network segmentation
Splitting one network into several with rules between them.
Network segmentation divides a network into segments (often VLANs) so traffic between them passes a router or firewall that enforces deny-by-default rules.
Examples
The greenhouse puts its bench nodes and BLE gateway on their own IoT network, so a hijacked node can't reach the office laptops directly.
After segmenting, a node-to-broker flow crosses the router, so the firewall must allow exactly that flow.
See also