Designing A Secure Network

115

Project: Designing a Secure Network

This involves putting together the various concepts learned throughout this course. You are tasked with designing the most secure network possible, keeping in mind your goal of supporting three (3) IT services: email, file transfer (centralized), and VPN. Your first step is to design a single network capable of supporting there three (3) different services. Once you have fully designed your network, you will need to provide three (3) workflow diagrams explaining how your designed network handles the three (3) different transactions. The first is an internal user sending an email using his / her corporate email address to a user on the Yahoo domain with an arbitrary address of [email protected]. The second workflow diagram should show a user initiating an FTP session from inside your network to the arbitrary site of ftp.netneering.com. The third workflow is an externally located employee initiating a VPN session to corporate in order to

access files on the Windows desktop computer, DT-Corp534-HellenS, at work.

Write a ten to fifteen (10-15) page paper in which you complete the following three (3) Parts. Note: Please use the following page breakdown to complete your assignment:

Overall network diagram: One (1) page
Datapath diagrams: Three (3) pages (one for each diagram)
Write-up: six to ten (6-10) pages

Part 1

Using Microsoft Visio or its open source alternative, create a diagram showing the overall network you’ve designed from the user or endpoint device to the Internet cloud, and everything in between, in which you:
- Follow the access, core, distribution layer model.
- Include at a minimum:
  - Authentication server (i.e. Microsoft Active Directory)
  - Routers
  - Switches (and / or hubs)
  - Local users
  - Remote users
  - Workstations
  - Files share (i.e. CIFS)
  - Mail
    server
  - Web servers (both internal and external)
  - Firewalls
  - Internet cloud
  - Web proxy
  - Email proxy
  - FTP server (for internal-to-external transport)

Explain each network device’s function and your specific configuration of each networking device.
Design and label the bandwidth availability or capacity for each wired connection.

Part 2

Using Microsoft Visio or its open source alternative, create a Datapath Diagram for the following scenario:
- Local user sends email to a Yahoo recipient. Local (corporate) user having email address [email protected] sends an email to [email protected].
  - Document and label the diagram showing protocols and path of the data
    flow as data traverses through your network from source to destination.
  - Include path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow.
  - Show user authentication when necessary.
Using Microsoft Visio or its open source alternative, create a Datapath Diagram for the following scenario:
- Local user, Jonny Hill, transfers file using ftp through the Internet to another company’s site (ftp.netneering.com). He has to access the secure shell using his active directory credentials to authenticate to the ftp server (linux running Redhat) on the DMZ. He needs to transfer files from his desktop across the Internet to
  inherit; font-family: inherit; color: #c02027; text-decoration: underline;" href="ftp://ftp.netneering.com/">ftp.netneering.com.
  - Document and label the diagram showing protocols and path of the data flow as data traverses through your network from source to destination.
  - Include path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow.
  - Show user authentication when necessary.
Using Microsoft Visio or its open source alternative, create a Datapath Diagram for the following scenario:
- Remote user, Hellen Stover, connects via VPN from home through the Internet to her corporate desktop, DT-Corp534-HellenS. Hellen uses a browser to initiate her VPN connection. By browsing to
  href="https://vpnaccess.corp534.com/">https://VPNaccess.corp534.com, she arrives at a login page where she needs to authenticate using her Active Directory credentials before the VPN tunnel is built.
Document and label the diagram showing protocols and path of the data flow as data traverses through your network from source to destination.
Include path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow.
Show user authentication when necessary.
Explain how your overall design protects the organization from both inside and outside attacks. Give examples.
Explain how your layered design compensates for possible device failures or breaches in network security.
Determine whether any possible bottlenecks exist in your design.
Explain how to make the file transfer process more secure.

Part 3

Use at least three (3)
quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
Include charts or diagrams created in Visio or an equivalent such as Dia. The completed diagrams / charts must be imported into the Word document before the paper is submitted.

The specific course learning outcomes associated with this assignment are:

Explain the essentials of Transmission
Control Protocol / Internet Protocol (TCP / IP) behavior and applications used in IP networking.
Identify network security tools and discuss techniques for network protection
Describe the foundational concepts of VPNs.
Design a secure network to address a business problem.
Use technology and information resources to research issues in network security design.
Write clearly and concisely about Advanced Network Security Design topics using proper writing mechanics and technical style conventions.

valign="top" width="151">

2aiii. Show user authentication when necessary for the emailing scenario.
Weight: 5%

Question Field

#Information Systems

Asked by susanbowman
5 years ago

155

1455 Rank 281 Views

Looking For You Know Who?

Asked by maguilar 4 years ago

#Information Systems

1111 Rank 1227 Views

Need Answers For Following Questions

Asked by piercejoshua 4 years ago

#Information Systems

93 Rank 1351 Views

There Are Many Different Types Of Information Security Certifications - Name At Least 2 Types, And Give An Example Of How They Would Be Used.

