Reference no: EM132427584
Unit 17 Network Security - Higher National Diploma in Computing
Learning Outcomes
LO1. Examine Network Security principles, protocols and standards.
LO2. Design a secure network for a corporate environment.
LO3. Configure Network Security measures for the corporate environment.
LO4. Undertake the testing of a network using a Test Plan.
Assignment Brief and Guidance:
EMC Finance is a well-known Finance company established in Kandy with more than 5000 customers and 8 branches island wide. Director board of EMC Finance hasdecided to restructure and enhance the computer network at Head office with up to date security measures to face the emerging security threats worldwide. You have been appointed as the Network Security Engineer for EMC Finance and it is now your responsibility to plan and implement a secure network that fulfils the company's expectations.
Main requirements are as follows but NOT limited to;
1. Head office LAN need to be a Gigabit Ethernet and all Network devices need to be compatible with each other for maximum performance.
2. All the network devices such as Routers, Switches, Firewalls etc. should be manageable and only secure logins need be allowed on all devices.
3. AAA should use for Network Device login Authentication where possible and Syslog Server should use for record logging events, while having NTP server for time.
4. All publicly available resources including public web servers need to be separated from the main network and should move to a separate subnet. Only Secure Web Access should be enabled for web servers.
5. Design aSAN (Storage Area Network) implementation for saving Data for the Internal Network.
6. Network design should follow the Hierarchical Network Design Model.
7. End user authentication and managing of security polices need to centralized.
8. Internet usage management and URL filtering need to be enforced.
9. Communication between the Head office and the Branch offices need to be highly secured.
10. Quality of service (QoS) should be implemented where possible.
EMC Finance Head office consists of the following departments;
|
Department
|
Number of Users
|
|
Customer Care
|
25
|
|
Sales and Marketing
|
35
|
|
Finance
|
60
|
|
Legal
|
5
|
|
HR
|
20
|
|
IT Team
|
25
|
|
Internal Server Room
|
8 Servers + SAN
|
|
Servers for Public users
|
4
|
Task 1
Examine Network Security principles, protocols and standards.
1.1. Discuss the importance of Network Security in present socio-economic world.
1.2. Describe devices and their characteristics that are used to enhance the security of a Network.
1.3. DifferentiateSymmetricand Asymmetric Encryption with examples.
1.4. Explain the purpose of a Digital Certificatein secure web access.
Task 2
Design a secure network for a corporate environment.
2.1. Provide a suitable Virtual LAN design for internal network and IP Design for the network. (Public servers should be separated from the Internal Network)
2.2. Explain the Technologies /concepts that are required to accomplish the objectives of the above scenario.
2.3. Determine which security devices and software are needed to design this network and justify your selections.
2.4. Provide a suitable detailed Diagram of above Network Design including WAN connections.
Task 3
Configure Network Security measures for the corporate environment.
3.1. Configure all the network devices to achieve the highest level of security for the network with the requirements given by the scenario. (Provide Network Security configuration scripts/files/screenshots with comments.)
3.2. Explain how QoS can be integrated in to Network security configurations.
Task 4
Undertake the testing of a network using a Test Plan
4.1 Develop test cases and test the above LAN and WAN designs to verify whether the design objectives are met.
(Provide Network Security configuration scripts/files/screenshots with comments.)
4.2 Suggest how you can improve the performance and security of this network in the Future.
Attachment:- Network Security.rar