What do you call a segmented network?
-
We are looking for a more catchy way to talk about segregated, segmented, or otherwise firewalled networks. Such as a manufacturing network or a network where you hide old out of support servers.
What do you call yours?Whoever has the best one wins a genuine
Thanks,
-
@AndyRH I would think it assumed by anyone in the field if talking about really anything other than some home network or a very tiny smb that it would be segmented.. If its not is really the only time you would call out that they have a flat network.
-
@johnpoz I should have explained better. Where I work a wrong name was used to describe a firewalled network. The network team and others including me feel the name is horrible and should not ever be used as it is a finical term. We have been trying to think of or use something more appropriate for these networks. We have dozens of them and the number is going to increase next year when we start isolating old OS's.
I thought this group might have an acceptable term or at least it was worth a shot. -
I'm not sure of the ask here.
At $WORK we have parts of the network dedicated to QA resources, parts dedicated to performance testing, parts dedicated developers all part of the overall corporate network. But some of those parts (perf testing, QA) are isolated so they don't interfere with managers accessing Jira.
All are behind a firewall or two.I've always considered them isolated unless a specific route has been added to bridge them.
-
@AndyRH not sure of the ask either. I have worked at places where different layers security were called out tier 1 or 2 or 3, etc. Or they might be called security zone, or local zone..
Normally in a tiered model.. You can talk up, but you can't create connections inbound to deeper, and cross tier is fine too, etc..
Yeah its good idea to come up with a strategy, of what can talk to what with different levels of approval, etc. And everyone should be clear on the rules and layout of the network. A diagram showing the different zones/tiers and what is included in what is great asset that everyone that has anything to do with IT should have access too.
You could even use your own ip scheme to help, for example maybe 192.168.100 could talk to anything <100 but to talk to stuff above 100 needs special permission, etc..
-
Sorry, this has nothing to do with strategy and why, just the name. Something users can understand that is less cumbersome than segmented network or isolated network.
Next year when I have to tell my users that their old Linux servers have to be moved to better protect them and the company I would prefer not to say we are going to put them on an firewalled network.I figure someone has come up with a better name.
-
@AndyRH but firewalled is what they are - you put them behind a firewall or you put them on a protected network.. etc..
Why should the users freaking care? I have never worked at a company where you told the users anything about security or moving of server.. Service X will be down over the weekend, etc.. Is about the most they got.. If they asked you might tell them yeah moving the service to a new server, moving the server to a new location..
Users don't have a clue to what a firewall even is, or a network segment in the first place.. Throwing in such terms is just like speaking gibberish to them..
Might as well say sldjfsldf sjfojsdfj shoasdhjdf theh Service X lajdfnslslsfdhoet down alajlsjdjflsjdf til monday..
-
This post is deleted!