Network Diagrams by Industry · Book 1
Draw Secure Manufacturing Network Diagrams
From Plant Floor to Purdue Model
Draw the plant, not the spaghetti.
- Network diagrams that survive the auditor, the night shift and the new hire
- Purdue levels, IDMZ, cell/area zones and conduits, drawn so anyone can read them
- Real pages from a complete plant drawing set, not staged examples
Hand your auditor a drawing that matches the plant.
Sound familiar?
Your network diagram is lying
It was right the day it was drawn. Since then a cell was added, a switch was swapped, someone created a VLAN called TEST, and the PDF on the share drive is called FINAL_v3_revised.
People still act on it. An integrator picks an address from it. An auditor scores your segmentation from it. An insurer prices your policy partly from it. A night-shift technician decides which cable to pull from it.
Subject:
Network_Overview_FINAL_v3_revised.pdfSeverity: 3 (production delayed, nobody hurt, one change window visibly aged)
- 10:15 Change backed out. Historian recovers. Integrator asks whether there is "a newer drawing." Silence observed.
From the cold open of Chapter 0
What you'll learn
From plant floor to Purdue model, one page at a time
Every chapter has the same shape: a short scene where a bad diagram goes wrong, a handful of rules, a real screenshot, the tool feature that does it, and a Monday-morning checklist you can finish in an hour.
- Draw one page per audienceThe overview your plant manager reads, the logical page an integrator needs, the physical page the night shift trusts.
- Put Purdue levels and zones on paperEnterprise, IDMZ, industrial, cell/area and safety zones, each with an owner and a target security level.
- Turn cables into dataLabels that match the real cable, link and asset registers, port-channels, optics and media types.
- Draw failure before it happensRings, HA pairs, stacks and virtual chassis drawn so the 3 a.m. question has an answer.
- Write your segmentation downFlows as lanes, a flow register with default deny, and a zone matrix auditors can read.
- Keep it trueNetBox as the source, a drift report as the to-do list, and versions you can share without leaking.
Look inside
Real pages, not mockups
Every figure is a page of the Plant A sample set or a drawing built from NetBox data by the free NetDiagrams tool. Click any page to see all of it.
Table of contents
17 chapters and 8 appendices
Four of them are free to read right now.
- CH 0Why your diagram is lyingA diagram is a promise about the plant. Most break it within a year.
- CH 1One plant, eleven audiencesDraw one page per audience instead of one page for everyone.
- CH 2The page your plant manager actually readsThe overview: what's at risk, what's connected, what's changing. No VLAN IDs.
- CH 3Levels, zones and the CPwE skeletonEnterprise, IDMZ, industrial, cell/area and safety zones, and how Purdue levels place them.Read free →
- CH 4Zones on paper: the logical pageEvery routed VLAN belongs to exactly one zone, and the page shows who owns it.
- CH 5Cables are data, not decorationThe physical page, cable labels, link and asset registers, port-channels.
- CH 6Optics, faceplates and the SFP drawerMedia, speeds and modules, and why "fiber" is not a cable type.
- CH 7Rings, pairs and what happens at 3 a.m.Cell/area rings, HA firewall pairs, stacks and virtual chassis, drawn so failure modes are obvious.
- CH 8Wireless without hand-wavingWLCs, APs, SSIDs per zone and point-to-point radio bridges.
- CH 9Draw the conversationsTraffic flows as lanes: permitted, conditional and denied, with initiator and responder.
- CH 10The flow register: your segmentation in writingConduits, default deny and the zone matrix. The page auditors ask for first.Read free →
- CH 11More than one siteWAN, SD-WAN, HQ services and keeping site prefixes consistent.
- CH 12NetBox is the source, the drawing is the viewStop typing IPs into shapes. Record zones, levels and cables in NetBox and let the drawing follow.
- CH 13Diagrams rot. Measure the rot.Drift between the drawing and reality, and a routine to catch it.
- CH 14Share it without leaking itWhat vendors, insurers and auditors need, and what they must never see.
- CH 15No drawing yet? Start MondayFrom nothing to a useful set in a week, with or without NetBox.
- CH 16From drawn to enforcedThe flow register says what should happen. The firewall decides what does.
- APP AThe Diagram Crimes galleryNamed anti-patterns, from the Rainbow Cable to the VLAN called TEST.
- APP BScore your diagramA 20-question self-assessment, 0 to 100, with tiers.Read free →
- APP CThe one-page posterEvery chapter's rules on one printable sheet.
- APP DNetBox field cheat sheetWhich NetBox field fills which part of the drawing.
- APP EGlossaryCPwE, IDMZ, conduit, VRF, REP/DLR, SIS and friends.
- APP FGetting your plant into NetBoxImport order, CSV examples, zones by location and a first-week plan.Read free →
- APP GData collection worksheetsEvery worksheet column: what it feeds, where to find it, who to ask, and what to draw while it's missing.Free worksheets →
- APP HNaming schemes when your names are a messSites, devices, VLANs, cables, cabinets and SSIDs, and how to clean up the names you inherited.
Free sample
Read before you buy
Chapters 3 and 10 and Appendix F are on the web in full. Want them as one PDF?
We email a link to confirm, then the download and a note when a new book or tool release ships. Unsubscribe anytime.
Purdue model network diagram
What the Purdue model is and how to draw its levels and security zones for a small plant: enterprise, IDMZ, industrial, cell/area and safety zones, with seven rules and a one-afternoon method.
