• A national firm of insurance brokers recently set up business in Cardiff. After quite a successful year, they have decided to expand their operations within Cardiff and to a new branch office in Newcastle upon TyneYou have been commissioned as a network security consultant to specify and design their new network security provision. The original HQ site in Cardiff is occupying the top 2 stories (9th and 10th floors) of a tower block – see supplied diagrams, and the additional space it will expand to is the top two stories (the 11th and 12th floors) of a neighboring tower block – which is on the other side of the street (75m away). Due to the different design ideas of the architect, the new block is approximately 5m higher in elevation. The Newcastle branch site is to be located within a prestigious grade 1 listed structure near the riverside in the city center.
• 
  
• You have been given the floor plans of the buildings and network diagrams which show the networks as they stand in Cardiff's existing HQ and its new area in the other tower block. These network diagrams are of a “temporary” network setup that has been used to simply get the firm going across the two buildings.
  Using these diagrams, you are to produce a smartly formatted and fully referenced network security consultation report to address the issues listed below. N.B. All the sites are equipped with FTTP high-speed connections for Internet/WAN connectivity (though only in one original building in the Cardiff site). The other tower block has no separate broadband or exterior connection, but there is a temporary cable suspended between the two buildings which connect them. The new building in Newcastle has an FTTP port on the wall in the Doorman’s booth, and an associated DrayTek (model Vigor 2762N) 802.11n wireless router is connected there – but there is no other network installed on the premises.
  As a firm that has to handle very sensitive insurance documents and legal papers, they need to secure their network systems to a more than adequate level, but which will be transparent enough not to hinder or slow down their day to day running of the firm’s business which already deals with over 1000 clients. Any security system in place will also need to be able to handle the future expansion of the business.
• 
  
• You have a maximum word limit of 2000 words for this task – not including diagrams and references:
  1. Given that the company would like to establish a link between the Cardiff and Newcastle sites (WAN), and given that the sites already have FTTP connectivity, examine and create a section in your report which considers what technologies exist that could be used to secure these connections so that data is safe from theft or tampering in any way when flowing from site to site. Make sure you include recommendations for what they really should do (with full justification as to why they should follow your advice). [20 Marks]
• 
  
• 2. Examine the floor plans you have been provided with for the Cardiff HQ buildings and their associated temporary network diagrams. Then create a chapter in your report which discusses/includes the following:
  o The security weaknesses/hazards inherent in the physical make-up of the sites and suggest what could be done to secure them from a structural point of view – please bear in mind that the uppermost floor has an open roof above it – the new area in the other building is the same, but has a mobile phone mast on the top of it (4G rated) – just above the accountant office. The 1st –
• 
  
• The 8th floor of these buildings is occupied by 7 other businesses.
  o Using the network diagrams, also highlight the problems/security weaknesses with their existing network arrangements.
  o Reworked diagrams of the floor plans and networks showing the necessary changes you would recommend for overcoming these weaknesses.
  o Full justification for your recommendations including any building/network design alterations and any additional network/system hardware or software that would be required to support your ideas. [30 Marks]
• 
  
• 3. The Newcastle branch is located as we know, in the grade 1 listed structure (you will need to investigate what this means). A building plan is provided (single story with loft space). This building offers some challenges for network setup as the original structure (inside and outside) and its decoration can’t be altered in any way due to its protected status. “Temporary and reversible” additions can be made – provided the building is returned to its original state if and when the company decides to move to different premises. With this conformance to the “listing” regulations creates a report chapter that discusses:
  o Recommendations and a design for a workable and secure network to support the staff are indicated on the existing diagram.
  o Any suitable “added temporary” fittings that might be required.
  o A reworked diagram to support your findings. [20 Marks]
• 
  
• 4. Some network designers have drawn up a network plan and a simulation in Packet Tracer to show the link-up between two further branches that they are hoping to set up however, these designers have little or no expertise in adding network security features to networks.
  So, you will need to download the Packet Tracer simulation and the network design provided and:
  • Secure the OSPF routing protocol that is in use with suitable encrypted keys.
  • Add Cisco IOS mode protection to prevent unauthorized reconfiguration of devices.
  • Create a suitable VPN/GRE configuration to ensure data is protected between the company areas – particularly the shared areas.
  • Implement firewall solutions to protect certain areas of the network from rogue traffic.