Protect against lateral movement with segmentation
Lateral movement works when security teams focus on keeping people out via perimter security without thinking about what happens should someone get in.
Network segmentation is a valuable tool for protecting against the inevitable truth that perimeter security will eventually be bypassed and is a crucial part of a defense-in-depth strategy.
We will use Illumio to define a virtual network segment and place our server inside of this segment. This will enable our server to access the resources it needs while also restricting access to unnecessary components of our internal network.