🧱

Network Segmentation

Medium

Free preview · 2 of 5 steps

Security zones: trust boundaries

Network segmentation divides infrastructure into zones with different trust levels:

- Internet — untrusted, hostile - DMZ — semi-trusted, public-facing servers - Corporate LAN — trusted, employee devices - Internal — highly trusted, databases and secrets - Guest/IoT — isolated, untrusted devices

A firewall enforces which zones can talk to each other, on which ports.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step