SUBDOMAIN 426.1 - NETWORK SECURITY Competencies:
426.1.1: Advanced Network Overview - The graduate compares and contrasts the common types of network topologies, network protocols, and network infrastructure components and their functions and identifies their strengths and weaknesses.
426.1.4: Establishing Physical Security - The graduate identifies and evaluates the appropriate security practices that are necessary to support physical security site operations.
426.1.5: Preventing Network Attacks - The graduate defines and evaluates different types of network security threats and selects appropriate countermeasures or controls to protect against them.
426.1.6: Intrusion Detection Systems (IDS) - The graduate analyzes network auditing tools related to intrusion detection.

Introduction: Myrtle & Associates and Bellview Law Group are two medium-sized law firms specializing in personal injury cases. The law firms have had a cooperative working relationship for the past 20 years. Recently, the firms have decided to consolidate and merge into one larger firm with a new name: MAB Law Firm. The challenge will be to integrate the computer systems from both firms into one large network. The two law firms are located across town from each other. The integration effort should be designed to combine the firms into a single logical site. Myrtle & Associates has three servers that were recently upgraded to Windows Server 2008. One of them functions as a domain controller, the other as a file server, and the last as an application server for their web-based case management system. Additionally, this firm utilizes a wireless network so that paralegals and attorneys can access the network using their company laptops. Lastly, the firm also issues smartphones to all attorneys and paralegals so that they can have access to the case management system. Access to the case management system is web-based. Bellview Law Group runs an operation with more legacy components. They currently have four Novell servers. One runs Novell Directory Services (NDS), one is a file server, and the last two run a legacy case management system. Bellview Law Group does not use wireless technology, and all network connections are hard-wired drops. You have been recommended to oversee the integration of the two computer systems. Prior to commencing the integration of computer systems from both law firms, you have been asked to perform some preliminary exploratory and documentary activities. Task:

Note: As the consultant for this project you are given flexibility in how to best accomplish the overall end result; however, you are encouraged to describe any assumptions that you are making and to substantiate the changes that you are recommending. A. Create a network diagram depicting the network of each of the law firms.
1. Create a network diagram depicting how the networks could be potentially integrated. Note: Use a professional diagramming tool (e.g., Visio) to create your network diagrams. B. Explain in an executive summary (suggested length of 1 page) any inherent challenges in merging the networks. C. Develop a security plan for the newly merged firm from the scenario above by doing the following:
1. Explain how physical security will be maintained for all network servers and related equipment.
2. Discuss the top five potential threats to this network environment.
a. Recommend countermeasures for each threat.
3. Present how an intrusion detection system can help maintain systems security.
a. Present how other network auditing tools can help maintain systems security. D. If you use sources, include all in-text citations and references in APA format.