Chapter 10Zones and conduits flow register
Write your OT segmentation down: a flow register with default deny, one row per conversation, and a zone matrix auditors can read.
Appendix FImport a plant network into NetBox
A step-by-step NetBox import order for a manufacturing site, with CSV examples, zones by location, cable labels and a first-week plan.
Appendix BScore your diagram
Twenty questions, 0 to 100, and a tier to post.
Also free: the data collection worksheets from Appendix G, as a spreadsheet and a printable PDF.
This book is for you if…
- You are one of the one or two people who run IT and OT networking at a plant
- You are a controls engineer who inherited "the network"
- You are an integrator or consultant who hands over drawings at the end of a project
- You have an audit, an insurance renewal or a segmentation project coming
It's not for you if…
- You want a 400-page design guide. This one is about drawing what you have
- You need a certification course. It uses the standards' vocabulary, it doesn't teach the exam
- You run a school, a warehouse, a store, an office, a bank, a city, a hotel, a corporate network or a dealership. There's a book for each
From the book
Lines readers stick on the wall
“Undated diagrams aren't documentation. They're historical fiction.”Chapter 0
“A drawing for everyone is a drawing for no one. Draw one page per question, and let the pages agree.”Chapter 1
“Your plant already has zones. The ones nobody drew are the ones nobody defends.”Chapter 3
“A drawing is scored by what it answers, not by how it looks.”Appendix B
Pricing
Pick your edition
One-time payment. DRM-free PDF and EPUB. Free new editions by email.
The Book
Book 1, for one reader
- Book 1: Manufacturing, PDF + EPUB
- 349-page 6x9 PDF with full-size figures
- Printable one-page poster
- Free new editions by email
Best value
The Complete Library
All 10 books, $390 if bought separately
- This book, plus the other 9 industries
- Every book as PDF + EPUB
- One download link for all of them
- Free new editions of every book
For MSPs, consultants, auditors and anyone with more than one kind of site.
Get all 10 booksTeam
Book 1 for up to 10 people at one company
- Everything in The Book
- Share with your whole team
- One invoice through Paddle
- Use the rules in your own drawing standard
Two or three industries?
Pick any 2 books for $69 or any 3 for $89, for the HQ and its branches, the hotel and its shops, or the city and its library. Choose your books.
Need every book for a team? The Team Library is all 10 books for up to 10 people at one company for $699, less than three single-book Team licenses. See the library.
Why buy here instead of Kindle?
The Kindle edition is $29.99 and has the same text. Buying here gets you the book the way it was laid out to be used:
- The 6x9 PDF. Full-page network drawings you can zoom into and print, not shrunk to an e-reader screen
- The worksheets. Your download email links the editable spreadsheet and printable PDF the chapters work from
- Yours to keep. PDF and EPUB, DRM-free, on any device, with free new editions by email
Paddle is our merchant of record and handles checkout, tax and invoices. Taxes calculated at checkout. See the terms of sale and privacy policy.
FAQ
Questions
Do I need NetBox?
No. Every rule works by hand with draw.io and a spreadsheet, and every tool section ends with a short "No NetBox yet?" note. The book also makes the case for NetBox, and Appendix F walks you through getting a plant into it.
What format is it?
A 349-page 6x9 PDF and an EPUB for e-readers and phones. Both are DRM-free; each copy carries a line saying it's licensed to you.
How is it delivered?
Right after checkout you get a download link by email. If the link ever fails, write to hello (at) netdiagrams.com and we'll send the files directly.
Is the NetDiagrams tool free?
Yes. The tool is open source under the Apache-2.0 license, and the book's screenshots are its real output. You don't need to buy the book to use the tool.
Does it cover IEC 62443 and CPwE?
It uses their vocabulary (zones, conduits, target security levels, the Purdue model and the CPwE layout) to draw a plant clearly. It is a drawing guide, not a compliance certification course.
Is there a Kindle edition?
Yes, at $29.99. It has the same text, but the drawings are easier to read in the 6x9 PDF, which only comes with a copy bought here.
What's in the Complete Library?
All 10 books (manufacturing, education, warehousing and logistics, retail, offices, banks and credit unions, local government, hotels and hospitality, corporate hq and multi-site, car dealerships), each as PDF and EPUB, from one download link. Bought separately they'd be $390. It covers the books out today; a future book is sold separately.
Can I pick just two or three books?
Yes. Any 2 books are $69 and any 3 are $89. Choose them on the series page and they come on one download link.
Can my team share one copy?
The Team license covers one book for up to 10 people at one company, for $249. The Team Library covers all 10 books for the same team, for $699. For more people, email us.
Who handles payment?
Paddle is our merchant of record. They handle checkout, sales tax and VAT, and invoices for your accounts team.
What if it didn't help?
Use the refund form at netdiagrams.com/refund, or email hello (at) netdiagrams.com, within 14 days of purchase and we'll refund you in full. The form asks what didn't work, but answering is optional. This covers single books, bundles, the Complete Library and team licenses, one refund per customer. Paddle processes the refund.
NetDiagrams and this series are made by SegAudit LLC, a Wisconsin company that builds network segmentation tools. We build the free NetDiagrams tool, and the book's screenshots are its real output. The tool works with the free, open-source NetBox.
Draw the plant, not the spaghetti
Start with a free chapter, or get the whole book and fix your diagram this week.