Telecommunications and Network Security

Your company, Praetor, Inc, develops non-lethal crowd control technology for police and military use.  It has decided to move the headquarters and primary operations to Amarillo, Texas and utilize an outside disaster recovery company to provide a disaster recovery hot site in Wayne, Pennsylvania. 
Praetor, Inc, while most of its technology is for the civilian police market, has one Research and Development unit that is developing a light-based crowd control device for large groups for use by the military market.  This unit is made up of 25 people – many of which do not currently live in Amarillo and the company has no plans to force their relocation to the new location.
The headquarters building is 3 floors in height and have approximately 150,000 square feet.  As the senior CISSP, you have been tasked with designing the network solution with both functionality and usability in mind for the new location. 
Further specifications\company requirements:
The primary site (Amarillo) is the only one you need to concern yourself with designing as the hot site (Wayne) is considered to be logically identical as it is a mirror hot site for business continuity\disaster recovery
There needs to be a constant connection between the two sites with no less than 105 Mbps throughput
There will be a datacenter on the third floor
There will be 100 network connections on each floor
There are 4 primary divisions in the company:  Headquarters\Administration, Sales\Customer support, Research and Development (this division includes the Light device research t group) and Information Technology
The members of the Light device research group that do not live in Amarillo need to be able to connect to the primary datacenter at any time
Physical security as well as logical must be considered
There are file servers, database servers, corporate webservers and external sales webservers and all must have high-availability
All servers must have redundancy (both physical and how they are configured)
The solution should have a plan to verify security measures
Case requirements:
You should submit network drawings showing
the topology of the network
the topology of the VPN setup
They should include the hardware (and be labeled as such) but only generally – no brand names or models, just “switch”, “firewall”, “router”, “server” and so on; any cabling differences should be noted as well. 
You should include a paper that contains the following:
List any recommended cable and where it will be used
List the type of connection you will utilize to ensure 105 Mbps connection between sites (do not just give a medium, like fiber or copper, or just a protocol)
Recommend wiring closets wherever needed
Recommend any WAN or wireless technologies; mention and explain what topologies you used and why
How you will set up the servers (both physical and logical should be explained) to have:
redundancy
high-availability
What logical protections you recommend
What measures you will take to protect against attack
What measures you will take to prevent attacks
What measures you will take to be notified that you are being attacked
Recommend and describe logical (i.e. network) traps to stop attackers
Any physical security measures you deem appropriate
What they are
Where they are
How they protect
How the remote users will connect securely
How will security measures be verified?
Justify your recommendations
Grading Criteria and Notes
APA or MLA style\formatting is acceptable – double spaced lines, 10 or 12 point Arial font is preferred.
Network diagrams must be your original work or they will not be accepted
Network Diagrams must show all network devices (workstations, since there are a large number, can be grouped so that 1 icon can represent 10 or 100 or whatever number you want them to be); the VPN diagrams only need to show the nodes involved in the VPN setup (as well as their relation to other networking devices, like routers, firewalls, etc), including the remote user.
Original written work is mandatory.  Do not copy\paste directly from websites, ads, or any other work that is not yours – unless it is cited as a quote - or it will not be accepted. 
If there is plagiarism in one part of the Case, the entire Case is tainted and will receive a zero.  There will be no additional submissions – once the final submission receives a zero for plagiarism that will the final grade for the Case.
If you want to explain a common item – such as a particular topography (for example a Star topography) it is acceptable to use a graphic from another source, but it must be cited in the footnotes and works cited\bibliography page just as you would a quote from another source or information received from an outside source.  NOTE:  a generic diagram (such as a star, token, etc. diagram) used in this fashion will not constitute the network diagram.
Do not use specific manufacturers\models (i.e. Cisco 2960, Dell Optiplex 9010, etc.) unless you feel you absolutely have to – if you do there must be a very good explanation why you felt you had to use this particular model.
While there is no set budget, it is advisable to use solutions that are in line with common business practices unless there is a reason to go above and beyond (i.e. fiber to every workstation would be VERY expensive) and the reason should be fully explained.
If a specific software is to be utilized, list all aspects as to how it is to be used.
Recommendations must be specific – i.e. you cannot just say “protections will be in place\utilized”; you have to explain what those protections are as well as their purpose
Each recommendation must be explained specifically and fully.