Riordan Manufacturing Wan Project

Riordan Manufacturing WAN Project

The current architecture of the Riordan Manufacturing Company Inc. Wide Area Network (WAN) and network security in place requires updated documentation. The purpose of this paper is to consolidate the existing information into a single format and evaluate the WAN and security documentation for an executive overview. Riordan Manufacturing, Inc. is an industry leader in the field of plastic injection molding. With state-of-the art design capabilities, they create innovative plastic designs that have earned international acclaim. Attention to detail, extreme precision and enthusiastic quality controls are the hallmarks of Riordan Manufacturing. With facilities in San Jose, California, Albany, Georgia, Pontiac, Michigan and Hangzhou, China, the company is heavily dependent upon their communication networks. The documentation produced by this analysis will give the management at Riordan Manufacturing an understanding of their current network topology and a baseline to evaluate security of the network.

The current information regarding the security of Riordan Manufacturing's WAN is sparse at best. The diagrams supplied to our organization show the network setup for each facility. Information regarding the port configuration, router configuration, and any security software is not available at this time. An inventory of each site and a brief description of possible security settings and procedures for each facility will follow.

The corporate headquarters network in San Jose (see attachment 1) has 2 WAN connections. The first one is a T1 wired connection protected by an unknown firewall. The second connection is a satellite link to China no security devices noted. The network inventory includes:

* 2 each VoIP/Data routers model unknown

* 2 each 24 port switch Cisco 5950

* 1 each 24 port hub Linksys EF2H24

* 2 each gateway/switch model unknown

* 1 each Uninterruptible Power Supply model and size unknown

* 3 ea IBM H520 Blade Servers, 2 each for network and 1 each for exchange

* 1 each IBM pSeries 6E4 Unix server

* 1 each NAS Iomega P800M

* 35 each IP phones model unknown

* 35 each desktops Dell Optiplex

* 15 each desktops G5 MAC

* 3 each color printer Phaser

* 1 each plotter Hewlett Packard

The Albany, GA. (See attachment 2) network has 1 WAN connection to corporate headquarters. This connection is a fractional T1 with a 256k circuit for email and 1.5Mbps for burst. The WAN is not protected by any type of network security devices. The network inventory includes:

* DataSMART 658 single-port add/drop DSU/CSUs to connect LAN to corporate network

* 3 each 24 port Nortel Baystack 450 switches

* 1 each Cisco 1760 router

* 2 each Compaq Proliant PIII 800MHZ servers, 1 each for file and print and 1 each for exchange

* 2 each HP UX servers

* 8 Compaq Presario PI-233 Mhz

* 7 Compaq Presario PII-450 Mhz

* 5 Compaq Presario PIII-600 Mhz

* 1 each laserjet printer Hewlett Packard

* 1 each APC 1500 VA Smart-UPS

The Hanghzou, China (see attachment 3) network has 2 WAN connections. The first one is a T1 connection protected by an unknown firewall. The second connection is a satellite link to corporate headquarters in San Jose no security devices noted. The network inventory includes:

* 2 each VoIP/Data routers model unknown

* 2 each 24 port switch Cisco 5950

* 3 each 24 port hub Linksys EF2H24

* 1 each 8 port hub model unknown

* 2 each gateway/switch model unknown

* 1 each Uninterruptible Power Supply model and size unknown

* 2 ea IBM H520 Blade Servers, 1 each for network and 1 each for exchange

* 1 each IBM pSeries 6E4 Unix server

* 1 each NAS Iomega P800M

* 40 each IP phones model unknown

* 40 each desktop Dell Optiplex

* 8 each laserjet printer Hewlett Packard

The Pontiac, MI. (see attachment 4) network has 1 WAN connection to corporate headquarters. This connection is a fractional T1 with a 256k circuit for email and 1.5Mbps for burst. The WAN is not protected by any type of network security devices. The network inventory includes:

* Blackbox V35 MT100A-35 R2 DSU/CSUs to connect LAN to corporate network

* 4 each 24 port Nortel Baystack 107 10BT hub

* 1 each Cisco 2500 router

* 2 each Compaq Proliant PIII 800MHZ servers, 1 each for file and print and 1 each for exchange

* 2 each HP UX servers

* 15 Compaq Presario PI-233 Mhz

* 15 Compaq Presario PII-450 Mhz

* 15 Compaq desktop 486

* 1 each APC Back UPS 500 Clear

* 3 each laserjet printer Hewlett Packard

Depending on the complexity of the organization's system, providing security requires you to understand a variety of factors about the network, such as hardware platforms, operating systems, software applications, user demands, security awareness, network access issues, and Internet presence. Users of the network also have an inherent responsibility to maintain network security by following security policy and procedures such as not sharing passwords, locking workstations when leaving desk and logging off at the end of the day (CACI International, 2006). Some people try to get real work done over the Internet, and others have sensitive or proprietary data they must protect. There are many tools to keep unauthorized individuals out of the network while still allowing work