Rule table · Domain 2
Fence off the camera network with an ACL
Domain 2: Threats, Vulnerabilities, and MitigationsRule table
Copperline Logistics put its warehouse cameras on their own segment, 10.30.0.0/24, after a vendor warned about weak camera firmware. Camera streams must reach only the recorder at 10.30.1.5 using the standard RTSP service. Only the admin jump host at 10.40.0.10 may open the cameras' management pages over HTTPS. Build the least-permissive rules for those flows, then deny the rest of the camera segment.