S2 E3 - Breaking down Segmentation with Chad Buey and Sam Baxter

The meeting discussed the importance of segmentation for network performance and security, highlighting Cisco's role in providing solutions and support for implementing effective segmentation.

• The importance of rewatching the recorded meeting on various platforms like YouTube and Apple podcasts is mentioned.
• Micro segmentation using group based policy is considered more granular than VLAN to VLAN segmentation.
• The meeting discussed the topic of segmentation, with a focus on proper segmentation and its importance for network performance and security.
• The evolution of segmentation over the past ten years was highlighted, including the transition to dynamic segmentation and the impact of cloud environments.
• Segmentation was described as having both proactive and reactive components, with a proactive approach being important for implementing zero trust and a reactive approach being necessary to respond to threats and contain potential breaches.
• Segmentation can be enforced at various points in the network, such as through VLANs, zone-based firewalls, and group-based policy.
• Different organizations use different methods for segmentation enforcement, including firewalls and access control lists on switch ports.
• Trustsec and security group tags (SGTs) are effective ways to enforce segmentation and maintain a common policy across the network.
• Cisco plays a key role in segmentation, with products like ISE, duo, and multi-cloud defense.
• Integration of different security solutions makes implementing segmentation easier and more effective.
• Cisco's secure access and secure workload offer additional features for application micro-segmentation and resource connectors for hybrid workers.
• Segmentation is critical for network security and should be planned and designed carefully.

Cisco offers solutions and support to help achieve segmentation goals and limit the blast radius of network breaches.