NetBox → draw.io · field guides
Network diagrams that match the network
A free tool that draws your network from the free NetBox you already run, and field guides that show you how to draw it securely, one industry at a time.


The books
One book for each kind of network
Pick your industry, any 2 or 3, or all 10 in the Complete Library for $199.

BOOK 1 · MANUFACTURING
Draw Secure Manufacturing Network Diagrams
From Plant Floor to Purdue Model
Purdue levels, IDMZ, cell/area zones and conduits, rings and HA pairs, drawn so the auditor and the night shift read the same page.
349 pages · $39

BOOK 2 · EDUCATION
Draw Secure School Network Diagrams
From Classroom to Campus Network
Staff, student, guest and building systems zones, Wi-Fi for thousands of Chromebooks, and the district WAN.
409 pages · $39

BOOK 3 · WAREHOUSING AND LOGISTICS
Draw Secure Warehouse Network Diagrams
From Dock Door to Warehouse Wi-Fi
Conveyors, sorters, handhelds and AGVs, heavy Wi-Fi, and the dock, carrier and client connections.
387 pages · $39

BOOK 4 · RETAIL
Draw Secure Retail Network Diagrams
From Point of Sale to PCI Segmentation
Cardholder data segmentation, POS, guest Wi-Fi and store IoT, from three stores to three hundred.
387 pages · $39

BOOK 5 · OFFICES
Draw Secure Small Office Network Diagrams
From Front Desk to Firewall
One firewall in the middle, MSP access, cloud and remote work, and branches, drawn for the insurer's questionnaire and the next MSP.
389 pages · $39

BOOK 6 · BANKS AND CREDIT UNIONS
Draw Secure Bank and Credit Union Network Diagrams
From Teller Line to FFIEC Exam
Teller, wire room and card zones, the core processor's router, ATMs and alarm boxes, and branches, drawn for the examiner's request list.
376 pages · $39

BOOK 7 · LOCAL GOVERNMENT
Draw Secure Local Government Network Diagrams
From City Hall to CJIS Compliance
City hall, the police wing and CJIS, public Wi-Fi at the library and parks, closets in buildings you don't control, and water systems drawn as a boundary.
399 pages · $39

BOOK 8 · HOTELS AND HOSPITALITY
Draw Secure Hotel Network Diagrams
From Guest Room to Boiler Room
Front desk, restaurant and spa payments, guest and conference Wi-Fi, door locks and building systems, and the owner, brand and management company split.
381 pages · $39

BOOK 9 · CORPORATE HQ AND MULTI-SITE
Draw Secure Corporate Network Diagrams
From Campus Core to Branch WAN
VRFs and internal firewalls, campus fiber and risers, the data center, SD-WAN branches, and a chapter on law firms and the ethical wall.
385 pages · $39

BOOK 10 · CAR DEALERSHIPS
Draw Secure Car Dealership Network Diagrams
From Showroom to FTC Safeguards Rule
F&I and the credit file, the DMS outside your walls, shop diagnostic tools, lounge and lot Wi-Fi, and more rooftops, drawn for the FTC Safeguards Rule.
409 pages · $39
Before and after
From spaghetti to a drawing you can defend

How the tool works
From NetBox to draw.io in one command
- Point it at NetBoxGive it your NetBox URL and a read-only token. It never writes to NetBox and never connects to your devices.
- Get one drawing per siteOverview, logical, physical, optics, wireless, flows, failover, WAN and flow register pages, filled with your names, addresses and cables.
- Read the drift reportSee what the drawing and NetBox disagree on. Fix it in NetBox, run it again.
Book 1 · Available now
Draw Secure Manufacturing Network Diagrams
From Plant Floor to Purdue Model. 17 chapters and 8 appendices on drawing a plant network that survives the auditor, the night shift and the new hire.
- Purdue levels, IDMZ, cell/area and safety zones
- Cables, optics, rings and failover, drawn as data
- Flow registers and zone matrices auditors can read

Free to read
Free chapters and guides
Purdue Model for OT Security: Levels, Zones and the Network Diagram
What the Purdue model is and how to draw its levels and security zones for a small plant: enterprise, IDMZ, industrial, cell/area and safety zones, with seven rules and a one-afternoon method.
Read it →Free · Chapter 10IEC 62443 Zones and Conduits: How to Write a Flow Register
Write your OT segmentation down: a flow register with default deny, one row per conversation, and a zone matrix auditors can read.
Read it →Free · Appendix FHow to Import a Plant Network into NetBox
A step-by-step NetBox import order for a manufacturing site, with CSV examples, zones by location, cable labels and a first-week plan.
Read it →Free · Chapter 3School Network Segmentation: Zones for Students, Staff, Guests and Building Systems
How to split a school network into zones: students, staff, student records, guests and building systems, with five trust tiers, seven rules and a firewall pair as the only path between zones.
Read it →Free · Chapter 3Warehouse Network Design: Zones From WMS to the Conveyor PLC
How to zone a distribution center network: business, integration DMZ, warehouse operations, handhelds, conveyor and sorter controls, and safety, with seven rules for the drawing.
Read it →Free · Chapter 3PCI Network Segmentation for Retail: Drawing the Cardholder Data Zone
How to draw PCI DSS segmentation for a store: the cardholder data environment as a zone with an edge, guest Wi-Fi and store devices in their own zones, and eight rules an assessor can check.
Read it →Free · Chapter 3Small Office Network Segmentation: One Firewall, Many Zones
How to split a small office network into ten zones behind one firewall: staff, phones, printers, servers, guests, cameras and network management, with six rules and a one-hour method using the floor plan.
Read it →Free · Chapter 3Bank Network Segmentation: Teller, Core, Wire and Card Zones
How to zone a community bank or credit union network: teller line, wire room, card room, the core processor's router behind your firewall, ATMs and alarm boxes, with seven rules for the drawing an examiner asks for.
Read it →Free · Chapter 3CJIS Compliance on a City Network: Segmenting Police From City Hall
How to zone a city or county network for the CJIS Security Policy: departments, the police wing, public Wi-Fi, partners and building systems, with the water plant drawn as a boundary and seven rules for the drawing.
Read it →Free · Chapter 3Hotel Network Segmentation: The Zone Model From Guest Room to Plant Room
How to zone a hotel network: front desk, restaurant and spa payments, guest and conference Wi-Fi, door locks, building systems and the brand's connection, with who owns each zone and seven rules for the drawing.
Read it →Free · Chapter 3Enterprise Network Segmentation: VRFs, Internal Firewalls and Zones at Company Scale
How to segment a corporate network past one building: VRFs as the big zones, internal firewalls where they meet, the data center routed again, and identity picking the zone, with seven rules for the drawing.
Read it →Free · Chapter 3FTC Safeguards Rule for Car Dealerships: Zoning the Dealership Network
How to zone a car dealership network by following the credit file: F&I, the DMS outside your walls, the shop's diagnostic tools, the service lane and guest Wi-Fi, with six rules for the drawing the FTC Safeguards Rule needs.
Read it →Get the free chapter pack
Chapters 3 and 10 and the NetBox import guide as one PDF.
We email a link to confirm, then the download and a note when a new book or tool release ships. Unsubscribe anytime.