Sub-networks based security method, apparatus and product

A computer program product comprising a computer readable storage medium retaining program instructions, which program instructions when read by a processor, cause the processor to perform a method comprising:

• detecting a device connecting to a local network, wherein the local network is divided into subnets;
• determining a usage profile of the device, wherein the usage profile is indicative of content and target of packets transmitted by the device;
• automatically selecting a subnet of the local network to connect the device based on the usage profile of the device;
• and
• connecting the device to the selected subnet in the local network.

An apparatus comprising a processor coupled to memory, wherein the apparatus is connectable to a local network that is connected to an external network, wherein the processor being configured to perform:

• shutting down a Dynamic Host Configuration Protocol (DHCP) functionality of a networking device, wherein the networking device is the DHCP server of the local network;
• becoming the DHCP server of the local network instead of the networking device;
• creating at least two subnets for the local network;
• selecting, for each device connected to the local network, a subnet based on a usage profile of the device and connecting the device thereto, whereby dividing the local network into two or more sub-networks;
• and
• monitoring communication traffic in the local network, wherein said monitoring comprises applying a different set of security rules for different subnets.