Network Segmentation

Network segmentation limits lateral movement using VLANs, internal firewalls, granular ACLs, and ideally identity-based micro-segmentation (zero trust) to isolate workloads and minimize the blast radius of compromises.