Effective Threat Containment with Arista Macro-Segmentation