# Why is a flat network dangerous?

Because nothing stops an attacker who gets in from reaching everything. In a flat network every computer, printer and server sits in the same segment and can connect to every other, so one infected laptop can reach the file server, the backup server, the accounting system and the production machines directly. Segmentation splits the network into zones, such as workstations, servers, backups, guests, printers and cameras, and production, with firewall rules that allow only the connections each zone needs. It does not have to be perfect to help: separating backups and the most important servers from ordinary workstations already blocks the most damaging paths. Flat networks also make detection harder, because everything talks to everything. The NetSenX network map, on every plan, shows who actually talks to whom, which is a good starting point for drawing your zones.

FAQ: [Attack techniques explained](https://netsenx.com/en/faq/attacks) · https://netsenx.com/en/faq/why-is-a-flat-network-dangerous

## Read next

- https://netsenx.com/en/detect-lateral-movement-c2-beaconing
- https://netsenx.com/en/is-someone-inside-your-network

## Related questions

- [Why do update agents and monitoring tools look like beaconing?](https://netsenx.com/en/faq/why-do-update-agents-look-like-beaconing)
- [What is DNS tunnelling?](https://netsenx.com/en/faq/what-is-dns-tunnelling)
- [Can data be stolen through DNS without anyone noticing?](https://netsenx.com/en/faq/can-data-be-stolen-through-dns-without-anyone-noticing)
- [Can malware hide in DNS over HTTPS, and can we still see it?](https://netsenx.com/en/faq/can-malware-hide-in-dns-over-https)
- [What is low-and-slow data exfiltration, and how is it detected?](https://netsenx.com/en/faq/what-is-low-and-slow-data-exfiltration)