Protecting employees on the move with cloud-friendly application segmentation