NetBox → draw.io · field guides

Network diagrams that match the network

A free tool that draws your network from the free NetBox you already run, and field guides that show you how to draw it securely, one industry at a time.

Open sourceRead-only on NetBoxFree chapters, no sign-up
A logical page drawn by NetDiagrams from NetBox
S01.drawio · logical page
Cover: Draw Secure Manufacturing Network Diagrams

The books

One book for each kind of network

Pick your industry, any 2 or 3, or all 10 in the Complete Library for $199.

Cover: Draw Secure Manufacturing Network Diagrams

BOOK 1 · MANUFACTURING

Draw Secure Manufacturing Network Diagrams

From Plant Floor to Purdue Model

Purdue levels, IDMZ, cell/area zones and conduits, rings and HA pairs, drawn so the auditor and the night shift read the same page.

349 pages · $39

Cover: Draw Secure School Network Diagrams

BOOK 2 · EDUCATION

Draw Secure School Network Diagrams

From Classroom to Campus Network

Staff, student, guest and building systems zones, Wi-Fi for thousands of Chromebooks, and the district WAN.

409 pages · $39

Cover: Draw Secure Warehouse Network Diagrams

BOOK 3 · WAREHOUSING AND LOGISTICS

Draw Secure Warehouse Network Diagrams

From Dock Door to Warehouse Wi-Fi

Conveyors, sorters, handhelds and AGVs, heavy Wi-Fi, and the dock, carrier and client connections.

387 pages · $39

Cover: Draw Secure Retail Network Diagrams

BOOK 4 · RETAIL

Draw Secure Retail Network Diagrams

From Point of Sale to PCI Segmentation

Cardholder data segmentation, POS, guest Wi-Fi and store IoT, from three stores to three hundred.

387 pages · $39

Cover: Draw Secure Small Office Network Diagrams

BOOK 5 · OFFICES

Draw Secure Small Office Network Diagrams

From Front Desk to Firewall

One firewall in the middle, MSP access, cloud and remote work, and branches, drawn for the insurer's questionnaire and the next MSP.

389 pages · $39

Cover: Draw Secure Bank and Credit Union Network Diagrams

BOOK 6 · BANKS AND CREDIT UNIONS

Draw Secure Bank and Credit Union Network Diagrams

From Teller Line to FFIEC Exam

Teller, wire room and card zones, the core processor's router, ATMs and alarm boxes, and branches, drawn for the examiner's request list.

376 pages · $39

Cover: Draw Secure Local Government Network Diagrams

BOOK 7 · LOCAL GOVERNMENT

Draw Secure Local Government Network Diagrams

From City Hall to CJIS Compliance

City hall, the police wing and CJIS, public Wi-Fi at the library and parks, closets in buildings you don't control, and water systems drawn as a boundary.

399 pages · $39

Cover: Draw Secure Hotel Network Diagrams

BOOK 8 · HOTELS AND HOSPITALITY

Draw Secure Hotel Network Diagrams

From Guest Room to Boiler Room

Front desk, restaurant and spa payments, guest and conference Wi-Fi, door locks and building systems, and the owner, brand and management company split.

381 pages · $39

Cover: Draw Secure Corporate Network Diagrams

BOOK 9 · CORPORATE HQ AND MULTI-SITE

Draw Secure Corporate Network Diagrams

From Campus Core to Branch WAN

VRFs and internal firewalls, campus fiber and risers, the data center, SD-WAN branches, and a chapter on law firms and the ethical wall.

385 pages · $39

Cover: Draw Secure Car Dealership Network Diagrams

BOOK 10 · CAR DEALERSHIPS

Draw Secure Car Dealership Network Diagrams

From Showroom to FTC Safeguards Rule

F&I and the credit file, the DMS outside your walls, shop diagnostic tools, lounge and lot Wi-Fi, and more rooftops, drawn for the FTC Safeguards Rule.

409 pages · $39

Before and after

From spaghetti to a drawing you can defend

PLANT NETWORK SW1SW-NEWcore?SW1 (2)old FWPLC swSW-BunknownSW3VLAN TESThmispareSW1-final ask Dave which cable is the real uplink Network_Overview_FINAL_v3_revised.pdf · rev ? · date ?
Before: one rounded rectangle labeled PLANT NETWORK, rainbow cables, three switches called SW1, and a sticky note.
The same plant drawn to the NetDiagrams standard
After: zones stacked by Purdue level, every security gate named, and a title block with a date.

