Term Paper Project Designing a Secure Network

 

Term Paper Project: Designing a Secure Network
Due Week 10 and worth 210 points
This term paper involves putting together the various concepts learned throughout this
course. You are tasked with designing the most secure network possible, keeping in
mind your goal of supporting three (3) IT services: email, file transfer (centralized), and
VPN. Your first step is to design a single network capable of supporting three (3)
different services. Once you have fully designed your network, you will need to provide
three (3) workflow diagrams explaining how your designed network handles the three (3)
different transactions. The first is an internal user sending an email using his / her
corporate email address to a user on the Yahoo domain with an arbitrary address of
user534@yahoo.com. The second workflow diagram should show a user initiating an
FTP session from inside your network to the arbitrary site of ftp.netneering.com. The
third workflow is an externally located employee initiating a VPN session to corporate in
order to access files on the Windows desktop computer, DT-Corp534-HellenS, at work.
Write a paper in which you complete the following three (3) parts. Note: Please use the
following breakdown to complete your assignment:

https://hwacer.com/Tutorial/term-paper-project-designing-a-secure-network/

 Overall network diagram
 Datapath diagrams (one for each of the steps in the scenarios below)
 Write-up
Part 1
1a. Using Microsoft Visio or its open source alternative, create a diagram showing the
overall network you've designed, from the user or endpoint device to the Internet cloud,
and everything in between, in which you:
i. Follow the access, core, distribution layer model.
ii. Include at a minimum:

o The authentication server (i.e. Microsoft Active Directory)
o Routers
o Switches (and/or hubs)
o Local users
o Remote users
o Workstations
o Files share (i.e. CIFS)
o Mail server
o Web servers (both internal and external)
o Firewalls
o Internet cloud
o Web proxy
o Email proxy
o FTP server (for internal-to-external transport)

1b. Explain each network device's function and your specific configuration of each
networking device.
1c. Design and label the bandwidth availability or capacity for each wired connection.
Part 2
2a. Using Microsoft Visio or its open source alternative, create a Datapath Diagram for the
following scenario:

Local user sends email to a Yahoo recipient. Local (corporate) user having email
address jonny.hill@Corp534.com sends an email to user534@yahoo.com.
i. Document and label the diagram showing protocols and path of the data flow as data traverses
through your network from source to destination.
ii. Include path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols
that are used for each flow.
iii. Show user authentication when necessary.
2b. Using Microsoft Visio or its open source alternative, create a Datapath Diagram for the
following scenario:
Local user, Jonny Hill, transfers file using ftp through the Internet to another company's site
(ftp.netneering.com). He has to access the secure shell using his active directory credentials to
authenticate to the ftp server (Linux running Redhat) on the DMZ. He needs to transfer files from his
desktop across the Internet to ftp.netneering.com.
 Document and label the diagram showing protocols and path of the data flow as data traverses
through your network from source to destination.
 Include path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols
that are used for each flow.
 Show user authentication when necessary.
2c. Using Microsoft Visio or its open source alternative, create a Datapath Diagram for the
following scenario:
Remote user, Hellen Stover, connects via VPN from home through the Internet to her corporate desktop,
DT-Corp534-HellenS. Hellen uses a browser to initiate her VPN connection. By browsing
to https://VPNaccess.corp534.com, she arrives at a login page where she needs to authenticate using
her Active Directory credentials before the VPN tunnel is built.
 Document and label the diagram showing protocols and path of the data flow as data traverses
through your network from source to destination.
 Include path lines with arrows showing directions and layer 1, 2, 3, 4, 5, 6, and 7 (OSI) protocols
that are used for each flow.
 Show user authentication when necessary.
2d. Explain how your overall design protects the organization from both inside and
outside attacks. Give examples.
2e. Explain how your layered design compensates for possible device failures or
breaches in network security.
2f. Determine whether any possible bottlenecks exist in your design.
2g. Explain how to make the file transfer process more secure.
Part 3
1. Use at least five (5) quality resources in this assignment. (Note: Wikipedia and similar
websites do not qualify as quality resources.)
2. Include charts or diagrams created in Visio or an equivalent such as Dia. The
completed diagrams/charts must be imported into the Word document before the paper
is submitted.
3. Your assignment must follow these formatting requirements:
 Use proper APA format.
 Include a cover page containing the title of the assignment, the student's name, the professor's
name, the course title, and the date. The cover page and the reference page (if applicable) are
not included in the required assignment page length.

The specific course learning outcomes associated with this assignment are:
 Explain the essentials of Transmission Control Protocol / Internet Protocol (TCP / IP) behavior
and applications used in IP networking.
 Identify network security tools and discuss techniques for network protection
 Describe the foundational concepts of VPNs.
 Design a secure network to address a business problem.
 Use technology and information resources to research issues in network security design.
 Write clearly and concisely about Advanced Network Security Design topics using proper writing
mechanics and technical style conventions.