IT and security / Free editable template

DMZ and network segmentation diagram template

A DMZ keeps public-facing servers away from the internal network, so a compromised web server does not lead straight to everything else. This example puts a web server, reverse proxy and mail relay between an edge firewall and an internal firewall, then splits the inside into user, server, management and OT or IoT zones, with a table of the traffic allowed between them.

Use this template →See the example ↓

No account needed · Opens as your own editable page

Preview the dmz and network segmentation diagram

View full-size preview ↗
DMZ and network segmentation diagram example showing edge and internal firewalls, dmz with public-facing servers, four internal zones and a rules table
Everything in this example is editable. Replace the labels, move the shapes and adapt the layout to your work.

How to use this template

  1. Decide what faces the internet

    Put only the services the public must reach in the DMZ, and nothing that stores sensitive data.

  2. Split the inside

    Separate users, servers, management and operational technology so a problem in one zone cannot spread freely.

  3. Write allow rules, not deny lists

    For each pair of zones, list only the traffic that must flow. Block everything else by default.

Questions about this template

Where do I record the firewall rules?

Use the rules table on the board. Each row shows traffic allowed between zones, so edit it as you add or remove servers in the DMZ.

Do I need an account to use it?

No. Open the template and edit it in your browser. Your work saves on this device. An account is optional if you want to sync your workspace.

Can I export the finished diagram?

Yes. Use Export in the editor to save a PNG, SVG or PDF, or download an editable .epicdraw backup.

More IT and security templates →