PROBLEM
Everything can see everything, and the “firewall” is a pile of exceptions.
PODEJŚCIE
A zone sketch, who may talk to whom, and where you would even see that they talked.
SCOPE
- listener inventory
- segmentation in agreed scope
- device / traffic logging
DELIVERABLE
- zone sketch
- exposure list
- filter recommendations
PROCESS
- map
- exposure
- priorities
- change
Network security without a map is guessing. First addressing, VLANs, or at least a list of “what talks to what”.
Out of scope at the start: production red team, attacking a neighbour’s Wi‑Fi, promising an invisible network.