Network Upgrade and Maintenance Plan Proposal

IT 345 Project NETWORK UPGRADE AND MAINTENANCE PLAN PROPOSAL Thistle, Cameron Executive Summary: One of FreshSource Distribution Inc.'s three warehouse locations serves as the central hub. Every office house 40-50 representatives with the conceivable increment of 10-15% of staffing every year. FreshSource is as of now utilizing old phone cabling innovation that runs 128 Kbps ISDN. Each FreshSource site has a total bandwidth of 258 Kbps. Since ISDN has been out of date for a long time, it must be discontinued to keep up with industry standards and expectations. Microsoft says that the average size of documents used by each user is as follows: Doc. Type Excel PDF Word PowerPoint Client 1 674 kb 686 kb 270 kb 1489 kb Client 2 732 kb 134 kb 401 kb 2693 kb We need to take this into account when determining the requirements for the upgrade due to the expressed concern that files will get bigger for each user who uses the network. WAP service should also be considered because FreshSource is a warehouse. If we include WAP service, the ISDN will become extremely congested and the increase in device traffic would spike. Network Performance Analysist: ISDN speeds range from 64 Kbps and 128 Kbps. If you consider any future additions, ISDN's upkeep, and maintenance costs quite a bit. With each document that is communicated across the organization on an ISDN, FreshSource workers are either holding up minutes before their records are removed from line and sent or hazard their record parcels being dropped and having to resend later. Here is a breakdown of speed ranges per innovation: Fiber 10 Mbps-10 Gbps Fast Ethernet 10 Mbps-100 Mbps ISDN 64 Kbps-128 Kbps DSL 128 Kbps-100 Mbps Gigabit Ethernet 1 Gbps-10 Gbps Since the typical business should provide at least 1 MB of data bandwidth per user, DSL may be sufficient for their operations. Notwithstanding, we ought to likewise factor in WAPs, conceivable VoIP joining, video meeting thought, as well as the extended 10-15% increment of staff for every year. Root Causes: Increasing file size usage and the allowance of unrestricted rogue devices that flood the network on an infrastructure that is already congested are the root causes of bottlenecking in FreshSource. Continued Impact on the Business: Without the legitimate instruments set up on the framework, FreshSource will keep on working underneath dial-up speeds and potentially be in a crippled state if the hazardous flooding gadgets are not found and managed. Until the company's network infrastructure can be upgraded to support an increase in staff, the consideration of hiring more employees will have to be put on hold. Business Needs and Initiatives: To help the expansion in staff and fulfill business guidelines during the current ten years, I propose the accompanying things to be set up: 1. Security - To create strategic VLANs to separate departmental network traffic and provide an additional layer of security, we need to install a router at each location, as previously mentioned. We must also include a security firewall, preferably a Barracuda hardware firewall, to filter network traffic and add another layer of protection. In addition, I did not observe any mention of the network's antivirus software. For each connected device to the network, we will need to investigate the possibilities of endpoint antivirus protection or cloud-based antivirus protection. Additionally, to address the issue of unregistered devices being permitted on the network, we must install a net registration server. Any new device that is not yet registered is pushed to a website by a netrin server, where the user creates an ID as a registered user and can continue to use the network. On the off chance that an unregistered gadget endeavors to interface with the organization, without netreg'ing it won’t be permitted to get a legitimate IP address for network use. To distinguish network oddities and save additional footwork, I would recommend getting an organization checking bundle that fits the size of FreshSource's business. 2. Speed - In any business, we need to roll out the essential improvements that will keep going for something like 3 years, not only 1. Since the typical record size with the present tech is 1 MB and we want to take into account something like 1 MB for each client across our organization for transfer speed, we truly need to consider a 1 GB organization and update our cabling to Feline 6e. Feline 6e backings full 10 G Ethernet speeds with distance of 100 meters, so this will give years’ worth of ability to future use so we don't have to overhaul in the short term. We really want to consider Metro-E suppliers in the encompassing regions where FreshSource has their stockrooms and solicitation 1 GB level valuing for web access for every area. To properly direct traffic throughout our network, we must upgrade from our two 30-port daisy-chained hubs to two 48-port GB switches and a managed GB router. We can create VLANs to separate our traffic and prevent the loss of sensitive data from our payroll, purchasing, shipping, and accounting departments with a properly configured router. 3. Expansion - With the establishment of Feline 6e, 2 48-port GB switches, and 1 GB network level speed from our assigned ISP, this will give us the ability to grow for no less than 3 years while possibly not more without the need to add greater hardware. Security Standards and Best Practices: A security operations center within the corporate facility is the best practice. On the underlying level, we want HR to make an instructional class for security attention to help clients to remember they should be mindful while opening messages. If we somehow managed to have a security tasks focus set up, I would propose that NIST and SANS classes be joining in and the practices they learn be carried out on a worldwide premise to assist with forestalling future assaults to our recently evolved network foundation. After the infrastructure is finished, we need to set up group policies to make sure that USB and external devices can't connect to the network without the permission of security and management. FreshSource Dispersion has disliked rebel issues with unapproved PCs getting to the organization and conveying pernicious flooding traffic to the FreshSource appropriation organization. There do not appear to be any security devices or protocols in place now to stop malicious activity. I am extremely surprised that your business has not been compromised on a higher level following my survey of the current network layout. I would recommend putting in place a Barracuda firewall at the entrance and exit of our ISP modem connection to comply with current security standards. This will help with conveying sure that any security intimidations are separated bi-directionally. Likewise, I recommend carrying out a got overseen in the middle of between our firewall and changes to add a further layer of safety to our proposed