Asked by christopher38 4 years ago

#Information Systems

100 Rank 1173 Views

Week 4 Case Study

Asked by santoskatherine 4 years ago

#Information Systems

27 Rank 155 Views

This Week We Examine How Business Intelligence Is Constantly Changing Due To New And Exciting Technology Such As Improvements In Artificial Intelligence And Automated Decision Support Systems. Where Do You See Business Intelligence And Related Technology

Asked by ubenitez 5 years ago

#Information Systems

1332 Rank 795 Views

Strategies Of Customer Relationship Management And E-Commerce Assignment 5-6 Pages

Asked by travis66 5 years ago

#Information Systems

355 Rank 160 Views

All In The Docs

Asked by colleen20 5 years ago

#Information Systems

777 Rank 1002 Views

Using Scholarly Material, Explain How Enterprise Resource Planning (ERP) Systems Mitigate Risk And Assist In Organizational Decision Making. In Addition, Explain Why Mitigating Risk And Making Better Decisions Are Essential To Operational Efficiency. Th

Asked by lopezmaria 5 years ago

#Information Systems

657 Rank 156 Views

One Of The Major Causes Of System Performance Issues Is Programs That Run In The Background And Are Started When The System Starts. These Programs Are Usually Installed, So They Are Started From One Of Two Entries In The System Registry: HKEY_CURRENT_USE

