MSS-G or Group-Based Segmentation Security is a security feature that allows users to classify network endpoints into segments and define forwarding policies between segments. A given segment contains a set of hosts that should have identical security properties within the network.