← Blog
Network Segmentation: Why Users, Cameras, and Servers Should Not Float Together
How VLAN segmentation limits the consequences of an incident and why it is the first sensible security measure for most companies.
In many companies, everyone hangs on the same network: employee computers, guest Wi-Fi, IP cameras, printers, IoT devices, and servers. As long as no one exploits a weak camera, it seems to work. When they do, the damage is unnecessarily high.
Benefits of Segmentation
- Limits the consequences of an infection or compromised device
- Separates guests from business systems
- Enables different rules for different segments
- Simplifies troubleshooting
Sensible VLANs for a Small Business
- Users (workstations, laptops)
- Servers and business systems
- Printers and scanners
- IoT / cameras
- Guest Wi-Fi (completely isolated)
Practical Pitfalls
- 'Any-any' rules between VLANs mean that segmentation does not exist
- Printers often only need access from the user VLAN
- Backup must reach the servers — not the other way around
- DNS and NTP must work in all segments
#VLAN#network#security
Related posts
IT Consulting
Business Continuity Plan: What a BCP for SMEs Must Include
What do we do if nothing works tomorrow morning? A 10-page BCP is all you need.
IT SupportIT Infrastructure Documentation: What Needs to be Recorded and Why
If it isn't documented, it doesn't exist. The minimum documentation scope every company needs.
CybersecurityTwo-Factor Authentication: Implementation Without Employee Resistance
MFA stops the vast majority of stolen password attacks. Learn how to deploy it quickly and without complaints.