Network Access Control and Segmentation

The camera on your perimeter and the laptop in your finance team are on the same network until somebody decides they are not.

That decision usually gets deferred, because segmentation looks like a project and the flat network works. It keeps working right up until one compromised device can reach everything the network can reach.

SECCOM designs segmentation on Cisco, Aruba, Extreme and Fortinet, whichever policy engine you already run, so the switching and the access policy behave as one system.