Question

Scenario: Jim runs a small consulting firm, Soylent Co, with 30 employees spread between accounts, human   resources,   administration,   and   engineering.   below is the information of current network setup including network diagram.

Engineering- 12 Workstations Accounts - 8 Workstations Internet Web Email Server Engineering File Server Human Resources 4 Workstations Administration -6 Workstations HR File Server

Building Layout

●Soylent Co shares 3 storey building with 3 other tenants

−Soylent occupies all three levels on the left hand side as you enter the building foyer

−Ground level is occupied by the accounts department

−The 1st floor is occupied by the engineering department

−The 2nd floor is occupied by both the human resources and administration departments

●The right-hand half of the building is occupied by other tenants, one per floor

Department and Decvices

Administration > •6 Workstations (including laptops), •6 IP Phones, •1 WiFi Access Point, •1 Printer,

Engineering > •12 Workstations (including laptops), •12 IP Phones, •1 WiFi Access Point, •1 Printer, •1 File Server

Human Resources > •4 Workstations, •4 IP Phones, •1 Printer, •1 File Server

Accounting > •8 Workstations, •8 IP Phones, •1 WiFi Access Point, •1 Printer, •1 Server (Web + Email)

External Connectivity

●ISP allocated network: 128.31.57.0/24 (Class C)

●1 Router, provided and managed by ISP

−Soylent Co’s network is connected to a router interface with address 128.31.57.1

Question 1 – Identifying network design faults in the diagram above. Write a report identifying and describing any problems you find.

This is the only information I have. You need to help me with identifying the design faults.

Answer 1

Security Flaws:

1)There is no firewalls/proxy servers to protect the internal network from external network(security attack through internet)

2)As stated in the problem, there are tenants.
what are the physical security arrangements?

Availability issue

only 1 Router, provided and managed by ISP
it is a single point,which connects the internal network with the internet.
if this single point(Router) fails, then internal network will be disconnected with internet.
network administrator should ask to the ISP to provide some more routers to avoid the above mentioned problem.

A shown in the diagram,web+email server is not connected to any other device(device of internal network)
traffic coming from internet is being received by the web+email server and after this, information can not be forwarded further through the internal network, because there is more connections.

A printer is directly connected with ISP's Router.
printer should not be directly connected with the ISP's Router.
there are no connections of this printer with other internal network's devices.

Only one department (Engineering department) is connected with ISP's router.
rest of the departments depend on engineering department for internet.
if there is some problem in engineering department then all other departments will lose the internet connectivity.

summary:

There is no firewall/proxy server

All the departments depend on engineering department for internet connectivity.

ISP should provide some more connecting points to connect the internal network with internet.