Designing a Secure Network

Create a datapath diagram for the following VPN transaction:
A remote user, Hellen Stover, connects, via VPN, from home through the Internet to her corporate desktop, DT-Corp534-HellenS. Hellen uses a browser to initiate her VPN connection. By going to https://VPNaccess.corp534.com, she arrives at a login page where she needs to authenticate using her Active Directory credentials before the VPN tunnel is built.
Document and label the diagram showing the protocols and path of the data flow as data traverses through your network from source to destination.
Show user authentication when necessary.
Cite specific, credible sources that support the diagram.

Part 3
Write a 6–10 page paper in which you:

1. Explain the function and configuration of at least four-fifths of all required network devices, citing specific, credible sources.
   Authentication server (Microsoft Active Directory).
   Routers, switches, and/or hubs.
   Local and remote users.
   Workstations.
   File share (CIFS).
   Mail server.
   Web servers (both internal and external).
   Firewalls.
   Internet cloud.
   Web proxy.
   E-mail proxy.
   FTP server (for internal-to-external transport).
2. Explain how the overall network design protects the organization from both inside and outside attacks, addressing all required network design features and considerations and citing specific, credible sources that support your assertions and conclusions. Address:
   Physical and virtual access.
   Logging requirements.
   Security policy.
   Firewalls.
   Proxy servers.
   The VPN tunnel.
   DMZ isolation.
   User authentication.
   Distribution of layer routers and switches.
3. Explain how your layered design compensates for possible device failures or breaches in network security, addressing all key design features and considerations and citing specific, credible sources that support your assertions and conclusions. Include:
   Load balancing.
   Swappable devices.
   Standby backup devices.
   QoS prioritization.
   Vendor support for core and services.
4. Explain how to make the file transfer process more secure, fully addressing FTP security risks and how specific FTP replacement devices add protection, clearly delineating the features of each device, and citing specific, credible sources that support one’s assertions and conclusions.

Sample Solution