Questions tagged [segmentation]

Questions related to network or other resource segmentation, i.e. creating a separate IP networks to isolate and control network traffic.

Filter by
Sorted by
Tagged with
0 votes
0 answers
78 views

Network Segmentation - Single Firewall VM vs Multiple

I am currently implementing a new network with different segments. The separation of those segments is achieved using VLANs. To enable some segments to communicate with each other and to be reached ...
valkyrie's user avatar
1 vote
0 answers
448 views

Is it safe to use conntrack on Linux bridge devices?

I have a server with a number of Linux bridge devices for use with groups of virtual machines - some internet-routed, some intentionally unrouted. I have stateful firewalling in place for traffic ...
anx's user avatar
  • 370
0 votes
1 answer
601 views

What are the security issues can be exploited to VLAN switches to compromise network?

While VLAN switches can be used to provide security between network segments using VLAN filtering rules. Is there any possibility to have an security issue which is exploited to VLAN switches?
Sivaram Rasathurai's user avatar
0 votes
1 answer
110 views

Debating between architecture options for offline updating of Linux machines in a vertically segregated network

My coworker and I are discussing the pros/cons between two potential architecture options, and I would like to gather feedback on which option is better and why. First, a description of the ...
Peter Adamson's user avatar
2 votes
2 answers
1k views

AWS serverless architecture compliance with PCI DSS 11.3 penetration testing segmentation

I am wondering how to comply with PCI DSS requirements (11.3) to test segmentation controls using penetration testing in AWS serverless architecture. We are using components such as AWS Lambda, AWS ...
user1563721's user avatar
  • 1,119
2 votes
0 answers
900 views

Management network access from internet-accessible router

In my company, we have a firewall as an edge device to the internet. Behind this central firewall we have management network. We now have to put a router in front of central firewall, as part of some ...
John's user avatar
  • 167
0 votes
1 answer
346 views

Segmenting Network: Zone location of a multipurpose NAS

I am currently segmenting my home network into several networks and zones due to the fact that my cheap router keeps all devices (private, smart home, entertainment) in one network (without a guest ...
Samuel's user avatar
  • 728
-3 votes
2 answers
318 views

What are the risks of having a server with 2 interfaces each one in a different security zone?

In an organization usually have production and preproduction environments segregated in different physical or virtual machines. However, this new appliance is very expensive and the organization is ...
Eloy Roldán Paredes's user avatar
1 vote
2 answers
233 views

Is it reasonable to make mandatory inside an organization (in the internal network) that all traffic were encrypted?

Is it reasonable to make mandatory that all traffic were encrypted inside an organization (in the internal network)? Usually, in the LAN of an organization some protocols are plain text, for example, ...
Eloy Roldán Paredes's user avatar