Construct A Basic Network Design Separating Private And Publ

Question

Construct a basic network design, separating private and public You have been working as a technology associate in the information systems department at Corporation Techs for a while now. You have discovered that all of Corporation Techs’ computer systems share the same Class C public IP address range, including workstations as well as servers providing authentication, e-mail, and both secure and public Web sites. Your next task in this project is to construct a basic network design to reduce the number of public addresses needed, as the subnet lease results in very high ISP costs. To do so, you must: Access the PCAP files using NetWitness Investigator, and browse the Nmap scan (XML format), topology fisheye chart (PDF format), and Nessus report (HTML format). Identify vulnerabilities and clear-text information transfer. Conduct research and determine the best network design to ensure security of internal access while retaining public Web site availability. Identify any opportunities for reduced ISP costs through port redirection or address translation. Design a network configuration, identifying network gateways, port or address redirection systems, and the location of hosts within private and protected network segments. Create a professional report detailing the information above as supportive documentation for the network security plan. Create a report that includes a basic network diagram and research results.

Dr. Jack HW Helper · Accepted Answer

In today’s digital landscape, effective network design is crucial for any organization, and Corporation Techs is no exception. As a technology associate, I have been tasked with constructing a network design that separates private and public services while simultaneously aiming to reduce costs associated with public IP addresses. This report will outline a proposed network architecture, discuss relevant security considerations, and identify potential cost-saving measures using port redirection and address translation. Current Network Situation Corporation Techs currently utilizes a Class C public IP address space for all its systems. Sharing the same IP range among workstations and servers poses significant security risks, including vulnerabilities to unauthorized access and data leakage. Moreover, using a single public IP address for multiple services increases the risk of service outages. Thus, segregating public-facing services from internal resources is a pressing need. Proposed Network Design Overview The proposed network design involves creating a segmented architecture that separates public and private services within Corporation Techs. This design leverages both physical and logical segmentation to enhance security and streamline management. The network could be organized into three main segments: a public segment for external services, a private segment for internal operations, and a DMZ (Demilitarized Zone) for services that require limited public access. Public Segment The public segment will host essential outward-facing services, such as the company’s public website and email servers. Devices in this segment will have public IP addresses, allowing external users to access services without exposing internal network resources. The public segment is secured by a robust firewall that controls incoming and outgoing traffic, minimizing exposure to threats. DMZ Configuration To enhance security further, a DMZ will be established to host services that need to b

Construct A Basic Network Design Separating Private And Publ ✓ Solved

Construct a basic network design, separating private and public

Paper For Above Instructions

Current Network Situation

Proposed Network Design Overview

Public Segment

DMZ Configuration

Private Segment

Address Translation and Port Redirection

Security Enhancements

Network Diagram

Conclusion

References