Read all the instructions. this is assignment 3 so assignment 1 and assignment 2 are attached. Start from section 5: Logical Design and make all the diagrams needed Dont do the writing.

All changes to the Design Document must be recorded in the Change History.

1. Change History 2

2. Table of Contents 3

3. Purpose of the Project 4

4. Requirements Analysis 4

4.1. Business Goals of the Project 4

4.2. Site Requirements 5

4.3. User Requirements (UR) 6

4.4. Application Requirements 7

4.5. Technical Goals 7

4.5. Scalability 7

4.5. Availability 7

4.5. Network Performance 7

4.5. Security 8

4.5. Manageability 8

4.5. Usability 8

4.5. Adaptability 8

4.5. Affordability 8

5. The Existing Environment 9

5.1. Overview of the Existing Environment 9

5.2. Technical Details of the Existing Environment 10

5.3. Existing Applications 11

5.4. Existing Physical Layout 11

6. Project Management Plan 16

Risk Management 16

Assumptions 16

Dependencies 16

Constraints 17

7. Risk Assessment 17

Risk Rating 17

Mitigation 18

8. Work Break Down Structure 19

9. References 20

The Globex Network system is no longer in a position to securely cope with the number of users. The corporation is in need of a network upgrade where a secure VPN in a full mesh topology and a HTTPS connection over the internet will be implemented. The purpose of this project is to address the need for a reliable network structure by designing and building a new corporate network for Globex. The clients of the company will be able to access services securely and with ease.

With the call to design and build a new corporate network for Globex, it is first important to note that there are three locations and each need to be networked locally before linking them to form a WAN. The first layer interconnects the dedicated machines and the non-dedicated machines to the network devices using a pair of twisted cable. This will enable the machines to communicate over the internet and access the cloud storage.

The LAN requirements for this project is to ensure that a secure connection is established within each location. The machines used within the office location are interconnected through network devices such as switches.

WAN is established since each site makes use of resources from other locations and all sites use cloud based web servers for VoIP and VPN access to a secure Intranet and NFS share. The WAN is released by interconnecting the domains to a single cloud based web server and allowing sharing of resources among the sites.

Wireless access is required for this project and will be used by the vehicles to send and retrieve information from the cloud storage. The devices used by the drivers, vehicles and field officers will access the servers and cloud storage wirelessly.

Albury, Wagga Wagga and Griffith locations are included in the requirements since they are being networked. The upgrade will affect all the machines, servers and domains of these offices. A cloud based storage will also be part of the requirements since it will act as the main storage for all the machines in these locations.

The network aids users differently, either by working for the company or obtaining services from the company. Below are some of the requirements of different users within the company.

Globex corporation needs to ensure both security and performance across all their branches and connection to remote areas. For applications that are stored in the cloud, it is a fundamental requirement for the IT staff to measure and assess the end user response time to ensure the best results. IT staff also need to implement an automated monitoring system for security servers to ensure maximum uptime and data integrity across the Globex network. Focus must be on proactive rather than reactive troubleshooting, analysing weak systems and taking action before there is any disruption in service.

Across the Globex network, the corporation uses 3x Windows servers and 3x Linux servers for the operation of their day-to-day activities. The current structure will be upgraded to windows servers with core i5/i7 processors, or virtual box servers with 6GB memory wo provide better load balancing and efficient communication across the network.

Over time Globex has grown and merged separate companies to come up with its current corporation. With three office locations to provide customers and workers with different services, this projects aims to scale the network in a way that will support users, allow exchange and storage of data and support server failover. The existing Globex network system does not scale well to increasing demands from its users and also handles predictable errors inadequately.

Availability means to the every user can access the system same time. Our primary goal is increasing availability of the Globex network that will be realized through the implementation of interconnected domains all accessing a single cloud based storage, 3 Microsoft 2012 R2 servers for load bearing capabilities, and network redundancy structure. For example, user in a specific location can still access services and features even if the server is down without considering their geographical location. This is achieved by implementation of redundant links between servers, so that users can temporarily rely on another server when one fails.

We are ready to provide faster, wider, safer and a more convenient network performance between the all branches. This projects aims to meet this goal by upgrading the old network structure by designing and building a new corporate network which includes 3 servers including a sharepoint server for optimal network performance. Access to stored data will also be improved by implementing a cloud based solution. Additionally allowing each site to obtain resources from other branches of the company sites will improve performance and minimize network failure. Therefore we are able to improve better network performance during our entire project. The Globex project also introduced sharing platform system according to requirements which provides distributed network system. As most access businesses take place in regional locations therefore the traffic is considerably decreased on the data sharing platform.

Having a server dedicated for Intrusion Prevention System, Logging / SNMP server, and Disaster Recovery / Backup solution will improve security. Prevention of potential intruders is one step towards securing the system. Use of accounts and authentication measures will also increase security by ensuring data integrity and confidentiality is preserved and sensitive data is assessed by those with appropriate rights. Finally, implementing firewalls will protect interior systems from external threats and firewall can be work against to the denial of access (DOS) attacks. Globex Company utilizes modern and robust security and safety systems which are available to the business sector. Areas, equipments, and encompassing ranges are completely secured utilizing every time CCTV cameras and multi alert frameworks.

This project aims to design a network that is easy to maintain. The network will be able to log errors and recover from failures or attacks within a short time. With the new secure network, management of disasters such as network breaches can be handled in a controlled manner. By keeping back up and using log files can be used to recover system from failures.

