A SIMPLE Network Diagram
Reading a network diagram was super confusing for me. What do the connections mean? Why is this connected to that? Is that a connection? What the heck is going on here?!
In my endeavor to better understand networking I knew that understanding a network diagram was crucial so I made my own.
Below is a detailed description of this simple secure network diagram:
Remote Employee:
In the top left corner, there is a remote employee who uses a personal device to connect securely to the organization’s network. This is done via a VPN (Virtual Private Network), which encrypts the connection for security.
Internet Cloud:
The large cloud symbol in the center represents the Internet, a global network that connects millions of private, public, academic, business, and government networks.
WAN (Wide Area Network):
The WAN is the broader internet. The organization’s network connects to the internet via a WAN link, which could be a DSL, cable, fiber-optic, or satellite connection. The lightning bolt symbol represents this connection, the internet’s speed and also indicates the WAN’s role in providing high-speed connectivity to the outside world.
DMZ (Demilitarized Zone):
The DMZ is a buffered zone between the internal network and the outside world. The DMZ is within the WAN because services within it need to be accessed via the internet. The DMZ hosts public-facing services like web applications (indicated by the web server icon) and an application server that processes business logic.
Firewalls:
Illustrated with a wall of fire, firewalls are hardware and/or software security devices that enforce access controls (ACLs) to define what resources each network can access, protecting the network from unauthorized access and cyber threats.
Local Area Network (LAN):
The LAN is the internal network where the organization’s computers and devices connect and communicate. It includes smart devices like TVs and security cameras, and shared resources like printers.
Wireless Access Point (WAP):
The WAP provides wireless connectivity within the LAN. It is configured with a guest network, allowing visitors to access the Internet without entering the main network.
Smart Security Camera:
Smart cameras are connected within the LAN for security and monitoring purposes. They can be accessed remotely for live feeds or recordings, typically stored on cloud servers. For example, the cellular device next to the remote employee can be used to access stored recordings from the smart security camera.
Shared Printer:
The shared printer is a device within the LAN that multiple users can access to print documents.
Administrative Roles:
Various admin roles are depicted to show responsibility for different parts of the network:
1. Cloud Administrator: Manages cloud services and storage, like Google Drive.
2. Database Administrator: Oversees the database server within the LAN, ensuring data integrity and performance.
3. IT Manager/Director: Responsible for the overall management of the on-premises servers and network infrastructure.
4. Chief Information Security Officer (CISO): Ensures the security of the LAN and the protection of data.
Router:
The router, shown in the center right, directs traffic between the LAN and the Internet. It provides various services, including DNS (Domain Name System), DHCP (Dynamic Host Configuration Protocol), Modem functionality, NAT (Network Address Translation), VPN pass-through, QoS (Quality of Service), and includes switch capabilities for connecting multiple devices via Ethernet.
On-Premises Servers:
The on-prem servers, like Network Attached Storage (NAS), are used for internal data storage and may support RAID configurations for data redundancy.
And there you have it!! A simple secure network diagram. It was a great place to start especially given the fact that I made it myself I I did all the research to understand each device and connection.
Try doing your own diagram if you still struggle with understanding these.
Ciao for Niao!!
