Network Attacks O Secure Sockets Layer Protocol example essay topic

This proposal represents a review of the comprehensive Enterprise-Wide Network for Multi Media Company. This state-of-the-art solution will enable Multi Media to leverage existing investments in Local and Wide Area Networks and proceed forward to connect all locations via high-speed links. DRS Management Solutions prepared an optimal network design and suggested required hardware and software that is cost effective and offers the best return-on-investment based on Multi Media Company requirements and budget restrictions. Multi Media Company is in the search of designing and implementing an Enterprise-Wide Network, including Local Area Networks (LANs) and Wide Area Network (WAN) which will provide voice and data connectivity between all centers.

The company is global; it operates on a 24-7 basis, thereby giving the ability to operate a constant stream of multimedia traffic between sites. Purpose This proposal identifies the needs and requirements to implement an Enterprise-Wide Telecommunication Network for the Multi Media Company. It features the following advantages of implementing business goals: 1. Increase the company revenue and profit 2. Increase the employee productivity and improve corporate communication 3. Reduce the telecommunication and network costs over a period of time 4.

Introduce security of sensitive and proprietary corporate data 5. Provide excellent customer service support 6. Make data readily and securely available to all employees regardless of location 7. Flat-rate vs. premium rate on 4 digit dial phone communication 8. Build partnerships with other companies This overview conveys the following structure proposal: 1. Topology recommended 2.

Review of Logical Design including Visio Diagram 3. Review of Physical Design including Visio Diagram 4. Wiring Scheme 5. Distribution Storage Rooms 6. Global Server Functions 7. Addressing and Network Management 8.

Maintenance Agreement 9. Security and Disaster Recovery Plan Structure Proposal Multi Media is a worldwide company with facilities in the United States, Europe, Japan, and South America. Los Angeles, CA is the Corporate Headquarters and includes a main design site. The sale sites are located in Chicago, IL, Miami, FL, and London, England. Design site locations are in New York, NY, Frankfurt, Germany, Tokyo, Japan, and Rio de Janeiro, South America. The designed network structure for the design sites will handle a constant steam of multimedia traffic between offices with file sizes of 50 MB and a response time of 20 seconds.

The sale sites will handle file sizes of 25 MB with no more than five seconds response time. Each center has Internet access along with telephone voice capability, conferencing and speed dialing. Topology Choice The Star Topology has been chosen this proposal, based upon the New AGETel Company being the Access Provider. One advantage of the Star network is that all devices are connected to a central hub (Webopedia, 2004). Star topologies are difficult to install, but once installed are easy to maintain and expand. A fault in a cable only affects the computer or node it is attached to and is easy to locate.

The office facilities will also use a Star topology. The cables used in these Star topologies will be either shielded or unshielded twisted pair wires (STP or UTP). The final decision for which type of cable used will be determined on a site-by-site basis. Logical Design (Figure 1) The New AGETel Company will be the Access Provider incorporating Web Hosting and Internet access. The Access Provider will support traffic required for the proposal; voice, video and data communications.

Multi Media Company can aggregate multiple networks onto a single network rather than managing multiple and separate networks. This reduces complexity, improves provisioning and enhances network management. DS 3 is a high-speed line capable of delivering 44.7 Mbps (44,700 K) in both directions (Webopedia, 2004). OC 3 is a network line, which transmits 155.52 Mbps (Webopedia, 2004).

Transmission Control Protocol / Internet Protocol (TCP / IP) and Voice / IP Protocol will be the networking protocols that will be acceptable to cross the distinct WAN. TCP / IP will be the communication protocol used to connect hosts on the Internet. Voice / IP will be used as an Internet connection to pass voice data using IP instead of using the standardized public switched telephone network. This will avoid long distance telephone charges. Access to the Internet or any other outside network connections will be provided through the New AGETel Access Provider. From the Access Provider site, the following pipes are configured to the following sites: o OC 3 pipes will be located to Los Angeles, Tokyo, Rio de Janeiro, and Frankfurt. o DS 3 pipes will be located to Chicago, London, and Miami.

Intranet Severs are placed at the following sites: o London New York Tokyo (Figure 1) Physical Design (Figure 2) The methodology for performing the Logical Design included site evaluations, requirement validation, strategy review, technology mapping, traffic modeling and design review with Multi Media Company. The technology recommendation is Cisco Systems platform. The design team validated the selection for Cisco Systems by mapping the following requirements criteria capabilities: o Scaleable Bandwidth Star Topology Flexible Technologyo WAN / LAN communications support capability o Manageability of Network Systems and, o Infrastructure supporting Technologyo Standardization of Interfaces Hardware recommended for this proposal includes a Cisco Media Convergence Server 7835-1266 (MCS-7835-1266), which will deliver high availability, performance, custom backup and restoration functionality. This server can run a variety of Cisco AVOID applications including: Call Manager, Conference Connection, Emergency Responder and IP Interactive Voice Response (IP IVR). Additionally, a MCS it is recommended that A Cisco IP / VC 3511 will be used at each site for use in multi point conferencing. This will support "ad how" conferences, unattended runs, scheduled conferences.