How the tool works

From NetBox to draw.io in one command

  1. Point it at NetBoxGive it your NetBox URL and a read-only token. It never writes to NetBox and never connects to your devices.
  2. Get one drawing per siteOverview, logical, physical, optics, wireless, flows, failover, WAN and flow register pages, filled with your names, addresses and cables.
  3. Read the drift reportSee what the drawing and NetBox disagree on. Fix it in NetBox, run it again.

See the tool

Book 1 · Available now

Draw Secure Manufacturing Network Diagrams

From Plant Floor to Purdue Model. 17 chapters and 8 appendices on drawing a plant network that survives the auditor, the night shift and the new hire.

  • Purdue levels, IDMZ, cell/area and safety zones
  • Cables, optics, rings and failover, drawn as data
  • Flow registers and zone matrices auditors can read
Cover: Draw Secure Manufacturing Network Diagrams

Free to read

Free chapters and guides

Free · Chapter 3

Purdue Model for OT Security: Levels, Zones and the Network Diagram

What the Purdue model is and how to draw its levels and security zones for a small plant: enterprise, IDMZ, industrial, cell/area and safety zones, with seven rules and a one-afternoon method.

Read it →
Free · Chapter 10

IEC 62443 Zones and Conduits: How to Write a Flow Register

Write your OT segmentation down: a flow register with default deny, one row per conversation, and a zone matrix auditors can read.

Read it →
Free · Appendix F

How to Import a Plant Network into NetBox

A step-by-step NetBox import order for a manufacturing site, with CSV examples, zones by location, cable labels and a first-week plan.

Read it →
Free · Chapter 3

School Network Segmentation: Zones for Students, Staff, Guests and Building Systems

How to split a school network into zones: students, staff, student records, guests and building systems, with five trust tiers, seven rules and a firewall pair as the only path between zones.

Read it →
Free · Chapter 3

Warehouse Network Design: Zones From WMS to the Conveyor PLC

How to zone a distribution center network: business, integration DMZ, warehouse operations, handhelds, conveyor and sorter controls, and safety, with seven rules for the drawing.

Read it →
Free · Chapter 3

PCI Network Segmentation for Retail: Drawing the Cardholder Data Zone

How to draw PCI DSS segmentation for a store: the cardholder data environment as a zone with an edge, guest Wi-Fi and store devices in their own zones, and eight rules an assessor can check.

Read it →
Free · Chapter 3

Small Office Network Segmentation: One Firewall, Many Zones

How to split a small office network into ten zones behind one firewall: staff, phones, printers, servers, guests, cameras and network management, with six rules and a one-hour method using the floor plan.

Read it →
Free · Chapter 3

Bank Network Segmentation: Teller, Core, Wire and Card Zones

How to zone a community bank or credit union network: teller line, wire room, card room, the core processor's router behind your firewall, ATMs and alarm boxes, with seven rules for the drawing an examiner asks for.

Read it →
Free · Chapter 3

CJIS Compliance on a City Network: Segmenting Police From City Hall

How to zone a city or county network for the CJIS Security Policy: departments, the police wing, public Wi-Fi, partners and building systems, with the water plant drawn as a boundary and seven rules for the drawing.

Read it →
Free · Chapter 3

Hotel Network Segmentation: The Zone Model From Guest Room to Plant Room

How to zone a hotel network: front desk, restaurant and spa payments, guest and conference Wi-Fi, door locks, building systems and the brand's connection, with who owns each zone and seven rules for the drawing.

Read it →
Free · Chapter 3

Enterprise Network Segmentation: VRFs, Internal Firewalls and Zones at Company Scale

How to segment a corporate network past one building: VRFs as the big zones, internal firewalls where they meet, the data center routed again, and identity picking the zone, with seven rules for the drawing.

Read it →
Free · Chapter 3

FTC Safeguards Rule for Car Dealerships: Zoning the Dealership Network

How to zone a car dealership network by following the credit file: F&I, the DMS outside your walls, the shop's diagnostic tools, the service lane and guest Wi-Fi, with six rules for the drawing the FTC Safeguards Rule needs.

Read it →
Free PDF

Get the free chapter pack

Chapters 3 and 10 and the NetBox import guide as one PDF.

We email a link to confirm, then the download and a note when a new book or tool release ships. Unsubscribe anytime.