Skip to content

Network segmentation

Dividing a network into zones with controlled traffic between them, so a compromise in one does not reach the others.

A flat network means anything that lands on a reception PC can reach the server, the backup appliance, and the cameras. Segmentation forces an attacker through choke points where they can be filtered and observed.

The highest-value separations for most businesses are backup infrastructure, building systems and IoT, guest wireless, and any regulated workload with its own compliance boundary.

Where this comes up

Network segmentation sits inside our networks and infrastructure work. If you are trying to work out what this means for your own environment rather than in the abstract, that is the page worth reading next, and a short call will get you a straight answer faster than either.

Managed IT services Ask an engineer

Related terms

VLAN A logical network created on shared physical switching, keeping groups of devices separated from each other. Lateral movement The stage where an attacker moves from the machine they first landed on toward the systems they actually want. Zero trust A security model that verifies every request on its merits instead of trusting anything because of where it came from. DMZ A separate network zone for systems that must be reachable from the internet, isolated from the internal network.

More in networks and infrastructure

802.1XBandwidthDeep packet inspectionDHCPDKIMDMARCDNSFirewall

Back to the full glossary →

Want this explained against your own setup?

Definitions only get you so far. Book a short call and we will tell you whether this actually matters for your business, and what we would do about it.

Call (855) 737-9500 / (480) 573-3349

Email [email protected]

15-minute response on critical issues, 24/7. Onboarding in two to three weeks.

We reply within one business day. No spam, no pressure.