Chapter 1: Foundation

Design and Implementation

• Architecture
• Segmentation
• A more secure design uses multiple segments

• Figure 7-19  Segmented Architecture.

Design and Implementation

• Architecture
• Segmentation
• Separate access is another way to segment the network.
• For example,
• suppose a network is being used for three purposes: using the "live" production system, testing the next production version, and developing subsequent systems.
• If the network is well segmented, external users should be able to access only the live system, testers should access only the test system, and developers should access only the development system.
• Segmentation permits these three populations to coexist without risking that, for instance, a developer will inadvertently change the production system.