Full video: https://youtu.be/AG3DYX4_EE4?si=9Dbnt0g-JJV4F_GL

John Hammond

Proper network segmentation is a fundamental security practice that many organizations overlook. Instead of flat networks where workstations can freely communicate with servers on all ports, networks should be divided into separate subnets with restricted access. Workstations should only reach specific services on designated ports (like 80/443 for web servers or 1433 for SQL servers). This basic segmentation significantly reduces attack surface and prevents threat actors from easily moving laterally across the network after initial compromise, especially through VPN access points.

Basic Network Segmentation