Reference no: EM133511724
Assignment: Project: Network Design and Plan
Purpose
This project provides you an opportunity to solve a comprehensive problem in firewall and virtual private network (VPN) implementation at various levels. You will play the role of an employee participating in network design and planning of a specific business situation.
The following tools and resources are needed to complete this project:
1. A web browser and access to the Internet to perform research for the project
2. (Optional) A tool for creating basic network diagrams, such as draw.io or Microsoft PowerPoint
Learning Objectives and Outcomes
1. Apply core competencies learned throughout the course to a single project.
2. Analyze and apply knowledge of firewalls, VPNs, and other network defense measures.
3. Demonstrate logical reasoning and decision-making skills.
Overall Project Scenario
Corporation Techs provides remote and on-site support to small and mid-size businesses. Clients use Corporation Techs' services to solve problems involving malware removal,to manage data recovery and network issues, and to install hardware and software.
Due to recent developments, most technical representatives will begin working from home within the next six months. Because Corporation Techs provides 24/7 support, its systems and communications pathways must be fully operational at all times. In addition, the company has been experiencing unprecedented growth and is preparing to double its client-facing staff.
You are a junior network architect who is responsible for helping to plan and design network enhancements to create a more secure internal network, and to ensure secure remote access.
Task
The project is divided into several parts. Details for each deliverable can be found in this document. Refer to the course Syllabus for submissiondates.
I. Project Part I: Network Design
II. Project Part II: Firewall Selection and Placement
III. Project Part III: Remote Access and VPNs
IV. Project Part IV: Network Design Report
Project Part I: Network Design
Scenario
The Corporation Techs' current network consists of 1 web server (accessible by the public), 2 application servers, 2 database servers, 2file and print servers, and 50 workstations. The web server runs Linux/Apache, the other servers run Microsoft Windows Server, and the workstations run Microsoft Windows. The network is connected through a series of switches, is not physically connected to other networks, and runs Internet Protocol version 4 (IPv4).The network is protected by a single border firewall. The senior network architect, whom you work for directly, has verified the company's business goals and has determined the features and functions required to meet those goals.
The senior network architect has asked you to create a network design that includes the following components:
1. Current infrastructure elements
2. A logical topology that separates the Accounting and Sales departments
3. Redundant communications
4. Justification for continuing with IPv4 or upgrading to IPv6
Tasks
For this part of the project, perform the following tasks:
A. Conduct research to determine the best network design to ensure security of internal access while retaining public website availability.
B. Design a network configuration with physical and logical topologies. Identify major network elements (e.g., servers, switches, gateways) and their locations within the private and protected network segments.
C. Include a high-level plan that ensures communications are available 24/7.
D. Recommendwhether to continue using IPv4 or upgrade to IPv6, and explain why.
E. Create a basic network diagram that illustrates the current network and enhancements. Include a few workstations to represent all workstations on the internal network.The diagram will be very high level at this stage and include only necessary details. You may use a software tool or simply pencil and paper. You will update this design later in the project.
F. Create a draft report detailing all information as supportive documentation.
G. Cite sources, where appropriate.
Project Part II: Firewall Selection and Placement
Scenario
The senior network architect at Corporation Techs has informed you that the existing border firewall is old and needs to be replaced. He recommends designing a demilitarized zone (DMZ) to increase network perimeter security. He also wants to increase the security of network authentication, replacing the current username and password approach.
Tasks
For this part of the project, perform the following tasks:
A. Research and select firewalls for the Corporation Techs network.
1. Describe each firewall, why you selected it, and where it should be placed for maximum effectiveness.
2. Address network, server, and workstation firewalls.
B. Describe a plan for creating a DMZ, and explain how it makes the network more secure.
C. Research network authentication and create a high-level plan for secure authentication to internal network resources.
D. Create a draft report detailing all information as supportive documentation.
E. Cite sources, where appropriate.
Project Part III: Remote Access and VPNs
Scenario
As you are aware, many remote users will soon need access to the internal network and services. A remote access and virtual private network (VPN) plan is needed to connect it all together.
The senior network architect has asked you to create the plan that will allow secure remote access to the internal network while preventing unauthorized access. He specifically requested that all information transferred between remote users and the organizational servers be protected against snooping.
Tasks
For this part of the project, perform the following tasks:
A. Research and recommend the most appropriate VPN technology. The most likely solution is either an Internet Protocol Security (IPSec) VPN or SSL/TLS VPN. Describe the VPN technology and explain why it is the best choice for Corporation Techs.
B. Recommend any other forms of remote access that are relevant and describe how they would be used.
C. Create a draft report detailing all information as supportive documentation.
D. Cite sources, where appropriate.
Project Part IV: Network Design Report
Scenario
You are ready to create and submit a final network design and plan to the senior network architect, who will present it to senior management and other decision makers.
Tasks
For this part of the project, perform the following tasks:
A. Create a final network diagram that includes the basic diagram and all relevant network enhancements.
B. Create a professional report that includes content from each draft report. Include detailsfor all relevant information, persuasive justification for your recommendations, and methods to measure the success of each major network enhancement. Include a 1- to 2-page executive summary.
C. Use simple, clear language that primary stakeholders (non-IT) can understand easily.