Network Segmentation and Microsegmentation

Limit lateral movement through network isolation.

Segmentation limits blast radius of breaches.

Segmentation Levels

- Network segmentation: VLANs, subnets
- Microsegmentation: Workload-level
- Application segmentation: Service-level

- Define trust zones
- Map data flows
- Implement least privilege
- Monitor cross-segment traffic
- Regular policy review

- VMware NSX
- Illumio
- Guardicore (Akamai)
- Cisco ACI
- Cloud-native security groups