1. Proposal for Network Restructure

2. DIRECTOR OF INFORMATION
TECHNOLOGY
MARCOS FERNANDEZ
Infrastructure/Software
Manager
Shawn Kelly
Security
Officer
Daniel Bewick
System
Administrator
MaryPearl Parnell
System
Administrator
Oscar Madriz
Network Engineer
Johnny Vega
Network Engineer
Marcos Fernandez

3. NETWORK RESTRUCTURE
• Orange Creek, Inc., a Fortune 500 company, has moved into
Lexington and is requesting bids for implementing a network
infrastructure for their banking software company. The primary
function of the new building is to provide office space for
software development and testing of their homegrown banking
software. Both levels of the building are dedicated to
development, test, on-site IT staff, management, and
administration.

4. SOFTWARE MANAGER
SHAWN KELLY

5. OPERATING SYSTEM
• Windows 8.1 Enterprise
• Windows Server 2012 R2
• Red Hat Enterprise Linux
• Mac OS X El Capitan

6. FINANCIAL MANAGEMENT SOFTWARE
• Intuit QuickBooks Plus
• Bill Tracker gives you an instant view of your money-out
• Manage forms in a single step—unclutter your "send forms"
queue in a single click.
• Advanced reporting features include a "this year to last month"
filter
• Easily ship packages to US and international destinations with
integrated shipping through UPS, FedEx or USPS.

7. DOCUMENT SIGNING SOFTWARE
• DocuSign Business Premium
• Bulk Send: Send the same document to hundreds of people
• PowerForms: Distribute documents on your website for anyone
to sign on-demand

8. SYSTEM ADMINISTRATOR
MARYPEARL PARNELL
&
SYSTEM ADMINISTRATOR
OSCAR MADRIZ

9. SERVERS
• 6 servers
• PDC, SDC, FPS, Exchange, Redundancy, LDAP roles
• GPOs and OUs by department, with Roles by user

10. DESKTOP COMPUTERS
• HP All-In-One i7 4770s
8GB DDR2 1TB HDD 27''
Touchscreen Windows 8.1
64-bit
HP SB EliteBook Folio
9480m 14'' Intel Core i7
4600U 256GB SSD 8GB
RAM
Apple iMac with
Retina 5K display
Intel Core i5 1TB
SSD 8GB RAM

11. SERVER VIRTUALIZATION

12. NETWORK ENGINEER
JOHNNY VEGA

13. FIREWALL APPLIANCE
• Cisco ASA 5515-X
• 250 Mbps VPN throughput using AES encryption
• 1.2Gbps throughput, with 400 Mbps IPS throughput
• 250 IPsec VPN peers; 2 SSL VPN peers
• Includes ACL configuration for packet filtering

14. ETHERNET SWITCH
• CISCO Catalyst 2960 WS-C2960S-48FPS-L - 48 Port - 5 Slot
• Deliver Efficient Network Connectivity
• Simple to Configure, Operate, and Manage
• Better Investment Protection and Savings

15. INTERNAL NETWORK TOPOLOGY

16. INTERNET PROVIDERS
• Xfinity as primary
• 2Gb up and down
• Verzion as backup
• 50Mb up and down

17. WIRELESS ACCESS POINT
• Cisco Aironet 1850 Series
• Guest network implements password token

18. BACKUP POWER SYSTEM
• APC Smart-UPS 5000VA 230V Rackmount/Tower

19. BACKUP POWER SYSTEM
TRITON DIESEL GENERATOR
• 55 kW
• 1 year warranty
• Automatic starting system

20. OFFICE PRINTER
• HP LaserJet Enterprise 700
• 4-in-1: Print, Copy, Scan & Fax
• Up to 30 ppm
• 600 x 600 dpi Black Print Quality
• Ethernet 10/100/1000BaseTX (RJ-45)
• Up to 120,000 pages monthly
• 1536 MB Memory, std.

21. DESKTOP PRINTER
• HP Deskjet 3520 Thermal Inkjet MFC / All-In-One Color Printer

22. SECURITY OFFICER
DANIEL BEWICK

23. SECURITY CONTROLS
SCRAMBLE KEYPAD WIEGAND RFID READER

24. SECURITY CAMERAS INSIDE THE BUILDING
• LOREX 16CH Remote View 2TB DVR Kit
• Software App Supported on Android, iOS, Windows and Lorex
Platforms
• Massive 2TB Storage Capacity
• Visual Range of Up to 40 Meters in Night Lighting Conditions

25. SECURITY CAMERAS OUTSIDE THE
BUILDING
• ACTi D42 Bullet Style Night Vision Network Camera
• 4 Configurable Areas of Privacy Masking
• 0.1 Lux Illumination for Low-Light Video
• Power Over Ethernet (PoE) Compliant

26. DIRECTOR OF INFORMATION TECHNOLOGY
MARCOS FERNANDEZ

27. DISASTER RECOVERY
Critical Time(HRS)
Database 2 - 4
Exchange 2 - 4
DC 1 2 - 4
Medium
DC 2 8 - 12
File Server 8 - 12
Low
WorkStation 12 – 14
VOIP 12 – 14

28. POLICIES &PROCEDURES
• AUP
• Data transferred across corporate infrastructure is property of Orange Creek
Inc.
• All data is captured and logged for accountability
• Guest Policy
• All guests are segregated off corporation network
• All guest access must be approved prior to granted connectivity
• Network Access Policy
• No devices are able to connect to network without authorization from IT
staff
• Once approved all devices and traffic are monitored and logged

29. QUESTIONS?