NetSec Types of Networks

Not all networks are the same. Networks differ in size, ownership, and purpose. Knowing the type of network you work with tells you what security risks to expect and what controls to put in place.

Networks Sorted by Size

PAN – Personal Area Network

A PAN covers just a few meters around one person. When your phone connects to wireless earbuds or a smartwatch, that is a PAN. Bluetooth powers most PANs.

[ Smartwatch ] ~~~ [ Phone ] ~~~ [ Wireless Earbuds ]
         (Bluetooth, 1–10 meters)

PANs carry personal data like health stats and call audio. An attacker nearby can intercept Bluetooth signals if the devices use outdated pairing methods.

LAN – Local Area Network

A LAN covers a single building or floor. Your home Wi-Fi network is a LAN. An office floor with 50 computers connected by cables and a switch is also a LAN.

         [ Switch ]
        /     |    \
  [PC1]   [PC2]   [Printer]
        (same building)

LANs are the most common target for internal threats. A disgruntled employee, a visitor who plugs in an infected USB, or an attacker who sneaks onto the Wi-Fi can move freely across a poorly secured LAN.

MAN – Metropolitan Area Network

A MAN connects multiple buildings across a city. A university with campuses spread across a city, or a bank linking all its city branches, uses a MAN. Fiber-optic cables buried underground usually carry the traffic.

[ Campus A ] ===fiber=== [ Campus B ] ===fiber=== [ Campus C ]
                    (same city)

WAN – Wide Area Network

A WAN spans countries or continents. The internet is the largest WAN in existence. Companies with offices in different countries connect those offices over a WAN, often using leased telecom lines or encrypted tunnels.

[ New York Office ] ---internet/VPN--- [ London Office ]
                    (different countries)

WAN traffic crosses multiple service providers and physical paths. Each hop is a potential point where data can be intercepted, making encryption essential on WANs.

Networks Sorted by Ownership

Private Network

A private network belongs to one organization. Only authorized users and devices get access. A company's internal network that employees use for work is a private network. Private networks use firewalls and access controls to block outside traffic.

Public Network

A public network is open to anyone. Airport Wi-Fi, coffee shop hotspots, and the internet itself are public networks. Anyone nearby can connect, which means attackers can position themselves on the same network as their targets.

Virtual Private Network (Overlay)

A VPN creates a private, encrypted tunnel through a public network. Employees working from home connect through a VPN so their traffic looks like it is inside the company's private network, even though it physically travels over the public internet.

[ Home Laptop ] === encrypted tunnel === [ Company Network ]
                  (through public internet)

Special Network Types Worth Knowing

DMZ – Demilitarized Zone

A DMZ is a separate network segment that sits between the internet and the internal network. Web servers and email servers that need to accept traffic from the outside go into the DMZ. If an attacker compromises a DMZ server, they still face a second firewall before reaching internal systems.

[ Internet ]
     |
  [Firewall 1]
     |
  [ DMZ ]  <-- Web Server, Email Server
     |
  [Firewall 2]
     |
[ Internal Network ] <-- Databases, Workstations

VLAN – Virtual LAN

A VLAN splits one physical network into multiple logical networks. A hospital might put medical devices on one VLAN and administrative computers on another. Even though all devices share the same switches, they cannot talk to each other unless a router specifically allows it.

Cloud Network

A cloud network exists in a data center managed by a third party (Amazon, Microsoft, Google). Companies rent virtual machines and networks in the cloud instead of buying physical hardware. Cloud networks carry the same security risks as physical networks, plus a few additional ones around shared infrastructure and misconfigured access controls.

Choosing Security Controls Based on Network Type

Network Type    | Main Risk              | Key Control
----------------|------------------------|------------------------
PAN             | Bluetooth hijacking    | Use latest BT version
LAN             | Internal spread        | VLANs + access control
MAN             | Fiber tap              | Encryption on links
WAN             | Interception           | VPN + TLS encryption
Public          | Eavesdropping          | HTTPS + VPN always
DMZ             | Server compromise      | Second firewall inward
Cloud           | Misconfiguration       | IAM + audit logging

Each network type demands a specific security approach. A one-size-fits-all policy fails because the threats differ at each level. Security professionals map the network type first, then design controls that match the real risks.