network. A net registration server is the layer that will prevent unauthorized computers from accessing our network. Before granting access to the internet, this server checks that each new device connected to the network has been properly registered in the database. Now, our network architecture is as follows: The following is the format that I propose FreshSource Distribution to go through to keep up with security and organization steadiness: To stop bi-directional attacks on our network, I recommend installing Barracuda firewalls. The Barracuda brand offers a wide range of firewall solutions, from email security to full network traffic protection. Without this firewall set up, we face numerous degrees of assaults that can undermine the actual purpose of FreshSource's plan of action. By incorporating a managed router, FreshSource can double the level of security and enable our IT department to shut down ports in the event of an unauthorized computer intrusion. Alongside the past referenced layers, we likewise need to incorporate a net enrollment server that outputs for unapproved PCs joined to the organization and makes an information base that records every PC on the organization and ensures that every client appropriately sets it up as an approved PC for FreshSource Distribution. The fourth layer of assurance that should be added to every workstation that isn't shown on the format is the incorporation of infection insurance programming on every PC. To add an additional layer of security to the company's infrastructure, the IT department needs to ensure that every computer has an image that includes a corporate version of virus protection that searches the virus database daily for updates. The expense of the advantages for the business won't be viewed as valuable until the following monetary year. The new financial requirements for software and hardware upgrades will cost most businesses nearly $100,000 to purchase and maintain for the next three years. However, if sensitive data were ever to leak, this will protect the business from lawsuits stemming from security breaches, which could cost as much as $1 million. It additionally saves the organization from expanded free time and dashing attempting to find security openings in the organization. Lifecycle Management and Maintenance Plan: Architecture's New Perspectives: Safety - FreshSource didn't seem to have an antivirus answer for their organization. To eliminate security threats in real time, we will use Barracuda antivirus/firewalls and implement managed routers and secured switches within our infrastructure. Speed - FreshSource is right now using obsolete ISDN innovation that was semi helpful almost twenty years prior. Presently with the requirement for business to have more traffic streaming, we are executing the utilization of Metro-eService that will permit 1GB traffic for our refreshed necessities and possible development throughout the following 3 years. We will be able to avoid traffic congestion by integrating Cat 6E cabling and 1GB routers and switches. Supervising - The middle Florida warehouse is the area of the primary server farm. I propose putting in place a network/server monitoring system that notifies us of anomalies in our infrastructure. Since FreshSource isn't considered a large business, we can investigate small- to medium-sized software/hardware implementation software and even cloud-based solutions for monitoring our network. Duration of life: Hardware - We can provide hardware for our network devices for three years with the appropriate level of planning and knowledge of our potential growth rate. Our equipment must be standardized at all locations. Dell, for instance, specializes in making products that are suitable for businesses of all sizes. Discounts on quotes can be obtained based on the quantity of equipment we purchase if we intend to purchase Cisco network equipment in its entirety. Additionally, we need to arrangement an endeavor/business account with anything seller we pick so that when we should make RMAs for down gear, we can get expedient substitutions. Supervising - The supervising length of life should be set for a yearlong contract, but it should be checked every three months to see if there are better options for the business and to discuss the software's advantages. Software - We ought to conduct a quarterly evaluation of the software's metrics and discuss whether we believe the software meets the requirements of the business. Thusly, we can arrive at a resolution toward the year's end on whether we need to go on with the product understanding. Routine Maintenance: Hardware - Since we are ideally buying an upkeep contract with our merchant, we possibly need to stress over support on the off chance that we have gadgets that go down from power floods, advanced age, and so forth. Supervising - Like our software reasoning, the vendor ought to regularly update our software and inform us of any issues that require our attention. We may need to update the dashboards in this manner; however, updates ought to be pushed out automatically, and we ought to examine the modifications that were made. Software - Since we are putting resources into box arrangements, there ought to be compelling reason need to keep up with or code refreshes for our product choices. We might have to change our dashboards occasionally, however with box arrangements the merchants ought to refresh our product as needs be. However, we should maintain our focus on the company and direct any issues that arise to the vendor for resolution. Security Maintenance: Training - The Human Resources department at FreshSource ought to set up training programs every two years. If we don't have a committed security group, HR ought to contact a security specialist and form a preparation module that is contained essential suggestions to HR organization strategy alongside tests on broad security consistence to stay away from security breaks inside FreshSource's foundation. Hardware - We can quickly and effectively identify hardware anomalies with the help of the appropriate monitoring solution. Software - I hope enough money is in the budget to hire a security consultant to visit our company twice a year to review our business applications; However, we can monitor the health of our network equipment and servers in real time by purchasing SolarWinds SAM and NAM modules. References: Computers, Monitors & Technology Solutions | Dell USA Computers, Monitors & Technology Solutions | Dell USA. (2023). Retrieved 30 May 2023, from https://www.dell.com/en-us (2023). Retrieved 30 May 2023, from https://www.barracuda.com/products/networksecurity/cloudgenfirewall?&a=%5Bgoogle_na%5Dnetwork_security_search&grp=new_firewall_hardware_phrase &ad=102197279061&kw=hardware%2Bfirewall&gclid=EAIaIQobChMI3rT2_cLI1wIVnrjACh 2kSge3EAAYAyAAEgKSt_D_BwE Cybersecurity Framework | NIST Cybersecurity Framework | NIST. (2013). Retrieved 30 May 2023, from https://www.nist.gov/cyberframework