Assignment scenario:

Company X-IoT is a multimillion-dollar company that is active in the IoT development industry. Company HQ is in the UK, and recently management decided to open two branches in US and Asia. You are hired as a security and network designer to design and implement a network infrastructure for communicating between HQ and branches. The company required network connectivity and secure communication between HQ and branches.

The requirements for the assessment:

1. You must design and implementing a network topology on Cisco packet tracer.
2. You need to write a report for designed network.
3. Both packet tracer and report files need to submit via Moodle separately. (Not a zip file)
4. The final evaluation is based on the designed network (70%) and report submission (30%).

The requirements for the design network on packet tracer:

1. Network topology should demonstrate at least 3 branches in 3 different geographical places. (Maximum is 5).
2. Each branch must have below equipment:

• Minimum 1 router
• 1 ASA firewall
• Minimum 3 switches
• Minimum 10 computers
• At least 1 wireless access point
• Minimum 1 server (Web server, email server and etc)

3. Minimum configuration requirement for proposed topology:

• Implement a minimum 3 zone-based firewall (Public, private and DMZ), You can have more based on your design.
• Each branch needs minimum 3 different Vlans (Max 6)
• DMZ and network need to protect with ASA
• 1 VPN connection between 2 branches (site to site VPN)
• Must configure ACL on each branch for controlling the access
• ASA rules must assign for each network with proper blocking and permitting configuration
• Wireless security such as mac filtering, etc

The requirements for the report:

1. The report must include standard IP addressing and subnetting table
2. The report must include a table for each device configuration and the purpose of the configuration (More details will discuss  in the class)

Assignment evaluation and marking

• Pack tracer file (Network Topology configuration):

1. Topology design (10%)
2. Configure zone-based firewall (30% each zone 10%)
3. Site to site VPN (10%)
4. Wireless security (5%)
5. Vlan configuration (5%)
6. Configure servers (10%)

• Report :

1. IP address and subnetting table (10%)
2. Configuration table for each device in topology (20%)