Segmentation (Network)
- •
def
- •
isolating devices into their own networks or VLANs, so a breach has limited scope rather than spreading across the whole environment
- •
- •
implementation
- •
internal [next-generation firewalls (NGFWs)](Next-Generation Firewall (NGFW)) can block unwanted traffic between VLANs and identify malicious internal traffic; an air gap may be required if a system genuinely can't be patched
- •
- •