Guidelines For Designing Network Segments For Security

By Author: Willsimith
Total Articles: 48
Comment this article

After you have classified data and identified who needs access to the data, you can begin the process of determining where the network should be segmented. Providing greater network segmentation makes it easier to provide good network security by designating areas between which border controls can be placed. It also makes it easier to provide stronger physical security controls. In some cases, where network segmentation cannot occur, stronger physical security controls can be implemented. Follow these guidelines to design network segments for a 70-291(http://www.mcsa-70-291.com) Exam:

Ignore existing segments. You will find that the network is already segmented for various reasons, but you should at first ignore these divisions and determine the

best segmentation design for security. After you have classified data and identified who needs access to the data, you can begin the process of determining where the network should be segmented. Providing greater network segmentation makes it easier to provide good network security by designating areas between which border controls can be placed. It also makes it easier ...
... you can begin the process of determining where the network should be segmented. Providing greater network segmentation makes it easier to provide good network security by designating areas between which border controls can be placed. It also makes it easier to provide stronger physical security controls. In some cases, where network segmentation cannot occur, stronger physical security controls can be implemented. Follow these guidelines to design network segments for a

Design natural boundaries, such as those between the Internet and your networkand those between partner networks and your network.

Consider segments to form an area around sensitive data (such as financial data,research data, and so on). This can prevent unrestricted movement of data in and

out of the area.

Consider placing on a separate network the computers used by administrators to administer the network.

Consider separating servers and workstations. This technique can be effective in preventing worms and other malicious code that might infect user systems from

infecting servers. You accomplish free Microsoft exam questions(http://www.examshots.com/vendor/Microsoft-1.html) by using border controls to restrict traffic.

Separate developers (computer programmers, software developers, software architects, and other members of the software development teams) from the gen¬

eral population, creating a separate development network.

Create a separate test network that is not connected to the production network.

Review current network segmentation, and align it with recommendations.

Considerations for Choosing Border Controls

After you design network segments, you must review the border controls that are in place and then choose effective border controls for new network segment junctures. Many border controls are available for managing data flow between segments of your network. The following sections describe what you should know as you begin to have a IT Exams（http://www.buyitexam.com）
to choose border controls.