Multi-Site Secure Network Design

I am rolling out a brand-new network that will link several branch locations under one cohesive architecture while guaranteeing secure internet access at every site. The project is design-focused: I need a complete, future-proof topology that covers WAN connectivity, site-to-site links, and edge security so staff can work safely and efficiently no matter where they are.

Please shape the design around best-practice routing, switching, and firewall principles, balancing resilience with cost. Vendor neutrality is fine—feel free to suggest Cisco, Fortinet, MikroTik, or a mix if it serves the goal—but every recommendation must include justification, bandwidth sizing, and clear diagrams that management can understand.

Deliverables
• A high-level and low-level network topology diagram for all branches
• Bill of materials listing required hardware, licensing, and link capacities
• Security framework (firewall zones, VPN or SD-WAN overlay, segmentation policy)
• IP addressing schema and naming conventions
• Configuration templates or example snippets for the proposed equipment
• Brief hand-over guide so in-house IT can deploy and maintain the solution

Acceptance criteria: the design must enable each site to reach the internet through a secured path, isolate guest traffic from corporate resources, and support at least one redundant link or failover method. All documents should be delivered in editable formats (Visio, PDF, or similar) within the agreed timeline.