← Network Security learning pathNetwork Security · Module 9 of 10
Network segmentation and hardening
Limit damage by dividing and hardening networks.
📖 Key ideas
- Segment networks with VLANs and subnets (users, servers, IoT, guests).
- Control traffic between segments with firewalls/ACLs.
- Disable unused ports and services.
- Patch routers, switches and firmware.
- Use secure management: SSH, separate management network.
💡 Real-life example: Segmentation is fire doors in a building: a fire in one room doesn't spread everywhere.
VLANVirtual LAN separating traffic
ACLAccess Control List
HardeningReducing attack surface
Lateral movementAttacker moving between systems