Network Security References:
Paquet, C. (2013, February 5)“Network Security Concepts and Policies” Retrieved March 10, 2017, from http://www.ciscopress.com/articles/article.asp?p=1998559&seqNum=3
“What Is Network Security?” (2016, November 09). Retrieved March 10, 2017, from http://www.cisco.com/c/en/us/products/security/what-is-network-security.html
Products:
Remote Sites
Wireless 4 ea
https://meraki.cisco.com/products/wireless/mr53
Access switches 2 ea
https://meraki.cisco.com/products/switches/ms350-48
Twinax Cable with SFP+ Connectors (1m)
-two per access switch
Distro switches 2 ea
https://meraki.cisco.com/products/switches/ms410-16
WAN
Router/FW/IPS 2ea
https://meraki.cisco.com/products/appliances/mx100
HQ Site
Wireless 8 ea
https://meraki.cisco.com/products/wireless/mr53
Access switches 4 ea
https://meraki.cisco.com/products/switches/ms350-48
Distro switches 2 ea
https://meraki.cisco.com/products/switches/ms410-16
Router/FW/IPS 2ea
https://meraki.cisco.com/products/appliances/mx400
If you want to add a physical security to your design add below per site
Indoor 2ea
https://meraki.cisco.com/products/security-cameras/mv21
Outdoor 2 ea
https://meraki.cisco.com/products/security-cameras/mv71
End user device management
1800 of the following
MDM Customers
https://meraki.cisco.com/products/systems-manager
access switch to distro switch fiber 2 connections one to each distro switch
access switch to user copper
access switch to ap copper
distro switch to FW fiber 2 connections one to each fw
HQ(LA) Madrid backup site aka dr
https://www.synology.com/en-us/products/RS18016xs+#spec
use google for site storage (e-mail, google docs, etc)
VLAN and IP addressing for each department:
Accounting
· Vlan 10
Marketing
· Vlan 20
Human Resources
· Vlan 30
Sales
· Vlan 40
IT
· Vlan 50
Engineering
· Vlan 60
Physical security
· Vlan 70
VPN remote access
· Vlan 80
Infrastructure (where Meraki devices will sit)
Vlan 200
Wan
Site-to-site vpn from all sites to all sites
CIDR would be the best choice, so we can segmentation for security between all departments (for better control) to a layer 3 domain w/ subnet locally. Our LAN- 200 gb; hq- 1 gb
Google for storage