Secure Network Design

Overview
For this project, you’ll be designing network infrastructure for a given organization, particularly the network monitoring and defensive infrastructure for the organization. You’ll need to take into account multiple items we discussed throughout this semester.

Secure Network Design Research
Perform some research on your own into secure network design best practices. We’re talking about how networks should be segmented, network topology, what security components should be in place, how they should be configured, etc.

Note: Please focus primarily on the security components of this environment. I know we didn’t discuss, for example, purchasing hardware or anything like that, so that’s not important to this assignment. Reach out with questions!

Deliverable
Submit a report with the following components…
• An executive summary with an overview of the theories and technologies put in place to secure your network.
• A detailed network diagram
o Hostnames
o Primary system functions
o Flow diagram
• Details on the topology of your network – why did you design it the way you did?
• Describe each of the components you place into your network in detail – infrastructure and security components.
o Why did you choose the product you did?
o Cost
o Benefits
o How the tool is to be configured/implemented
• For example, if it’s an IDS, what rules or rulesets would be in place? You can be fairly general, but do be specific enough so if someone were to take this document they would know how to properly and securely configure your tools
• Overall cost of implementation
o Hardware costs
o Support costs (if applicable)
o Implementation time (employee costs)

Network Requirements
You are designing a network for EH6 Manufacturing, LLC. The organization foresees the following requirements:
• Corporate email will be hosted on-site
• A document sharing server like SharePoint will be hosted on-site
• The external company website will be hosted on-site
• Each of the 12 manufacturing devices are operated by a networked computer
• All non-manufacturing computers are running Windows and are managed by two Active Directory servers.
• Our four executive members each have their own laptop that often enters and leaves the network
• There is one computer for each of our following staff to use:
o 7 sales
o 3 HR
o 4 IT
o 3 Developers
o 13 engineers

If you have any questions on the requirements of the network, please reach out for clarifications.