Furthermore it will have the ability to support up to 15 simultaneous sessions at 128 kips (Cisco Systems, 2004). The Cisco Multimedia Conference Manager (MCM) will provide gatekeeper and proxy functionality, including provisions for quality of service and the ability to operate with firewalls (Cisco Systems, 2004). Cisco 7900 series phones will be located at each site. This will provide a complete range of communication devices including running with Video Conferencing equipment. These phones extend the power of IP communications throughout the sites by delivering latest technology in IP Telephony (Cisco Systems, 2004). (Figure 2) Wiring Scheme Cabling will be Category 5 e - 4 pair twisted 24 gauge copper wire to workstations and will have the capacity to accommodate up to 1000 Mbps (Webopedia, 2004).

The cable will be terminated on high-density patch panels with RJ 48 connections (Webopedia, 2004). Cabling infrastructure shall comply with standards / requirements of Multi Media Company's specifications. Cisco IP station sets will be connected to the data jacks at the sites and workstations will be connected to the 10/100 ports on the back of the IP phone infrastructure (Cisco Systems, 2004). Distribution Storage Rooms All centers will have a Main Distribution Frame (MDF) room as a central point to which all LAN cabling will be terminated and will also be the termination point for the Wide Area Network connection on the Demarcation block (D MARC).

All major electronic components for the network, such as the routers and switches, will be housed in this location in a data cabinet. The Corporate Headquarters / Design center will have an MDF as well as an Intermediate Distribution Frame (IDF) where cabling lengths exceed 200 feet. In such cases, the IDF will service its geographical area and the IDF will be connected directly back to the MDF via fiber for optimal network speed. Each IDF will support a minimum of 24 workstations and supply runs for data transmission. These cable runs will be terminated in the room MDF or IDF. All CAT 5 E cable run will be tested end-to-end for 100 Mbps bandwidth capacity (Webopedia, 2004).

Global Server Functions The Intranet servers located in Tokyo, London, and New York will service all other centers. The Multi Media Company will use Intranet servers to manage their projects, provide employee information and distribute information and data. All centers of this company will have access to these Intranet servers. Domain Name Services (DNS) and e-mail delivery will be implemented on the Corporate Headquarters / Design center LAN server. Each server location will contain a host for DNS and e-mail services that will maintain a complete directory of all staff personnel for that center. The Corporate Head quarters / Design center host will be a local post office box and store all e-mail messages.

The update DNS process flows from the individual centers to the hub at the Corporate Headquarters / Design center. All centers will also have the capability to communicate between themselves thus building redundancy in the system in the event that the Corporate Headquarters / Design center is unavailable. Should the Corporate Headquarters / Design center server require a particular or complete restoration of data, the ability to query any or all other sites to acquire the needed information will be provided. All centers will house the same network model, which includes a firewall, server, routers, hubs, network printers IP phones, and workstations. Corporate Headquarters / Design center will house a redundant server, Regional Design centers will house a call manger express and the Regional Sale centers will use Local POTS. The servers will be running TCP / IP, Voice / IP as it OSI layer 3 and 4 protocols and will be available to all other centers (San gona Technologies, 2002).

Cisco Call Managers will be placed at each center, excluding the Sale centers, which will have Local POTS. Call Managers primary advantage is the ability to centralize call processing (Meridian Solutions, 2003). This will reduce the hardware required at each center. Local Plain Old Telephone Service (POTS) is basic service, which supplies a standard single line telephone. However, it will have access to the public switched network. Local and long distance access will travel over IP pipes.

A dialing scheme will be established for the company as a whole to provide a four digit-dialing plan. Addressing and Network Management The TCP / IP addressing and naming convention scheme for all hosts, servers and network interconnection devices will be developed and administered by the Corporate Headquarters / Design site. The implementation of unauthorized addresses will be prohibited. The network will use Class C addressing with appropriate sub-netting, network address translation (NAT) and private network numbers (How Stuff Works, 2003).

All workstations located in the Corporate Headquarters / Design site will have static addresses; all other centers will obtain addresses by utilizing Dynamic Host Configuration Protocol (DHCP). Master Network Management host will be established at the Corporate Headquarters / Design site having managerial rights over all devices in the network. This host will also serve as the router configuration host and maintain the current configurations of all routers within the network. All other site hubs will house a Global Network Management host to support its area.

