While implementing a protected enclave DiD model at ABC Corp, the network technicians notice that all departments in the organization are operating within the same VLAN and that a singular firewall separates the internal network from the DMZ. What recommendations should be made to properly configure the protected enclaves model?