Network Infrastructure for Segments within the Enterprise - Term Paper Example

Full Paper Executive Overview Our organization’s network proposal assures significant cost savings by deploying the appropriatetechnology extracted by a solid risk assessment and cost benefit analysis for the network. For this reason, stakeholders will trust data and their investments, as the network proposal is strategically aligned with current and potentially planned new business objectives, seeking for future expansions of the computer network. Moreover, for addressing security, a comprehensive information security risk assessment is conducted that identifies critical assets and vulnerable points of the computer network. Likewise, adequate security controls that are considered within the network proposal are also justified by the cost. For instance, if an asset requires a security control that costs more than the asset value, the controls are discarded and alternate cost justified countermeasures are implemented to ensure all identified vulnerabilities are addressed and taken care of. Furthermore, the justified cost along with the appropriate use of technical excellence, network configuration, network products, security appliances, applications, and support will deliver value to the organization. For ensuring business continuity, redundant data connectivity links and alternate configurations are performed within each connectivity hub for addressing network service downtimes. For addressing network scalability, next generation network (NGN) supported hardware is considered for ensuring significant cost savings. Therefore, due to all these benefits, stakeholders can trust us for value delivery and better Return on Investment (ROI) for the budgeted amount. DNS Scheme For a new DNS scheme, a new zone should be configured on the internal DNS server that may resemble every domain of the organization. Likewise, configuring the zone on the internal DNS will allow the network administrator to manage and make it redundantly distinct. The configuration of the following zones must be performed: Woodgrovebank.com Asia.woodgrovebank.com Emea.woodgroovebank.com However, for addressing the requirement of establishing zones on external DNS server, only one domain will be configured, i.e. woodgrove.com, as it is the only domain that maintains and holds external records. Moreover, a replica of domain DNS zone will be maintained at every hub site. However, the central hub site for each domain will maintain a replica of DNS zones of other domains. Hub Site Zones New York WoodgroveBank.com Emea.WoodgroveBank.com Asia.WoodgroveBank.com Miami WoodgroveBank.com Seattle WoodgroveBank.com Toronto WoodgroveBank.com London WoodgroveBank.com Emea.WoodgroveBank.com Asia.WoodgroveBank.com Tokyo WoodgroveBank.com Emea.WoodgroveBank.com Asia.WoodgroveBank.com Beijing Asia.WoodgroveBank.com Paris Emea.WoodgroveBank.com Lisbon Asia.WoodgroveBank.com For every domain on the computer network, there is also a requirement of configuring a local zone, as it will sanction the configuration of secure and dynamic updates. Likewise, Microsoft Active directory has an embedded default functionality of replicating integrated zones to all the domain controllers within the same domain (Jones & Rouse, 2003). As every instance is playing a role of a primary zone, all the available domain controllers are granted for dynamic updates. Hub Site Zones New York WoodgroveBank.com (Active Directory unified) Emea.WoodgroveBank.com (secondary) Asia.WoodgroveBank.com (secondary) Miami WoodgroveBank.com (Active Directory unified) Seattle WoodgroveBank.com (Active Directory unified) Toronto WoodgroveBank.com (Active Directory unified) London WoodgroveBank.com (Active Directory unified) Emea.WoodgroveBank.com (secondary) Asia.WoodgroveBank.com (secondary) Tokyo WoodgroveBank.com (Active Directory unified) Emea.WoodgroveBank.com (secondary) Asia.WoodgroveBank.com (secondary) Beijing Asia.WoodgroveBank.com Paris Emea.WoodgroveBank.com (Active Directory unified) Lisbon Asia.WoodgroveBank.com (Active Directory unified) IP/DHCP Scheme For the convenient use of IP addressing, we will use 10.0.0.0/8 subnet for this scenario, as it will provide the required allocation of IPv4 addressing. However, for remote offices or branches, we will assign a class C subnet mask, as there is no requirement of allocating so many IP addresses at branches. The subnet mask for a class C network will be 255.255.255.0. Moreover, for hub branches, we will allocate a class B subnet, as they need IP addresses for internal use and for the branches that connect to the hub branches. The class B network address will be 255.255.0.0. Furthermore, for allocating subnet mask for branches in New York, Miami, and Toronto, we will perform sub netting that will allocate the adequate size of address spaces required