The Cisco
The Cisco
Access to the company network will be secured by multiple firewalls set up with our routers. Firewall filters will be set up with a specific list of allowed users and programs. All other traffic will be blocked by default until it has been approved by IT. There will be a limited number of wireless access points around the building, with password access. These passwords will be changed on a regular basis. Access to the local network will be secured by user authentication passwords. Users will be limited to only the system resources that they absolutely need to complete their work. Users’ passwords must be changed every 90 days.…
Router Management Out-of-Band Management Username and Password Authentication. Traffic VPN and Tunnel Based Traffic ACL and Tunnel Traffic Established Between Trusted End Points. UDP and TCP Protocol Enforcement with Stateful Firewall Access list Source and Destination, Address and Session established with Layer 7 Firewall Protection.…
Upgrading to an optimized WLAN architecture, using 802.11n technology, provides Highbrow Ed with a scalable, efficient, high-performing wireless network. An optimized WLAN architecture combines the advantages of central management and addresses the limitations of having a central wireless switch. Optimized WLAN consists of intelligent Access Points (Aps) and a WLAN controller. The APs forward traffic and enforce security and prioritization policies, while the WLAN controller centrally manages and controls all APs. The APs dispatch all traffic directly from source to destination without requiring a detour to the controller.…
Team A is proposing a thorough upgrade to Riordan’s phone and data networks. Our proposal will cover a description of the new system, its components and benefits to Riordan, as well as explain the requirements driving the need for the upgrade. We will cover the information used in the phone and data upgrades and discuss any security and ethical concerns of the system. We will be providing Riordan with diagrams of information flow and system components and business process changes incurred with the implementation of the new system. We will review the web and mobile access elements of the new phone and data networks and how the system will be acquired and maintained. We will discuss the strategic role the system will play in the company and certain requirement driving the projects creation and use. Overall, we will present a compelling and convincing presentation, justifying the costs and changes associated with upgrading Riordan current voice and data networks.…
In the final project, you assume the role of a wireless network consultant working for a company called Apex Designs. You must present Apex Designs with a plan that outlines how you intend to design their wireless network. The plan must be based on the recommended steps for designing a WLAN, outlined in the following bulleted list. In addition to the design of the network, Apex Designs has asked that you provide a basic wireless security policy. To that end, your plan must consist of the following elements:…
Although the freedom to roam the facility and always be connected to the LAN can be a great advantage for network users, the amount of support needed to manage the system and users is much higher than that required by a wired network. Due to the broadcasting nature of a wireless system, security is an important concern and provisions should be made for guest / unauthorized users to use the system in a limited and controlled way. Additional support by the IT Team is often required to configure a user to use the wireless network, to ensure the wide variety of hardware will work with the College’s wireless system, and to provide Help Desk support for wireless…
A VPN works well for industries in which the interception of data could give a competitor an unfair advantage. For example, a VPN would be necessary for telecommuting employees who send proprietary data from their home computer to the network at the office,. Perhaps a good place for a VPN would be in a health-care environment, where it is essential that small amounts of data gets point to point without being intercepted and understood by a hacker. There could be many uses where data needs to get point to point with its integrity intact and viewed only by authorized personnel. Law-enforcement agencies, credit card companies, and the military may have numerous applications for VPNs.…
Global Distribution, Inc. (GDI) is a distribution company that manages thousands of accounts across Canada, the United States, and Mexico. A public company traded on the NYSE, GDI specializes in supply chain management and in coordinating the warehousing, staging, distribution, transportation, and wholesaler/VAR relationship for their customers.…
Product lines include VPN, Firewall, Wireless LAN, Biometrics, and Access Control. Using the two sites that contain evaluated products (www.commoncriteriaportal.org or http://www.niap-ccevs.org/cc-scheme/) identify the products that will provide Sony with the optimal solution and use the Security Targets to describe the security functionality it provides, and state how this product reduces the potential risks identified in the media.…
After reviewing the new network design, we have seen several threats and came up with countermeasures to prevent these attacks. The first threat is the connection between the internet and the company’s router and connection between the wireless router and switch. Hackers, viruses, and malware can easily get in through this connection and infect the network. The countermeasure for this is a firewall or intrusion detection system. This equipment will help detect any unwanted guests the get onto the network. You can control what traffic comes in and out of your network. Next would be the wireless router being unsecured. If this router is left open and SSID board casting, any within its range can access the company’s network. A countermeasure for this is password encryption and stealth id. Hiding the id of the router will allow it to be hidden from anyone scanning for wireless routers to use. Encryption password puts a lock on the router to where only people with the key can access the router. The last threat would be the workstations and laptops. Users make the most mistakes on these machines. They download and go to places they shouldn’t which causes the risk of viruses and hackers. Countermeasures are Anti Viruses, patches, and teaching. Anti-viruses will help protect against viruses and malware that can allow hackers to enter the system and still information. It’s important to keep the definitions up to date so the AV can protect against the latest viruses. Updating OS with patches can also prevent security threats. Teaching users the dos and don’ts of security issues can help them be aware of the threats and what they should do to help prevent risks from occurring.…
The deliverables for this project will consist of an inventory by location of the network in a Visio format, description of the security by location of the network, and recommendations for changes to the network design, circuit speeds, and reasons why the changes should be implemented.…
a. Closing off unused ports via a firewall to reduce the chance of unwanted network access…
For this question I would have to go with the WLAN Star topology, the main reason for using the WLAN is for your wireless users to be able to connect to the network via an access point. Other reasons for using a WLAN, you would be able to have the ability to have the pc’s connected via CAT 5 still connect to the network. Security is a big issue for your company, the purpose of that would use the WPA, IDS/IPS, proxy servers, packet filtering firewalls that are locked a room like we have in Amazon, it’s a secure badge and pin combination room called out MDF room that is always cool with 2 cooling systems in there it have limited access to only IT personal. With the following security measure and the knowledge I have obtained up this point in these current and previous classes and working for Amazon, this would be a great way to have a fully secured network. With having WPA it will provide a strong data that will allow only authorized users to be able to access the wireless network. Like in the Visio diagram, the IDS/IPS with both enable the network to find anyone that tries to log into the network and allow to quarantine any hackers, like at Amazon we have the software Tanium to cover that. With having the firewalls and packet filters will examine the…
In “When It Comes to Doping, Pro Football Punts,” Fran Tarkenton questions the light shed on certain professional sports due to performance-enhancing drugs. While baseball, cycling, and track and field have been riddled with stories of performance-enhancing drugs, football has managed to remain unscathed throughout the years. Tarkenton’s article in the Wall Street Journal targets all sports enthusiast who care that football is a sport that is slowly getting taken over by performance-enhancing drugs, and the players are paying the ultimate price for the entertainment of others. Through the use of several persuasive strategies, Tarkenton creates an effective argument on the issue of footballs transformation throughout the years and the consequences that have arisen since.…
The cell phone policy I would create will not be broad for its usage. I will also put the responsibility into the users hand and will monitor it monthly. I would begin by including members of management, human resources, technology support, general staff and legal department. Discuss the current cell phone environment to determine the need of cell phones. That will create a list of eligible employees for either smartphones for data usage and applications or just cell. Distinguish rules for personal and business usage. Define the rules regarding texting and ensure employees may not automatically assume that the rules apply to texting. Loss of cell phones, appropriate use of the camera on the phone, cell phone use while driving and conversing about company information in public. Define consequences for violations. Make exceptions for emergencies and start off with warnings. Disseminate the information to employees, post written policies, listen to feedback from employees to adjust the policy and enforcement.. Make it a requirement for passwords.…