The Aruba CX 10000 Distributed Services Switch with embedded AMD Pensando DPUs offers organizations an option to implement effective network segmentation by applying stateful firewall inspection policies at the switch port level, without having to route traffic to an external firewall for inspection. The Aruba CX 10000 is designed for securing East-West traffic and providing effective isolation for individual hosts or groups of hosts in the same rack even when those hosts are in the same L2 broadcast domain. This capability can be leveraged for minimizing the scope of Payment Card Industry Data Security Standard (PCI DSS) compliance as well as for meeting multiple PCI DSS requirements. The ability to implement segmentation at the port or host level ultimately reduces the cost and operational burden required to achieve and maintain PCI compliance, as well as validate compliance annually