Secure Company Network System Design and Implementation

Scenario Description: Secure ISP Company Network:

International TechCorp, a multinational company with five international branches, requires a robust and secure network infrastructure to ensure seamless communication and data sharing between branches while connecting to global customers. Each branch operates with its own infrastructure, including dedicated firewalls and datacenters, tailored to its local needs. To provide global connectivity and serve customers across continents, the network integrates with an international ISP, ensuring high-speed and reliable access.

Network Design:

Each branch is equipped with a state-of-the-art local network infrastructure featuring a centralized datacenter hosting critical services such as DHCP, DNS, VoIP, and file servers. Firewalls are deployed at each branch to secure internal systems against external threats, with intrusion prevention systems enhancing security further. Local VLANs segment traffic by department, ensuring efficient bandwidth utilization and data privacy.

To achieve global connectivity, all branches are linked to an international ISP, creating a unified Wide Area Network (WAN). This WAN leverages MPLS technology for high-speed and low-latency communication. Dynamic routing protocols like OSPF are implemented to ensure optimal path selection and network redundancy. NAT and PAT configurations enable secure internet access while protecting internal network structures.

Assessment Criteria:

1. Branch Infrastructure:
- Dedicated datacenters at each branch hosting DHCP, DNS, VoIP, and file servers
- Firewalls at each branch for enhanced security and traffic inspection

2. Network Segmentation:
- VLANs for departmental traffic isolation and efficient bandwidth utilization
3. Global Connectivity:
- WAN interconnecting all branches via an international ISP - MPLS technology for high-speed and low-latency communication between branches
4. Routing Protocols:
- OSPF for dynamic routing and optimal path selection
5. VoIP Technologies
6. Address Translation:
- NAT and PAT configurations for secure internet access and internal network protection
7. Redundancy and Disaster Recovery:
- Backup datacenters at each branch for failover in case of primary datacenter failures
8. Network Security:
- End-to-end encryption for secure data transmission between branches - Access Control Lists (ACLs) for traffic regulation and prevention of unauthorized access
9. Network Monitoring:
- Centralized tools for real-time network performance tracking and threat detection

Network Topology Created
The network topology below satisfy the user requirements above and everything is verified, tested and working fine.