EXPERT RESPONSE
In this case, there's really no reason why you couldn't allow unrestricted traffic between the employee network and the lab network. The whole point of a lab network is to provide your technical staff with a sandbox where they can tinker with network devices and experiment with new technology. Go for it! Let them tinker all they like.
That said, you should definitely take action to protect your server network from the lab network. You wouldn't want to run the risk of having a rogue experimental device attempting to connect to one of your production servers. Along those same lines, it's a good idea to implement egress controls at your network border that prevent lab devices from communicating with the outside world.
More Information:
|