Asked by brittanylewis 5 years ago

#Information Systems

492 Rank 509 Views

Help With Assignment

Asked by fordsherry 5 years ago

#Information Systems

Points: 190	Term Paper Project: Designing a Secure Network
Criteria	Unacceptable Below 70% F	width="122"> Fair 70-79% C	Proficient 80-89% B	Exemplary 90-100% A
Part 1
1ai. Create a diagram showing the overall network you’ve designed from the user or endpoint device to the Internet cloud, and everything in between, in which you follow the access, core, distribution layer model using Visio or its open source alternative. Weight: 5%	Did not submit or incompletely created a diagram showing the overall network you’ve designed from the user or endpoint device to the Internet cloud, and everything in between, in which you followed the access, core, distribution layer model using Visio or its open source alternative.	Partially created a diagram showing the overall network you’ve designed from the user or endpoint device to the Internet cloud, and everything in between, in which you followed the access, core, distribution layer model using Visio or its open source alternative.	Satisfactorily created a diagram showing the overall network you’	Thoroughly created a diagram showing the overall network you’ve designed from the user or endpoint device to the Internet cloud, and everything in between, in which you followed the access, core, distribution layer model using Visio or its open source alternative.
1aii. Create a diagram showing the overall network you’ve designed from the user or endpoint device to the Internet cloud, and everything in between, in which you include at a minimum authentication server, routers, switches, local users, remote users, workstations, file share, mail server, Web servers, firewalls, Internet cloud, Web proxy, email proxy, and FTP server using Visio or its open source alternative. Weight: 5%	Did not submit or incompletely created a diagram showing the overall network you’ve designed from the user or endpoint device to the Internet cloud, and everything in between, in which you included at a minimum authentication server, routers, switches, local users, remote users, workstations, file share, mail server, Web servers, firewalls, Internet cloud, Web proxy, email proxy, and FTP server using Visio or its open source alternative.	Partially created a diagram showing the overall network you’ve designed from the user or endpoint device to the Internet cloud, and everything in between, in which you included at a minimum authentication server, routers, switches, local users, remote users, workstations, file share, mail server, Web servers, firewalls, Internet cloud, Web proxy, email proxy, and FTP server using Visio or its open source alternative.	Satisfactorily created a diagram showing the overall network you’ ve designed from the user or endpoint device to the Internet cloud, and everything in between, in which you included at a minimum authentication server, routers, switches, local users, remote users, workstations, file share, mail server, Web servers, firewalls, Internet cloud, Web proxy, email proxy, and FTP server using Visio or its open source alternative.	Thoroughly created a diagram showing the overall network you’ve designed from the user or endpoint device to the Internet cloud, and everything in between, in which you included at a minimum authentication server, routers, switches, local users, remote users, workstations, file share, mail server, Web servers, firewalls, Internet cloud, Web proxy, email proxy, and FTP server using Visio or its open source alternative.
1b. Explain each network device’s function and your specific configuration of each networking device. Weight: 5%	Did not submit or incompletely explained each network device’s function and your specific configuration of each networking device.	Partially explained each network device’s function and your specific configuration of each networking device.	Satisfactorily explained each network device’s function and your specific configuration of each networking device.	Thoroughly explained each network device’s function and your specific configuration of each networking device.
1c. Design and label the bandwidth availability or capacity for each wired connection. Weight: 5%	Did not submit or incompletely designed and labeled the bandwidth availability or capacity for each wired connection.	Partially designed and labeled the bandwidth availability or capacity for each wired connection.	Satisfactorily designed and labeled the bandwidth availability or capacity for each wired connection.	Thoroughly designed and labeled the bandwidth availability or capacity for each wired connection.
Part 2
2ai. Document and label the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the emailing scenario. Weight: 5%	width="122"> Did not submit or incompletely documented and labeled the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the emailing scenario.	Partially documented and labeled the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the emailing scenario.	Satisfactorily documented and labeled the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the emailing scenario.	Thoroughly documented and labeled the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the emailing scenario.
2aii. Include path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the emailing scenario. Weight: 5%	Did not submit or incompletely included path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the emailing scenario.	Partially included path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the emailing scenario.	Satisfactorily included path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the emailing scenario.	Thoroughly included path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the emailing scenario.
Did not submit or incompletely showed user authentication when necessary for the emailing scenario.	Partially showed user authentication when necessary for the emailing scenario.	Satisfactorily showed user authentication when necessary for the emailing scenario.	Thoroughly showed user authentication when necessary for the emailing scenario.
2bi. Document and label the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the file transfer scenario. Weight: 5%	Did not submit or incompletely documented and labeled the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the file transfer scenario.	Partially documented and labeled the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the file transfer scenario.	Satisfactorily documented and labeled the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the file transfer scenario.	Thoroughly documented and labeled the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the file transfer scenario.
2bii. Include path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the file transfer scenario. Weight: 5%	Did not submit or incompletely included path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the file transfer scenario.	Partially included path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the file transfer scenario.	Satisfactorily included path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the file transfer scenario.	Thoroughly included path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the file transfer scenario.
2biii. Show user authentication when necessary for the file transfer scenario. Weight: 5%	Did not submit or incompletely showed user authentication when necessary for the file transfer scenario.	Partially showed user authentication when necessary for the file transfer scenario.	Satisfactorily showed user authentication when necessary for the file transfer scenario.	Thoroughly showed user authentication when necessary for the file transfer scenario.
2ci. Document and label the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the VPN connection scenario. Weight: 5%	Did not submit or incompletely documented and labeled the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the VPN connection scenario.	Partially documented and labeled the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the VPN connection scenario.	Satisfactorily documented and labeled the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the VPN connection scenario.	Thoroughly documented and labeled the diagram showing protocols and path of the data flow as data traverses through your network from source to destination for the VPN connection scenario.
2cii. Include path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the VPN connection scenario. Weight: 5%	Did not submit or incompletely included path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the VPN connection scenario.	Partially included path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the VPN connection scenario.	Satisfactorily included path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the VPN connection scenario.	Thoroughly included path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow for the VPN connection scenario.
2ciii. Show user authentication when necessary for the VPN connection scenario. Weight: 5%	Did not submit or incompletely showed user authentication when necessary for the VPN connection scenario.	Partially showed user authentication when necessary for the VPN connection scenario.	Satisfactorily showed user authentication when necessary for the VPN connection scenario.	Thoroughly showed user authentication when necessary for the VPN connection scenario.
2d. Explain how your overall design protects the organization from both inside and outside attacks. Give examples. Weight: 5%	Did not submit or incompletely explained how your overall design protects the organization from both inside and outside attacks. Did not submit or incompletely gave examples.	width="122"> Partially how your overall design protects the organization from both inside and outside attacks. Partially gave examples.	Satisfactorily how your overall design protects the organization from both inside and outside attacks. Satisfactorily gave examples.	Thoroughly how your overall design protects the organization from both inside and outside attacks. Thoroughly gave examples.
2e. Explain how your layered design compensates for possible device failures or breaches in network security. Weight: 5%	Did not submit or incompletely explained how your layered design compensates for possible device failures or breaches in network security.	Partially explained how your layered design compensates for possible device failures or breaches in network security.	Satisfactorily explained how your layered design compensates for possible device failures or breaches in network security.	Thoroughly explained how your layered design compensates for possible device failures or breaches in network security.
2f. Determine whether any possible bottlenecks exist in your design. Weight: 5%	Did not submit or incompletely determined whether any possible bottlenecks exist in your design.	Partially determined whether any possible bottlenecks exist in your design.	Satisfactorily determined whether any possible bottlenecks exist in your design.	Thoroughly determined whether any possible bottlenecks exist in your design.
width="151"> 2g. Explain how to make the file transfer process more secure. Weight: 5%	Did not submit or incompletely explained how to make the file transfer process more secure.	Partially explained how to make the file transfer process more secure.	Satisfactorily explained how to make the file transfer process more secure.	Thoroughly explained how to make the file transfer process more secure.
Part 3
3. 3 references Weight: 5%	No references provided	Does not meet the required number of references; some or all references poor quality choices.	Meets number of required references; all references high quality choices.	Exceeds number of required references; all references high quality choices.
4. Clarity, writing mechanics, and formatting requirements Weight: 10%	More than 6 errors present	5-6 errors present	3-4 errors present	0-2 errors present