My campus network has multiple buildings with people from each department scattered throughout each building. Can I segment my network by department?  I have a firewall on the outside of my network,...

My campus network has multiple buildings with people from each department scattered throughout each building. Can I segment my network by department?

 I have a firewall on the outside of my network, so I was wondering how any dangerous traffic could get into my network?