Designing A Secure Network

Write a ten to fifteen (10-15) page paper in which you complete the following three (3) Parts. Note: Please use the following page breakdown to complete your assignment:

• Overall network diagram: One (1) page
• Datapath diagrams: Three (3) pages (one for each diagram)
• Write-up: six to ten (6-10) pages

Part 1

• Using Microsoft Visio or its open source alternative, create a diagram showing the overall network you’ve designed from the user or endpoint device to the Internet cloud, and everything in between, in which you:
  • Follow the access, core, distribution layer model.
  • Include at a minimum:
    • Authentication server (i.e. Microsoft Active Directory)
    • Routers
    • Switches (and / or hubs)
    • Local users
    • Remote users
    • Workstations
    • Files share (i.e. CIFS)
    • Mail server
    • Web servers (both internal and external)
    • Firewalls
    • Internet cloud
    • Web proxy
    • Email proxy
    • FTP server (for internal-to-external transport)

• Explain each network device’s function and your specific configuration of each networking device.
• Design and label the bandwidth availability or capacity for each wired connection.

Part 2

• Using Microsoft Visio or its open source alternative, create a Datapath Diagram for the following scenario:
  • Local user sends email to a Yahoo recipient. Local (corporate) user having email address [email protected]sends an email to [email protected].
    • Document and label the diagram showing protocols and path of the data flow as data traverses through your network from source to destination. 
    • Include path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow. 
    • Show user authentication when necessary.
• Using Microsoft Visio or its open source alternative, create a Datapath Diagram for the following scenario:
  • Local user, Jonny Hill, transfers file using ftp through the Internet to another company’s site (ftp.netneering.com). He has to access the secure shell using his active directory credentials to authenticate to the ftp server (linux running Redhat) on the DMZ. He needs to transfer files from his desktop across the Internet to ftp.netneering.com.
    • Document and label the diagram showing protocols and path of the data flow as data traverses through your network from source to destination. 
    • Include path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow. 
    • Show user authentication when necessary.
• Using Microsoft Visio or its open source alternative, create a Datapath Diagram for the following scenario:
  • Remote user, Hellen Stover, connects via VPN from home through the Internet to her corporate desktop, DT-Corp534-HellenS. Hellen uses a browser to initiate her VPN connection. By browsing to https://VPNaccess.corp534.com, she arrives at a login page where she needs to authenticate using her Active Directory credentials before the VPN tunnel is built.
• Document and label the diagram showing protocols and path of the data flow as data traverses through your network from source to destination. 
• Include path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols that are used for each flow. 
• Show user authentication when necessary.
• Explain how your overall design protects the organization from both inside and outside attacks. Give examples. 
• Explain how your layered design compensates for possible device failures or breaches in network security.
• Determine whether any possible bottlenecks exist in your design.
• Explain how to make the file transfer process more secure.