Designing Remote Access
Budget: $30 – $250 USD
1-Research on The Challenge of Achieving Zero Trust Remote Access in the Oil and Gas industry.
Consider the scenario below.
Contoso Ltd. has three locations, as shown in Figure 1 below. You have been given the following information about the Contoso Ltd. network
• The perimeter network contains a web server and a VPN server that are running NPS and RRAS.
• The Dynamic Host Configuration Protocol (DHCP) server provides IPv4 configurations to all network clients.
• Exchange Server 2010 provides email via multiple role servers that are deployed to each physical location. Users’ mailboxes are stored on their local messaging servers.
• A line-of-business (LOB) application that is built on Microsoft SQL Server® resides on the database server in the head office.
• Domain controllers reside in each physical location, and additionally provide DNS name resolution.
• A CA resides in the head office, and issues private certificates within the Northwind Traders organization.
Contoso Ltd. sales force requires access to the database application from anywhere in the world. The sales manager has requested that the IT department modify the network design to support this requirement as soon as possible. In addition, the sales users have requested access to their email mailboxes while roaming.
Requirements:
Use the following requirements to assist in determining an appropriate network access design:
• All sales users have a laptop installed with either Windows 7 or Windows 8.
• Sales users require access to the database application from their customers’ sites, their own homes, and from their hotels while traveling.
• The database contains sensitive information, and any network traffic to and from the database must be encrypted.
• It is important that only sales personnel can access the database remotely.
• Sales users need access to their email while traveling.
Consider the current configuration, and then using the information contained within the preceding topics, determine how you would design remote access to support the sales users’ needs. To help, consider the following discussion questions.
Question1: How would you propose to support the sales users’ needs to access their email? Question2: What additional network components do you require to support your design, if any? Question3: To facilitate database access, which VPN tunnel type would you recommend?
Consider the scenario below.
Contoso Ltd. has three locations, as shown in Figure 1 below. You have been given the following information about the Contoso Ltd. network
• The perimeter network contains a web server and a VPN server that are running NPS and RRAS.
• The Dynamic Host Configuration Protocol (DHCP) server provides IPv4 configurations to all network clients.
• Exchange Server 2010 provides email via multiple role servers that are deployed to each physical location. Users’ mailboxes are stored on their local messaging servers.
• A line-of-business (LOB) application that is built on Microsoft SQL Server® resides on the database server in the head office.
• Domain controllers reside in each physical location, and additionally provide DNS name resolution.
• A CA resides in the head office, and issues private certificates within the Northwind Traders organization.
Contoso Ltd. sales force requires access to the database application from anywhere in the world. The sales manager has requested that the IT department modify the network design to support this requirement as soon as possible. In addition, the sales users have requested access to their email mailboxes while roaming.
Requirements:
Use the following requirements to assist in determining an appropriate network access design:
• All sales users have a laptop installed with either Windows 7 or Windows 8.
• Sales users require access to the database application from their customers’ sites, their own homes, and from their hotels while traveling.
• The database contains sensitive information, and any network traffic to and from the database must be encrypted.
• It is important that only sales personnel can access the database remotely.
• Sales users need access to their email while traveling.
Consider the current configuration, and then using the information contained within the preceding topics, determine how you would design remote access to support the sales users’ needs. To help, consider the following discussion questions.
Question1: How would you propose to support the sales users’ needs to access their email? Question2: What additional network components do you require to support your design, if any? Question3: To facilitate database access, which VPN tunnel type would you recommend?