
• using the network interface, communicate through a locally-implemented access network to instantiate a computing session with the computing network, in which a new session is established with each dynamic operation instance of the endpoint,
• wherein the data traffic to and from the endpoint is isolated from other data traffic in the computing network based on endpoint security group membership, in which data traffic isolation is automatically implemented for each of the plurality of computing sessions established between the endpoint and the computing network.