Network Security Fundamentals
CIS 333

Showcase: Security Deployment of a small network infrastructure for DRE Inc.

Submitted By

Rene Dell

Submitted To
Dr. Lawrence Joseph

March, 2012
Table of Content

Abstract ……………………………………………………………………….I
Introduction……………………………………………………………..……..II
The Problem Statement………………………………………………….……..III
The Proposed Solution………………………………………………………….IV
The Methodology………………………………………………………………..V
The Result……………………………………………………………………….VI
The Conclusion………………………………………………………………….VII
References……………………………………………………………………….VIII

Abstract

DRE Inc is a company that produces wrist watches for men and women. The company started in 1999 with just about 10 member staffs in Takoma, Maryland. Now more than 12 years later, DRE has grown to a company of over 500 employees, and has departments in Washington DC, Virginia, Maryland and the head quarters in New York City. This growth has allowed for an increased problem in the network infrastructure and management for the company.

Introduction:

DRE Inc has four major departments, sales in Maryland, Manufacturing in Washington Dc, Warehouse in Virginia, and the Accounting Department in New York City. The proposed network will have four routers, to serve each location.

The Proposed Solution

Figure 1a DRE Inc Organizational Chart

The Proposed solution will include the following:
5 Cisco routers
1 Cisco PIX 500 Firewall
4 Cisco switches
Mail Server, Print Server, database server, and Web Server.

Methodology

Figure 1b DRE Inc Network Diagram

Figure 1c DRE Inc Backend Diagram

Sales: This department is in charge of marketing and advertisement of company products.
Manufacturing: This department is in charge of hardware and production.
Warehouse: The warehouse is in charge of logistics and inventory of goods.
Accounting: The accounting takes control of all finance matters, and credit/debit for the company.

Web Server: serves information to other computers, it serves Web pages to computers that are connected to it. It also parses scripting languages such as PHP, ASP, and JSP.

Print Server: Our Print server is a server computer that manages print jobs for our large domain networks with our users. This print server is simply a device that allows our computer workstations to interface with printers that are shared on our network. Each station has the ability to designate one of the printers on the network as its default printer, but may always choose to send a print job to any of the other printers recognized by the print server.

Database Server: It provides database services to other computer programs, as defined by the client–server model, it also refer to a computer dedicated to running such a program. In this case we use SQL Server as a database server. It is used to store data which is accessed using any number of methods. Generally, the data will sit on a server (or several server) machine while users access it from remote terminals.

Mail Server: (sometimes also referred to as an e-mail server) is a server that handles and delivers e-mail over a network, usually over the Internet. Our mail server can receive e-mails from client computers and deliver them to other mail servers. Our mail server can also deliver e-mails to client computers.

Router: This hardware device takes incoming packets, analyzing the packets and then directing them to the appropriate locations, moving the packets to another network, converting the packets to be moved across a different type of network interface, dropping the packets, or performing any other number of other types of actions. A router has a lot more capabilities than other network devices such as a hub or a switch which are only able to perform basic network functions. For example, a hub is often used to transfer data between computers or network devices, but does not analyze or do anything with the data it is transferring. However, a network router may take the data being sent over a network, change how it is packaged and send it to another network or over a different type of network. For example, routers are commonly used in home networks to share a single Internet connection with multiple computers.

Switch: These switches are used to connect multiple computers to each other, our switches are fundamentally similar to bridges, but they supports a larger number of connected LAN segments .When increase traffic on a network, our switch can split very large networks in smaller without affecting network performance. A large network may develop increased amounts of traffic that computers are added. These switches operate as a filter to control the use of these devices on the network. These are external device that are connected to devices on our network. They work to inspect packets and data are transmitted over the network between the devices we have connected. These devices can benefit from the network because they work to control the network bandwidth and helps maintain stability.

Firewall: This is a Cisco PIX 500 firewall. It helps to scale the network and assist in better performance, deny all inbound traffic by default, and allow outbound traffic, until the configuration is changed for segmentation.

The Result

The result demonstrated that after the deployment of the new infrastructure, the network is now more secure.

Conclusion

In conclusion, the network of DRE Inc is now more secure and allows for growth.