Essay on Network Design Project

It can control from a specified zone, such as a local computer, a local intranet, trusted sites, restricted sites, or the Internet. This type of rule can be applied to allow only Windows Installer packages to be installed if they come from a trusted area of the network. For example, an Internet zone rule could restrict Windows Installer packages from being downloaded and installed from the

Create a policy requiring users to obtain a security training prior to gaining access to the wireless networks.

Individual users play an important role in any form of institution or organization but concerns are raised about the security. The network administrators clearly lay down a set of rules, regulations and protocols that an individual user has to agree accordingly upon which part of the resources and what class of service that the user can obtain.

There are multiple aspects of security in this network, which I have tried to implement as much as possible. This is where the CIA triangle comes into play, confidentiality, rules and limits to access information; Integrity, making sure the data is accurate and trustworthy; Availability, having reliable access to the information. I am going to talk about each aspect in a list format and explain how it’s used in my network. One thing that will be performed on all network devices is system updates and patches. They will happen on a monthly basis, on a weekend when the networks are not being used.

Access control refers to the mechanisms that identify who can and cannot access a network, resource, application, specific action.

When it comes to planning an entire system network is not a easy task. We need to explore the options and I plan on covering this in the essay and will go into brief details about several key concepts and explain key points in Peer to Peer (P2P) client / server architecture, web based computing and how network and their protocols are required for successful network implementation.

Authentication of an individual to access and use files, systems, and screens is vital to

A firewall will be used so that UN authorized users will be restricted. Parts of security will be different user account and password for each member.

MAC address filtering will allow the servers to accept incoming traffic from predetermined hosts. To further secure the local area network, the network security team will be implementing the principle of least privilege in regards to the users. By using the principle of least privilege we will be preventing multiple forms of malicious or accidental risks by only giving the user the permissions and privileges necessary to complete their job. Microsoft’s default security software is commonly used and well known making the vulnerabilities well known, which would make it easier for a hacker to plan out an attack. Third party antivirus\malware and firewall software will be used on all machines. The servers located within the network will make use of a statefull firewall to monitor and filter all traffic on the network by scanning for congruence between data packets.

3.p16 The purpose of access control is to regulate interactions between a subject and an object, such as data, a network or device

All the employees come under this policy. It doesn’t have any specific permission but contains common permissions for all employees. But some employees of the organization need special and specific permissions on their domain to work. Thus, to allow these specific permissions on specific domain RAP (Remote Access Policy) is being used. This policy gives directions to the specific domain on which it is applied. (Sailer et al,

contains the case narrative, related figures, and a set of questions and problems. These do not have one unique solution. There are too many alternatives when dealing with LANs, WANs, MANs, BNs, and the Internet, so a reallife network design and development problem can have several workable answers.

mandatory and discretionary access control policies. ACM Transactions on Information and System Security, Vol. 3, No. 2.

When a credential is put forward to a reader, the reader sends the credential’s information to a control panel. The control panel compares the credential's information to an access control list which then accepts or denies the presented request, and sends a transaction log to a database. If there is a match between the credential and the access control list, the door is unlocked and when it is denied the door remains locked. The reader usually provides feedback, such as a flashing red LED for

Peterson, L. L., & Davie, B. S. (2011). Computer Networks, Fifth Edition: A Systems Approach (The Morgan Kaufmann Series in Networking). Morgan Kaufmann.