Network Security: 4. Segmentation
Network segmentation is the practice of dividing a computer network into smaller parts, each acting as its own segment. Segmentation improves network performance by controlling how traffic flows among the segments. It enhances security by limiting access between segments and preventing threats from spreading.
In the context of PCI DSS (Payment Card Industry Data Security Standard), network segmentation plays a crucial role in securing sensitive cardholder data. Here’s how it works:
Purpose of Network Segmentation:
Isolation: Network segmentation divides the cardholder data environment (CDE) from other system components.
Security Boundaries: It creates boundaries within the network, controlling access to and from systems that handle cardholder data.
Scope Reduction: By isolating sensitive areas, it minimizes the number of systems subject to PCI DSS controls.
Best Practice Approach:
Start with the assumption that everything is in scope until verified otherwise.
Properly implemented network segmentation reduces the number of system components requiring PCI DSS controls.
Remember, network segmentation enhances security and helps organizations comply with PCI DSS requirements.
Resources and Useful links:
Catalyst 3750-X and 3560-X Switch Software Configuration Guide, Release 12.2(55)SE - Configuring VTP [Cisco Catalyst 3750-X Series Switches] - Cisco
https://www.cisco.com/c/en/us/td/docs...
Netgate Security Gateway Manuals | Netgate Documentation
https://docs.netgate.com/pfsense/en/l...
Cisco ASA 5500-X Series Firewalls - Configuration Guides - Cisco
https://www.cisco.com/c/en/us/support...
FortiGate / FortiOS 7.4
https://docs.fortinet.com/product/for...
SP 800-125A, Security Recommendations for Hypervisor Deployment on Servers | CSRC
https://csrc.nist.gov/pubs/sp/800/125...
SANS Overview | SANS Institute
https://www.sans.org/cyber-security-t...
Chapters:
0:00 - Introduction
0:58 - Network Segmentation
02:02 - Methods
04:43 - Getting Started
06:04 - Example Approach
07:05 - Solutions and Tutorials