Network & telephony
Network segmentation (VLAN)
Keeping tills, equipment, office and guests apart
What this is about
When everything is on the same network, an infected computer can also reach the till, the machine and the security camera. We separate areas from one another and allow only the connections that are really needed.
What is included
- Defining areas: office, production, equipment, guests, surveillance
- Setting up VLANs on switches and access points
- Rule set defining who may talk to whom
- Verifying the separation with test connections
- Documentation for later extensions
Process
How we go about it.
Survey
Which devices are there and what do they really need?
Design
Design the segments and rules.
Implement
Change over step by step without stopping operations.
Verify
Prove that the separation holds.
Frequent questions
This is what we are often asked.
Will staff notice any of this?
Normally not. The separation works under the surface.
Do I need new switches for it?
Only if the existing ones do not support VLANs. We check that beforehand.
What does it achieve in a real incident?
An infected office computer can no longer reach machine controls, the till or cameras, which limits the damage considerably.
Sollen wir uns das ansehen?
Ein kurzes Gespräch genügt, um einzuschätzen, was in Ihrem Betrieb sinnvoll ist — und was nicht.