From a Flat Network to Controlled Segmentation

The challenge

Production systems, office users, CCTV devices, guest Wi-Fi and administrative systems shared too much of the same network. This made troubleshooting difficult and allowed unnecessary communication between very different device groups.

Our approach

Astek mapped assets and traffic flows before designing segmentation. The objective was not to create complexity, but to allow only the communication each zone genuinely required.

What Astek implemented

• Created logical zones for office users, servers, production, surveillance, guests and management devices.
• Applied inter-zone controls through switching and firewall policies.
• Restricted guest and unmanaged-device access to business resources.
• Introduced stronger controls for administrative access to infrastructure.
• Added visibility to identify abnormal or unexpected communication between zones.

Business outcome

The business gained clearer separation between critical and non-critical systems, reduced unnecessary network exposure and made troubleshooting more structured. Future devices could be placed into defined zones instead of extending a flat network.