What is north-south traffic?
North-south traffic describes data moving in and out of a network, typically between internal systems and external services on the internet.
This is the most visible type of traffic in an organization and is where traditional security controls such as firewalls, proxies, and web gateways operate. It represents the boundary between internal environments and the outside world, making it a key control point for protecting systems and data.
In practice, north-south traffic includes how employees access external services, how customers reach applications, and how data is exchanged with external systems.
A simple way to understand it is to think of the main entrance to a building. All traffic entering or leaving must pass through this point, where access and activity can be controlled.
Sicra and north-south traffic
North-south traffic is a core concept in network security and architecture work.
At Sicra, it is used to assess how organizations expose services, control traffic, and manage risk at the boundary between internal and external systems.
This is especially relevant when analyzing attack surface, designing security controls, and building architectures that balance accessibility and security.
Services
Read more about "Network security assessment" here >
Read more about "Network capability assessment" here >
Read more about "Network architecture" here >
Read more about "SASE architecture" here >
Related terms: Network, Firewall, DPI (Deep packet inspection), SWG (Secure Web Gateway), SASE, Zero Trust, SD-WAN (Software-Defined Wide Area Network), Network segmentation