WEEK 9 Assignment: Network
Segmentation & IPS Design
Introduction
Network segmentation is the process of dividing a computer network into smaller, isolated
sections or subnets to improve security, performance, and management. By separating
departments such as administration, employees, servers, and guest users, organizations can
reduce the risk of unauthorized access and limit the spread of cyber threats. An Intrusion
Prevention System (IPS) is integrated into the network to monitor traffic in real time and
automatically block suspicious or malicious activities.
Proposed Network Design
The network is divided into the following segments:
Admin Network – used by management and administrative staff
Employee Network – for general employee systems and workstations
Server Network – contains application servers, database servers, and file storage
Guest Network – isolated internet access for visitors
Security Zone / DMZ – hosts public-facing services such as web servers
Traffic between these segments is controlled through firewalls and access control policies.
IPS Implementation Plan
The Intrusion Prevention System is placed between the firewall and the internal network
segments.
Key Functions
Monitors incoming and outgoing traffic
Detects malicious patterns such as malware, DDoS attempts, and unauthorized access
Automatically blocks suspicious IP addresses
Generates alerts for administrators
Prevents lateral movement between network segments
Security Measures Implemented
VLAN-based segmentation
Access control lists (ACLs)
Firewall rules
Real-time traffic inspection
Signature-based and anomaly-based IPS detection
Logging and alerting mechanisms
Expected Outcome
This design improves network security by isolating sensitive systems, reducing attack
surfaces, and preventing unauthorized access. The IPS strengthens the defense mechanism by
actively detecting and blocking threats.