Topology and segmentation.
WHAT A SIMPLE NETWORK LOOKS LIKE
A router, a switch, and devices connected to it.
All devices can reach each other.
WHY THAT IS SOMETIMES A PROBLEM
Any compromised device can reach every other.
WHAT SEGMENTATION MEANS
Dividing a network so groups of devices are separated.
WHY DO IT
A guest device should not reach business systems Equipment such as cameras should be isolated Payment systems should be separate where practical
HOW SMALL BUSINESSES DO IT
A guest wireless network, which most routers provide Separate networks for equipment, where the router supports it
WHAT LARGER SETUPS USE
Virtual networks configured on managed switches.
WHAT TO CONSIDER
Which devices genuinely need to reach which.
Usually fewer than are currently able to.
WHAT SEGMENTATION COSTS
A little configuration, and some inconvenience.
WHAT IT PREVENTS
One compromised device reaching everything.
WHAT TO START WITH
Separating guests and connected equipment.
