Network 201: A Tour Through Network Security

Rick Lull revisits a network security primer he first gave in 2019, moving from networking basics into controls and newer remote-access concepts. He opens with a quick review of the OSI layers, common Layer 2 protocols such as VLAN trunking and LLDP, and the transport and routing protocols that carry traffic. He notes how encapsulation and MTU limits can cause hard-to-diagnose failures, such as slow or broken VPN connections.

The middle of the talk shifts from protocols to architecture and risk. Lull argues that networks grown without a plan are hard to protect, so teams should know their assets, identify the business owners who decide how data is used, and remove data they no longer need. He recommends low-cost hardening steps like changing default credentials, disabling unused services, enabling logging, and using CIS benchmarks. He also covers layered defenses including MFA, network access control, segmentation, detection, vendor SLAs, and recovery planning, illustrating them with incidents where the outcome depended on luck.

In the final section he looks at cloud and SaaS responsibility models, the difficulty of inspecting encrypted traffic, web application firewalls, outbound filtering, CASBs, and secure web gateways. He explains that SASE and ZTNA mostly package existing VPN, firewall and proxy functions into a cloud-delivered service. His takeaway is that the right design depends on where users, applications and data actually sit.