and at the same time give space for network expansion options in the future. Likewise, five bits of the second octet of a 32bit IP address will allow connecting 32 hub branches in each division. Moreover, by utilizing 3 bits of the second octet of a 32 bit IP address, we can expand the network capacity for supporting 8 divisions. Consequently, the subnet mask for all branches in North America can be assigned with the network address 10.32.0.0/11. File and Print Services For ensuring value delivery, WAN acceleration techniques will be preferred that will enhance the speed for file transmission within Wide Area Networks of the organization. However, specialized hardware modules are required for this purpose, and Windows Server 2008 provides an alternate solution via SMB 2.0. Moreover, for addressing security issues, access-based enumeration prevents unauthorized access to these files shared by the Distributed File System (DFS). Distributer file system is the most widely adopted method for sharing data across corporate networks while maintaining only a single legitimate location (“AUUG Conference Proceedings”, 1994). Moreover, for maintaining backups for the DFS, the backup server located in the New York hub branch will be used for storing backups of the region, as data backup coming from all the hub branches will be stored on this server. Apart from implementing DFS, to ensure high availability of these files, failover clustering can also be considered, but it is not a cost effective solution. For printing services, we will configure and deploy network-based printing services, as they are considered to be the most cost-effective option. Moreover, by incorporating windows server printing console, centralized management can be carried out by the network administration staff of the bank. Virtualization Virtualization is a technology that provides an opportunity to establish multiple instances of the same operating system running on a single hardware (Cerling & Buller, 2010). The newly implemented hardware for the Woodgrove Bank will be utilized by establishing multiple instances of an operating system for each region running on a single hardware platform. For this reason, significant cost will be saved through virtualization technology. Apart from saving hardware and software cost, virtualization will also provide convenient server management, utilizing server resources to its full potential and eliminating a need for a space in the data center, total cost of ownership and electricity. One of the core objectives for the newly designed network for Woodgrove Bank requires high availability of mission critical services, live backups, and live migration of data within the network. Microsoft hyper V supports all these functions, as the presence of Woodgrove Bank is located in several countries; ‘Microsoft Hyper V’ supports geographically dispersed clusters. Moreover, we will virtualize our core servers to utilize new hardware, and testing is an essential part of the process. Microsoft Hyper V provides a rich Windows Management Interface that will operate automatically to assist in the testing process of the virtual servers and applications. Furthermore, as regards administering a virtual server environment for the Woodgrove Bank, there are situations when servers need to be replaced within the network with no downtime at all for assuring high availability. Microsoft Hyper V supports failover clustering that enables virtual drive resources to be the part of resource groups that can be easily swapped between the network nodes in the failover cluster (Savill, 2009). Security For addressing network security of Woodgrove Bank, a team is required. Likewise, a team is required to execute the security plan that will include roles of all members, such as stakeholders, security managers, security developers, testers, and end users. The next step is to identify threats and their impact on the network that is followed by a risk assessment plan that incorporates cost/benefit analysis as per the allocated security budget. Lastly, policies can be made to administratively control and secure the environment. Moreover, for securing the wireless network, WPA2 encryption standard will be recommended, as it is the best encryption standard to date. References AUUG conference proceedings (1994). Retrieved from http://books.google.com.pk/books?id=Zju3xMaLsGcC&pg=PA196&dq=Distributed+File+System+definition&hl=en&sa=X&ei=IRbyT6i5EcamrAfIluW9DQ&ved=0CEUQ6AEwAw#v=onepage&q=Distributed File System definition&f=false Cerling, T., & Buller, J. L. (2010). Mastering Microsoft virtualization. Indianapolis, Ind.: Wiley Pub. Jones, D., & Rouse, Mark. (2003). Microsoft Windows server 2003: Delta guide. Indianapolis, IN: Sams. Savill, J. (2009). New hyper-V features in windows server 2008 R2. Windows IT Pro, 15(12), 57-60. Read More