Nice read on changing network topology that can make lateral movement in targeted attacks more difficult

http://blog.trendmicro.com/trendlabs...gy-alteration/