The management schema for the data portion of the network will be based on the Simple Network Management Protocol (SNMP) standards. All routers will be pointed to the Master Network Management host for purposes of downloading new or existing configurations. The Corporate Headquarters / Design site will maintain user passwords for all network devices and configurations on the devices will be authorized from this center, including routers and switches. Virtual LAN (VLANs) will be established at the individual office locations to differentiate sales functions from design functions. The leading advantage of VLAN is to separate the bandwidth and dedicate this network resource where appropriate (UC DAVIS, 2003).

Service Proposal Maintenance Agreement This maintenance agreement sets forth the terms and conditions under which DRS Managements Solutions will provide maintenance and support to Multi Media Company (Burns Information Systems, 2002). Term and Description of Maintenance This maintenance agreement is in effect for the next three years. DRS propose network-monitoring maintenance together with instituting fail over systems. This includes monitoring the network for verification of business needs through response time, throughput, reliability and availability. Using remote monitoring stations, DRS will monitor traffic on the last week of the month, logging all spikes and lulls within the WAN network.

Stations at each site will track inbound / outbound WAN / LAN traffic patterns. Monitoring will not interfere with day-to-day business transactions. Repeated results "out of spec" will be followed up with data scope monitoring and further recommendations on increased data traffic. With the purchase of multiple switches, network connections, uninterruptible power supplies and back up generators; DRS will provide a plan to ensure maximum network availability and reliability meeting Multi Media Company's corporate requirements. Bi- annual testing on weekends will minimize disruptions on day-to-day business activity.

DRS will propose upgrading equipment if necessary to accommodate future expansion. Security and Disaster PlanningSecurityLayered security is an approach that builds defense in depth. This principle can significantly reduce the risk of attack or loss of confidentiality, integrity and availability. The following points will assist with layered security: o Packet filters are designed to transmit information between the internal and external network.

As packets enter or leave the network, they are compared to a set of rules. This determines if they are passed, rejected or dropped. o Network Address Translation (NAT) translates addresses. It provides security to Internet users; it hides the internal address from external networks. o Challenge Handshake Authentication Protocol (CHAP) is a security feature that prevents unauthorized access to devices running the feature. o Password Authentication Protocol (PAP) may not be the best security mechanism at these layers, but it does provide some protection, as it requires a username and password. o Point to Point Tunneling Protocol (PPTP) provides data encapsulation o Layer Two Tunneling Protocol (L 2 TP) and Virtual Private Network Protocol (VPN) are used for security. They are based on the PPTP and Layer Two Forwarding (L 2 F). o IPsec protects IP packets and defends against network attacks. o Secure Sockets Layer (SSL) protocol enables users to ensure security for data that is exchanged over the Internet. o Transport Layer Security (TLS) protocol has a layered approach to data security that consists of several sub-protocols. o Remote Authentication Dial-In User Service (RADIUS) is the most widely used dial up authentication protocol. It offers authentication and authorization to dial-up network users. o Secure / Multipurpose Internet Mail Extensions (S-MIME) secures clear-text e-mail by adding digital signatures and encryption. o Virus scanners also play an important role with security defense. All referenced topics in International Standards Organization, (2002).

Disaster Planning Networks are subject to disaster, both natural and man-made. It is essential to plan, prevent and recover from disaster quickly as possible. The proposed disaster plan sets forth both preventive and remedial measures for the following areas (Mitchell, 2004): o Command Center: The command center is a local, on or off-site premise area from which to manage emergency situations. It is a focal point for coordinating the recovery program, issuing information, and assembling personnel (Mitchell, 2004). o Back-ups: At least once per week, a current back-up tape will be sent to an off-site storage facility for protection against loss of data (Mitchell, 2004). Iron Mountain will be the selected provider of the off-site storage facility. o Servers and Network: An uninterruptible power supply (UPS) will be used to protect all servers against surges, spikes and blackouts. A / B power feeds on new equipment and can automatically switch to alternate source power.

While the Multi Media Company may not want to operate its servers on battery back up for an extended period of time, the UPS should provide power throughout the orderly shutdown of all servers. Back-up generators will also assist in keeping the servers up and running. o Communication - The IP WAN is backed up by ISDN connections and will provide a redundant IP WAN path for call processing. Each center will utilize router IOS telephony features that provide local call processing in the event of IP WAN unavailability. Conclusion The implementation of the Enterprise-wide telecommunication network proposal allows technologies and solutions to be put into practice. This proposal has outlined a systematic methodology for Enterprise-Wide design. It covers major design phases and provides logical procedures in each of the network planning and designing phases.