How do segmentation and least privilege limit lateral movement?

They shrink what an intruder can reach from the first device they take over. Lateral movement means hopping from that device to others, usually with remote desktop, file shares or admin tools and with passwords gathered on the way. Segmentation puts firewalls or access rules between groups of systems, so a compromised office laptop cannot open a session to the database server or the backup system at all. Least privilege makes sure that the accounts found on that laptop cannot log in to servers either, because ordinary users are not local administrators everywhere and admin accounts are not used for e-mail. Allow-listing which hosts may use admin protocols closes the gap further. None of this is perfect, which is why it pairs with detection. NetSenX flags new host-to-host sessions over admin protocols that do not match a host's normal as lateral movement, on every plan, and from the Pro plan correlates them across hosts into one story.

← All 45 questions on Zero trust, identity and segmentationAll topics