https://community.cisco.com/t5/network-security/client-and-server-network-segmentation/m-p/4652412#M1091941 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/213078">@hmc250000</a> assuming you are using Cisco equipment, you should look at TrustSec and SDA.</P> <P>VRF's are used within SDA, then TrustSec SGT (Scalable/Security Group Tags) are used further within the VRF for microsegmentation.</P> <P><A href="https://www.cisco.com/c/en_uk/products/security/network-visibility-segmentation/index.html#~stickynav=2" target="_blank" rel="noopener">https://www.cisco.com/c/en_uk/products/security/network-visibility-segmentation/index.html#~stickynav=2</A><BR /><A href="https://www.cisco.com/c/en/us/solutions/enterprise-networks/trustsec/design-guide-listing.html" target="_blank" rel="noopener">https://www.cisco.com/c/en/us/solutions/enterprise-networks/trustsec/design-guide-listing.html</A></P> <P>TrustSec SGT's can be used on most Cisco solutions:- switches, routers, WLC, firewall, WSA, stealthwatch etc.</P> <P>&nbsp;</P> <P>&nbsp;</P> Mon, 18 Jul 2022 15:50:47 GMT Rob Ingram 2022-07-18T15:50:47Z https://community.cisco.com/t5/network-security/client-and-server-network-segmentation/m-p/4652409#M1091940 <P>What would be the best way to segment clients from servers across several departments (Lan and WAN) globally? Would vrf's be any helpful? What hardware would be recommended? I would assume traditional firewalls are too slow?</P> Mon, 18 Jul 2022 15:45:07 GMT https://community.cisco.com/t5/network-security/client-and-server-network-segmentation/m-p/4652409#M1091940 hmc250000 2022-07-18T15:45:07Z https://community.cisco.com/t5/network-security/client-and-server-network-segmentation/m-p/4652412#M1091941 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/213078">@hmc250000</a> assuming you are using Cisco equipment, you should look at TrustSec and SDA.</P> <P>VRF's are used within SDA, then TrustSec SGT (Scalable/Security Group Tags) are used further within the VRF for microsegmentation.</P> <P><A href="https://www.cisco.com/c/en_uk/products/security/network-visibility-segmentation/index.html#~stickynav=2" target="_blank" rel="noopener">https://www.cisco.com/c/en_uk/products/security/network-visibility-segmentation/index.html#~stickynav=2</A><BR /><A href="https://www.cisco.com/c/en/us/solutions/enterprise-networks/trustsec/design-guide-listing.html" target="_blank" rel="noopener">https://www.cisco.com/c/en/us/solutions/enterprise-networks/trustsec/design-guide-listing.html</A></P> <P>TrustSec SGT's can be used on most Cisco solutions:- switches, routers, WLC, firewall, WSA, stealthwatch etc.</P> <P>&nbsp;</P> <P>&nbsp;</P> Mon, 18 Jul 2022 15:50:47 GMT https://community.cisco.com/t5/network-security/client-and-server-network-segmentation/m-p/4652412#M1091941 Rob Ingram 2022-07-18T15:50:47Z