Final Project: Executive Summary for Network Design Project

The customer required that each workstation have at least 256 GB to 500 GB of local storage. They also wanted a file server on the network to protect data in case a workstation went down. This server will be networked into allow file sharing between devices and have available 40 GB to start. These network upgrades, the greater use of applications, and file sharing will require more protection; a new firewall programmed to filter packets and analyze external requests and direct requests and traffic to the right application.

Routers and switches will be utilized to route network signals to all areas of this large network. Telephony systems will be introduced to serve the VOIP located at each location to assist with communication needs. Wireless technologies will also be needed to assist with mobility and other devices such as printers, laptops, fax machines, etc. Lastly, a physical firewall will be enforced at each location to protect the network from internal and external intruders.

IS355_BestW5Assignment Lab #6 – Report file Developing a Risk – Mitigation Plan Outline for an IT Infrastructure Course Name and Number: Risk Management IS355 Student Name: Sherry Best Instructor Name: Nicole Goodyear Lab Due Date: 2/13/2018 Risks, Threats, and Vulnerabilities Primary Domain Impacted Risk Impact/ Factor Unauthorized access from public Internet Remote Access Domain 1 User destroys data in application and deletes all files Systems/Application Domain 3

It is generally limited to a geographic area such as a writing lab, school, or building. Rarely are LAN computers more than a mile apart. In a typical LAN configuration, one computer is designated as the file server. It stores all of the software that controls the network, as well as the software that can be shared by the computers attached to the network. Computers connected to the file server are called workstations. The workstations can be less powerful than the file server, and they may have additional software on their hard drives. On many LANs, cables are used to connect the network interface cards in each computer; other LANs may be wireless.

European Union Agency for Network and Information Security. (n.d.). ENISA. Retrieved May 31, 2014, from

There are various types of equipment that the company should look for when considering this network. The first item to look at when considering equipment is the Operating system and software that we would need. Next, the group took into consideration the type of server the company needs to make this network a reality. Another thing that we looked at is the possibility of having ThinClients over regular desktops for all workstations. Of course, it was taken into consideration that some employees would not want ThinClients. So, we show the type of tower we plan to place into those spaces, along with any peripheral device for both. Then, we will look at the network devices that will go into each building that include switches, routers, repeaters, hubs, and wireless access points. Finally, the group will note guidelines for choosing a local ISP at each site. Each Item outlined helps to build a network based on the specifications given by the company.

The best network design to ensure the security of Corporation Techs internal access while retaining public Web site availability consists of several layers of defense in order to protect the corporation’s data and provide accessibility to employees and the public.

In the interest of business continuity, remote access will be utilized. User wishing access to internal network assets will only be able to access said assets with the use of a

Some basic hardware will be needed for each of the personnel in the HR office; this will include but is not limited to, systems upgrade, data removal, transfer and storage. All the hardware will work on a supervisor network that will link all equipment to the supervising computer of that department. This computer will be where all levels of access to the network by personnel of HR will be assigned. Keeping the department on an independent network from other departments in the company is a security feature that is needed to control the access points of personnel information. Though the network will be isolated, the isolation will be only on information that is outsourced. The information that is not personal, Example would be the companies shared drive, will be where the network is accessible by all departments of the company. This will allow managers the ability to add information in personnel files such as employee reviews, training completed, and any incidents involving personnel. Though a supervisor computer is

In the System/Access Domain people have the ability to collect and store information on the network from virtually any location. The issue of concern is the safety of the information. Does it contain viruses or malware? The next concern is private information or proprietary information leaving you facility. How can you prevent it? The concept of Data Loss Prevention (DLP) can assist with this process. DLP provides the ability to search policy and procedures to determine what is considered private or confidential information which assists with not allowing that information to be stored in unsafe locations. DLP also provides a perimeter check where data is checked when it is being transmitted to a CD burner. If unsafe information or company information is being passed then DLP has the ability to stop the transfer.

For example, the Sales and Marketing Division has a desktop computer for each of the account representatives. All of these computers are connected to a small local area network (LAN) that serves only the Sales and Marketing Division. The

The network will use the Hewlett Packard Procurve switches because of their high performance, low cost relative to other brands (such as Cisco) and their lifetime warranty. The Hewlett Packard E5406zl switches are can support up to 144 gigabit network connections (10/100/1000baseT Ethernet) and one will be installed on each floor in their repective Server Rooms. The switches will be configured with a VLAN (Virtual Local Area Networks) for each subnet. The network access will be secured using Active Directory single

You are the network manager of a company that has grown from 10 employees to 100 employees in 12 months. Year 2 projected growth is estimated to be 100 additional employees located at a remote location. The aggressive growth has brought about some unique challenges and opportunities. The company has one remote warehouse and no off-site disaster recovery services or servers. The network design remains a non-redundant, flat topology.

Key tools utilized, variable length subnet masking and route summarization are explained as well. Here choosing the appropriate routing protocol is equally critical for a successful design. To implement different masks for the same major network it is necessary to have a routing protocol that supports VLSM. Such routing protocols are called classless routing protocols. They carry the mask information along with the route advertisements therefore allowing for the support of more than one mask.

In the examining some of the security issues that are commonly found in the small to medium sized LAN set up for businesses and in the identification of the best practices from a network designer’s perspective, here are some of the challenges faced