http://localhost:8080/illumio_basic/index.html Description In this workshop you will explore why network segmentation is an important component for securing your network. We will split a single flat network up into multiple virtual segments in order to address a security threat. Who should attend Anyone in IT who has exposure to Networks or Security Architects Technical leads Operations Engineers What you will learn Lateral movement Network segmentation Prerequisites This workshop can be done entirely through the browser, there are no pre-requisites. Hugo en-us Tue, 05 May 2020 13:15:09 -0400 http://localhost:8080/illumio_basic/1.welcome/index.html Tue, 05 May 2020 13:15:09 -0400 http://localhost:8080/illumio_basic/1.welcome/index.html In this lab we’ll get connected to the lab environment and walk through the premise for the workshop. This is typically the hardest part of the workshop, if we can make it through this then it’s all smooth sailing! How it works The lab is in a private enclave which is not directly accessible over the internet. Workshop attendees are able to connect to specific services using a secure proxy with access controlled by Azure Active Directory. http://localhost:8080/illumio_basic/2.compromise/index.html Tue, 05 May 2020 13:15:09 -0400 http://localhost:8080/illumio_basic/2.compromise/index.html Your team is responsible for providing a web portal used by stakeholders in the field to access publicly available information such as weather and local news. Your website is considered low risk since it provides access to open source data is protected by standard perimeter security including: an advanced stateful firewall network address translation load balancer with DDOS protection An minor update to the website was deployed prior to a long weekend. Unfortunately a debug flag was set and the server was deployed with the developer portal enabled. As the site is considered low risk, the portal is password protected, and the site is behind a firewall support is only available during business hours. http://localhost:8080/illumio_basic/3.harden/index.html Tue, 05 May 2020 13:15:09 -0400 http://localhost:8080/illumio_basic/3.harden/index.html Lateral movement works when security teams focus on keeping people out via perimter security without thinking about what happens should someone get in. Network segmentation is a valuable tool for protecting against the inevitable truth that perimeter security will eventually be bypassed and is a crucial part of a defense-in-depth strategy. We will use Illumio to define a virtual network segment and place our server inside of this segment. This will enable our server to access the resources it needs while also restricting access to unnecessary components of our internal network.