https://www.securityin45.com/tags/duo/Recent content in Duo on Security in 45 | Cisco Security PodcastHugoen-usWed, 25 Mar 2026 00:00:00 +0000https://www.securityin45.com/blog/2024-12-13-s2-e3-breaking-down-segmentation-with-chad-buey-and-sam-baxter/Fri, 13 Dec 2024 00:00:00 +0000https://www.securityin45.com/blog/2024-12-13-s2-e3-breaking-down-segmentation-with-chad-buey-and-sam-baxter/<pre><code> Network segmentation remains one of the most critical—yet surprisingly underutilized—pillars of enterprise security. As cyber threats grow more sophisticated and breach containment becomes a primary concern, organizations are discovering that a solid segmentation strategy can mean the difference between a localized incident and a company-wide catastrophe. But segmentation isn't one-size-fits-all; the debate between traditional VLAN-based approaches and modern micro-segmentation strategies has evolved considerably over the past decade, especially as cloud environments and dynamic workloads have fundamentally changed how we think about network boundaries. </code></pre> <h2 id="what-this-episode-covers">What This Episode Covers</h2> <ul> <li>The evolution of network segmentation strategies over the past ten years</li> <li>VLAN-based segmentation versus micro-segmentation approaches</li> <li>How group-based policy (GBP) enables more granular control than traditional VLAN segmentation</li> <li>Proactive versus reactive segmentation and their roles in Zero Trust architecture</li> <li>Enforcement mechanisms including VLANs, zone-based firewalls, and access control lists</li> <li>Cisco TrustSec and Security Group Tags (SGTs) as enforcement tools</li> <li>Cloud considerations and dynamic segmentation</li> <li>How Cisco solutions (ISE, Duo, Multi-Cloud Defense) integrate to support segmentation</li> <li>Designing segmentation to limit blast radius and contain breaches</li> </ul> <h2 id="deep-dive">Deep Dive</h2> <h3 id="the-evolution-of-network-segmentation">The Evolution of Network Segmentation</h3> <p>Ten years ago, network segmentation was relatively straightforward: you created VLANs, separated traffic by business function or department, and called it a day. Today&rsquo;s threat landscape and infrastructure complexity have rendered that approach insufficient for serious security programs.</p>