Free Example 3 • Network Case File / Classroom Activity
Friday Help Desk Case: Staff can reach internal resources, but the public site times out
A larger evidence activity that makes students combine configuration, path testing, DNS, transport, and verification.
Incident evidence
Client: 10.12.20.44/24
Gateway: 10.12.20.1
DNS: 10.12.1.53
ping 10.12.20.1 → Reply
ping 10.12.5.30 → Reply
nslookup portal.example.net → 203.0.113.44
ping 203.0.113.44 → Reply
TCP test 203.0.113.44:443 → Timeout
Firewall log:
DENY TCP
src=10.12.20.44
dst=203.0.113.44
dport=443
Student deliverable
- List three parts of the network that the evidence already shows are working.
- Identify the first failing or contradictory boundary.
- Name the single clue that most strongly supports your diagnosis.
- Recommend one targeted change. Explain why it is narrower than changing the client, DNS, or route.
- Write the exact verification test you would run after the change.
- Changed fact: The firewall rule is corrected and TCP 443 connects, but the browser now returns HTTP 500. What part of your original diagnosis must change?
Teacher reasoning: Local forwarding, gateway reachability, internal routing, DNS resolution, and IP reachability to the public destination all have positive evidence. The failed TCP 443 test and matching firewall deny identify the policy/transport boundary as the immediate problem. After that repair, the changed HTTP 500 result proves the request is reaching the application, so students must update the diagnosis instead of continuing to blame the firewall.