graph TB
%% Styling
classDef internet fill:#f96,stroke:#333,stroke-width:2px;
classDef security fill:#f66,stroke:#333,stroke-width:2px;
classDef core fill:#69f,stroke:#333,stroke-width:2px;
classDef server fill:#9f9,stroke:#333,stroke-width:1px;
classDef clinic fill:#ff9,stroke:#333,stroke-width:1px;
classDef cloud fill:#cdf,stroke:#333,stroke-dasharray: 5 5;

subgraph Internet_Edge [External Connectivity]
I((Internet)):::internet
ISP1[ISP1: Fiber 500 Mbps]
ISP2[ISP2: Backup 200 Mbps]
end

subgraph Security_Layer [Security & Gateway]
ER[Edge Router]
FW[NGFW HA Pair]:::security
VPN[VPN Gateway]:::security
DMZ[DMZ Zone]
end

subgraph Core_Network [Core Infrastructure]
CORE[Core Switch Stack]:::core
V10[VLAN 10: Admin]
V20[VLAN 20: Clinical]
V40[VLAN 40: Guest Wi-Fi]
V50[VLAN 50: CCTV/IoT]
V60[VLAN 60: VoIP]
end

subgraph Server_Farm [VLAN 30: Data Center]
direction LR
DC1[DC01: AD/DNS]:::server
DC2[DC02: AD/DNS]:::server
FILE[FILE01: Storage]:::server
DB[DB01: SQL]:::server
EMR[EMRAPP01: MediTrack]:::server
BILL[BILL01: ClaimPro]:::server
BACKUP[BACKUP01: Veeam]:::server
NAS[NAS01: Local Repo]:::server
LOG[LOG01: Monitoring]:::server
end

subgraph Cloud_Services [Cloud Integration]
AZ[Azure Backup Vault]:::cloud
M365[Microsoft 365]:::cloud
end

subgraph Remote_Clinics [Branch Sites]
C1[QC Clinic]:::clinic
C2[Makati Clinic]:::clinic
C3[Pasig Clinic]:::clinic
C4[Taguig Clinic]:::clinic
end

%% Connectivity Flow
I --> ISP1
I --> ISP2
ISP1 --> ER
ISP2 --> ER
ER --> FW
FW --> DMZ
DMZ --> WEB[WEB01: Patient Portal]:::server
FW --> CORE
FW --> VPN

%% Core to VLANs
CORE --- V10
CORE --- V20
CORE --- V40
CORE --- V50
CORE --- V60
CORE --> Server_Farm

%% Remote & Cloud Links
VPN -.->|S2S VPN| C1
VPN -.->|S2S VPN| C2
VPN -.->|S2S VPN| C3
VPN -.->|S2S VPN| C4
BACKUP --- AZ
V10 --- M365

Loading