Dara, network security architect at Vantage, turns a flat network where card data, laptops and public web servers sat one hop apart into a zoned design: internet traffic stops in a DMZ, only the application tier reaches the cardholder-data zone, corporate laptops are blocked from it, and firewalls guard every boundary. Beside it, the eight-domain segmentation board: zones and design, firewalls, rule hygiene with over 600 rules and twelve any-any rules removed, identity-based micro-segmentation, east-west control proven by an authorized internal scan, egress filtering, ZTNA remote access and flow-log monitoring.

CY-MID-035Mid Level · Network Segmentation

Network Segmentation & Firewall Engineering — The Segmentation Board

A hands-on mid-level course that carves a flat network into defensible zones. Work the segmentation board - eight domains: Zones & Design, Firewalls, Rule Hygiene, Micro-segmentation, East-West Control, Egress Filtering, Remote & VPN, and Monitoring - designing trust zones, least-access firewall rules, and lateral-movement containment with real rule and flow work. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Design trust zones and a segmentation strategy that fits the risk.
Write least-access firewall rules and keep the rule base clean.
Contain lateral movement with micro-segmentation and east-west control.
Filter egress, secure remote access, and monitor the flows.

Price:৳8,000