| Bachelor of Science in Cyber Security |
Assessment Brief
The requirements for the assessment
The CyberTech is a tech company based in Cheltenham, gaining significant attention for its innovative digital services.
Due to its rapid expansion, the company is opening three new branches in San Francisco, Dubai and Vancouver.
As the CyberTech expands globally, the company recognises the critical importance of establishing a secure and efficient network infrastructure to connect the new branches to its headquarters (HQ).
Ensuring seamless and secure communication between the all locations is essential for operational efficiency and safeguarding sensitive data.
The CyberTech has hired you as a Security and Network Engineer to create a robust network architecture that will ensure reliable connectivity, data integrity, and secure communication between HQ and branches.
• Design and implementing a network topology using Cisco packet tracer.
• Write a report that includes the network design, IP addressing and subnetting table, VLAN allocations and main device configurations per branch.
• Both packet tracer and report files need to be submitted via Moodle separately. (Not a zip file)
• The final evaluation is based on the designed network (70%) and report submission (30%).
The requirements for the design network on Packet Tracer:
1. Network Topology
• Design a network topology that demonstrates three branches. Please note that it is recommended not to use the same design for all branches.
• Each branch must connect securely to the HQ.
2. Equipment Setup for Each Branch Each branch in your design should include the following:
• At least 1 router per branch.
• 1 ASA firewall per branch for network security.
• A minimum of 4 switches, with both Layer 2 and Layer 3 switches being compulsory.
• A minimum of 10 computers for employees and operations.
• A minimum of 2 servers for web, email, and additional services as needed per branch.
• Only one wireless access point is allowed in one of the branches. You are free to choose which branch will have wireless connectivity.
3. Minimum Configuration Requirements Your proposed topology must adhere to the following configuration requirements:
• Implement a minimum 3-zone based firewall: Public, Private, and DMZ. Additional zones may be added based on your design.
• Each branch must have a minimum of 4 VLANs (maximum of 6).
• Configure site-to-site VPN connections between the HQ and at least two branches to securely transmit data.
• Configure ACLs to control access and traffic filtering at each branch.
• Apply ASA rules for blocking and permitting network traffic, ensuring sensitive data is protected while allowing legitimate access.
• Implement wireless security such as MAC filtering and etc.
Assignment evaluation and marking Pack tracer file (Network Topology configuration):
• Topology design (10%)
• Configure zone-based firewall (30% each zone 10%)
• Site to site VPN (10%)
• Wireless security (5%)
• VLAN configuration (5%)
• Configure servers (10%) Report:
• IP address and subnetting table (10%)
• Configuration table for each device in topology (20%)