Networking Fundamentals Every Security Professional Needs

You can’t secure what you don’t understand. Before you touch a single security tool, you need to understand how networks actually work. This isn’t glamorous, but it’s the foundation everything else is built on.

The Essentials

TCP/IP Model — Understand the four layers (Application, Transport, Internet, Network Access) and how data flows through them. Every packet you’ll ever analyze in Wireshark follows this model.

DNS — The phonebook of the internet. Know how domain resolution works, because DNS is involved in a staggering number of attacks — from phishing to data exfiltration.

HTTP/HTTPS — How web traffic works, what headers contain, how cookies function, and why TLS matters. If you’re going into web application security, this is your bread and butter.

Subnetting — Yes, you need to know it. CIDR notation, subnet masks, and how to calculate network ranges. It comes up in every certification exam and every real-world engagement.

How I Learned This

I used a combination of Professor Messer’s CompTIA Network+ videos (free on YouTube), hands-on labs with Packet Tracer, and a lot of Wireshark captures on my home network. The key is to not just memorize — actually capture traffic, inspect packets, and trace the flow of a simple web request from your browser to a server and back.

Once networking clicks, everything in cybersecurity makes more sense. Firewalls, IDS/IPS, VPNs, network segmentation — they’re all built on these fundamentals.