From the course: ISC2 Systems Security Certified Practitioner (SSCP) (2024) Cert Prep

Unlock this course with a free trial

Join today to access over 24,500 courses taught by industry experts.

VLANs and network segmentation

VLANs and network segmentation

From the course: ISC2 Systems Security Certified Practitioner (SSCP) (2024) Cert Prep

Start my 1-month free trial Buy for my team

VLANs and network segmentation

“

- [Instructor] VLANs are an example of performing logical segmentation of the network. This means that we're relying upon switches to enforce segmentation, even though the devices are connected to the same physical switches. In situations that require added levels of security, we can use physical segmentation by using completely separate network devices and wiring. Now, this is much more expensive than logical segmentation, but it does provide an added level of security. Highly secure applications may also adopt an approach known as micro segmentation, where very small groups of devices or even individual devices are placed on their own network segments. This forces all traffic to pass through a firewall, allowing very granular filtering. Virtual LANs, or VLANs, are an important network security control. VLANs allow us to logically group together related systems, regardless of where they exist on the network. When we…

Contents