Network Segmentation

Design · Intermediate

Dividing a network into zones so a compromise or failure in one zone does not automatically grant access to the others.

Workstations, servers, and management interfaces should not be one flat neighborhood. Rules between the zones are what make the drawing real.

Example: Point-of-sale systems can reach their payment server but cannot browse the corporate file shares.

Common misconception

A separate VLAN without a filtering rule is weak segmentation. The policy between zones is the control.