Ravi Sir's Cyber Security Cards › Revision Cards
Network Segregation – IT / OT Zones, Jump Hosts, firewalld
Network Segregation – IT / OT Zones, Jump Hosts, firewalld Keeping office IT and factory/IoT (OT) on separate network zones , connected only through a controlled jump host . A flat network means a hacked camera can reach the billing database. Segregation stops that jump. Use firewalls (firewalld or
Read card text
What this card says
What it is
Keeping office IT and factory/IoT (OT) on separate network zones, connected only through a controlled jump host.
Why it matters for security
A flat network means a hacked camera can reach the billing database.
Segregation stops that jump.
How
Use firewalls (firewalld or security groups) between zones.
Allow only the exact traffic needed, in one direction where possible.
| Red team (attacker) does | Blue team (defender)… |
|---|---|
| Lands on camera; scans .0/24 for 445/3306 | VLAN + firewall inter-zone deny; alert on camera→DB flows |
| Phishes IT user; RDP straight to HMI | Jump host only; no HMI on IT VLAN |
| Brings laptop into OT switch "for Wireshark" | Port security / 802.1X ideas; change control |
Learn more in the lesson: 43.5 Network Segregation – IT / OT Zones, Jump Hosts, firewalld