CyberGuard dictionary / Network Security
Network Segmentation
Dividing a network into zones with controlled communication between them.
In simple terms
Different groups of devices are kept apart so they cannot all talk freely to each other.
Technical explanation
Segments may use VLANs, routing, firewalls, or software policies; rules should reflect business flows and be tested.
Segmentation limits which systems can communicate and can slow lateral movement after compromise. The intended boundaries need to be enforced and tested in both directions, including management paths.
Examples in practice
Guest Wi-Fi cannot directly reach the payroll database.
A guest device tries to reach the payroll database and receives no route. A quarterly test also finds an old management rule that bypasses the boundary, so the team removes it.
Why it matters
Segmentation can limit how far an intrusion or error spreads.
VERIFY & LEARN MORE
Sources and further reading
Published 2026-10-15 · Last updated 2026-10-15 · CyberGuard editorial content. Source links provide context; they do not imply endorsement.