Group Project Small part

• As you have gained experience in the topic of network design and development through this course, the team must design a global organization’s network. This organization has approximately 600 employees distributed evenly among six different departments. Its headquarters is located in Los Angeles, CA, and it has major offices in Madrid, Spain, Tokyo, Japan, and Sydney, Australia. Discuss your IP addressing scheme and whether you implemented subnetting or Classless Inter-Domain Routing (CIDR).  Design the following for availability, reliability, and performance. Explain and support your choices. Include a table of components, quantity, and prices:  Local area network (LAN) (host to switch using a hybrid of cables and wireless options) LAN backbone design (utilizing fiber optics) Wide area network (WAN) design with a primary connection and backup connection for redundancy IP addressing scheme for the organization’s network (Class B private network address) Summation as to how design addresses availability, reliability, and performance requirements Describe recommendations regarding network security such as hardware and security policy Suggest high-level disaster recovery or business continuity plan
• This is what the group project is and I am only to do the Security policy portion. I have attached what one of my team mates have done because it ties into the security policy. I would need this by 12:00 pacific time tonight.  

Business Continuity\Disaster Recovery and Security

To provide for network Business Continuity\Disaster Recovery and Security the Checkpoint firewall cluster at each site will provide the Application Control, Data Loss Prevention, URL filtering and a redundant firewall gateway in the event of a gateway failure (Application Control Software Blade, n.d.). Additionally, the Checkpoint 5100 firewall provides Next-Generation Threat Prevention using their SandBlast Zero Day technology, this is significant security function in that it detects and eliminates potential threats, signature based malware is unable to detect (SandBlast Network Security, n.d.).

To provide for Business Continuity\Disaster Recovery, each location will have two Windows Domain controllers, with DHCP and DNS configured (Roos, n.d.). This provides each site the ability to authenticate users and provide network services without utilizing the WAN links (Mathers, Poggeymyer, et al, 2017). Network performance is increased since users will have local access to needed network resources, without having to use the higher latency, lower bandwidth WAN links (Gottlieb, (2012). Internet connectivity is provided locally, and the local office Checkpoint firewall cluster can provide bandwidth restrictions so as to eliminate high-bandwidth, non-essential traffic (Application Control Software Blade, n.d.). Additionally, file servers that house home directories and department file shares will be configured to use Microsoft Distributed File System (Distributed File System (DFS) Functions, n.d.). This will ensure the home directories and shared data drives are available at each location; even in the event the site has no connectivity. Replicating the file server contents also eliminates the need for utilizing the WAN to access data for users travelling to other office locations. Backups can be run at local offices and since file shares are replicated there is no need to do across the WAN backups. Additionally, doing local backups provides multiple redundant backups, in the event one backup system is down or corrupt (Remote/branch offices backup and recovery, n.d.).

Application Control Software Blade | Check Point Software. (n.d.). Retrieved May 14, 2018, from https://www.checkpoint.com/products/application-control-software-blade/

Mathers, B., Poggeymyer, L., Kumar, S., & Plett, C. (2017, May 17). Planning Domain Controller Placement. Retrieved from https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/planning-domain-controller-placement

Gottlieb, A. (2012, October 08). Addressing WAN latency issues in application performance. Retrieved from https://www.networkworld.com/article/2223275/cisco-subnet/addressing-wan-latency-issues-in-application-performance.html

SandBlast Network Security | Check Point Software. (n.d.). Retrieved May 14, 2018, from https://www.checkpoint.com/products/sandblast-network-security/

Remote/branch offices backup and recovery – Veeam. (n.d.). Retrieved May 14, 2018, from https://www.veeam.com/remote-branch-office-backup-recovery.html

Distributed File System (DFS) Functions. (n.d.). Retrieved May 14, 2018, from https://msdn.microsoft.com/en-us/library/bb524801(v=vs.85).aspx