Producing log files make a background marked by logging movement, which can convey parts of significant information related with some failures. Globex designed various alert system from prescient alerts, in view of diagnosing or hardwired intrudes on, setting alert soundings while failure happens or a checked has surpassed a limit. Moreover, alarms can be initiated when the system has been arranged, hacked or by means of viruses or malware.

Usability is part of the technical goal, the application software or the user interface used by the users must be both easy to learn and use. Employing a graphical user interface for users to interact with the network system will drastically improve the usability of new network system.

Globex Corporation helps customers (agriculturists) for upgrading their general technique for cultivating operations. Through their Farm Equipment and Precision Farming items, ranchers can view all the continuous of positions of the vehicles, give cautions, give the present status in the event that it is working, moving or sitting still and break down the good of Farm Equipment.

Adaptability unlike Scalability is not concerned with the number of users but with how the new network structure can house new services without substantial alterations to the present network structure. For example, the new network will allow different services to be shared among the domains and implement cloud storage.

Affordability is a primary goal of this project and Globex, as their main goal is to provide affordable and accurate solutions to its customers. Since this network upgrade is requested by Globex, the budget is dictated by them which means affordability as a technical goal is met.

The current Globex Network system provides solutions and services to farmers through Farm Equipment and Precision Farming products. Precision farming employs many positioning technologies such as GPS, laser, optical and inertial technologies with wireless communications, and services to offer complete commercial solutions. Globex’s incorporated solutions are used by farmers to obtain, manage and analyse complex data faster and with ease hence improving productivity, efficiency and increasing profits.

The figure in 5.2 shows the basic network structure that is to be implemented across all sites for Globex. the diagram shows physical hosts which are connected to a Virtual interface monitor (VIM). The VIM is a virtual monitor that analyses the physical host and their stress levels and balances the load between all the physical hosts which will increase the reliability of the services. As Globex wants the company to adapt to a cloud based solution, virtualisation would be an ideal solution. Virtualizing these servers will maximize the physical resources of these servers which will be able to reduce desktop loads more efficiently. Virtualizing the servers will also provide better reliability of essential services. These virtualized servers are connected to the active directories, which keeps track of all user accounts in a secure manner. Virtualizing these servers will add an extra layer of security, while being easier to manage for the IT staff. Separating and isolating the servers to one physical host will ease task handling and maintenance of the physical host, servers and network.

Existing Applications

An existing desktop software program is used by customers to read and create files in the Globex Precision Farming format. Advanced sensors are also used to monitor the soil information. Finally, Fleet Manager Solution is used to track fleets, gather fleet information and establish communication among fleets within the same farm.

0.

0. Existing Physical Layout

Albury

Albury – Warehouse

Griffith

Griffith – Warehouse

Wagga Wagga

The aim of the project plan is to provide an assessment using the TELOS framework. As we are trying to rebuild and improve the infrastructure of the Globex network, there is a need to assess the technological, legal, operational and scheduling process for this project. The main goal of this project is to maintain availability and minimize loopholes for security attacks. Dontigney (n.d.) agrees that a project management plan is not only a guide that ensures the project meets its goals but also reduces losses and threats caused by poor management of projects

A risk is an event that causes either a positive or a negative influence on a project when it occurs. Risk management is defined as a methodical procedure of pinpointing, weighing and regulating threats that face an organization, (Rouse, 2013).

This project and its plans and estimates assume the following expectations will be met:

· Globex concerned with developing a corporate network that is secure, reliable and user centered.

· Each project team member is able to complete their task within the time and budget scope allocated.

· Both the planning and tracking of the project will be done at activity level by way of established approximations. The length of time will be determined using availability of assets needed by the project.

· The Project Manager will ascertain that all project activities are clearly understood and scheduled accordingly.

· The project manager has a responsibility of ensuring that the progress being achieved is in accordance to the financial and time scope and that all obstacles of progress are controlled by recommending mitigation options to the project sponsors.

· Development of a corporate network will improve data transfers, allow failover and enhance data backup.

The project relies on the following external entities/events:

1. Three servers are each located in the three company locations. The servers run windows Server 2012 R2 and are used by the system for the following configurations: Active Directory, Group Policy, NTFS Permissions, File Server, DHCP configuration, DNS configuration, and Backup. Apart from these functions, the server in Wagga Wagga specifically has Hyper-V and acts as a Terminal Server, while the one in Albury is an Exchange Server and finally the server in Griffith acts as a SharePoint.

2. The system depends on Linux Server located within Amazon Web Services for Linux, Apache, MySQL, PHP, Backups, Open VPN, DNS, SNMP, NTP, VOIP, Web Conferencing, and NFS.

3. Globex Company for funding and requirements specification.

4. The project team to develop different components that will be combined into one corporate network systems.

The constraints within which the project will operate are as follows:

1. Time allocated for the project design is 14 weeks. The project must be completed within this time frame.

2. Budget allocated to this project in section 3.5 of this paper must be enough for the development of the network system. The total amount spent on the project must be close to the estimated budget.

3. The design of this network system is limited to a predefined scope. Scope determines the work to be done and ascertains that the determined work is done.

4. This corporate network relies on a group of four project team members that will share and perform different tasks for the project.

Risk assessment is a process of pointing out and ranking risks facing an organization. Making superior security policies and processes to protect a company’s assets is dependent on risk assessment.