Security · Security Architecture
Network Security
Controls that constrain how traffic moves: segmentation, filtering, inspection, egress control and monitoring.
IntermediateUpdated 2026-09-01
Overview
Network security has shifted from a hard perimeter to layered segmentation and egress control. Inbound exposure is now smaller and better understood than outbound, which is where command and control and exfiltration live.
The most effective, least glamorous controls are blocking workstation to workstation traffic, restricting outbound destinations, and instrumenting DNS.
Security considerations
- Default deny egress with explicit allowances, and log denies.
- Segment servers, users, management, guest and IoT with inspected boundaries.
- Monitor east west traffic; perimeter only visibility misses lateral movement.