Acme Confectioners is a leader in creating delicious candy and award winning chocolate creations. Based in White River Junction, Vermont, they have a loyal following in the northeast. Lately, their competitors are getting products to market faster than Acme. You have been hired to analyze their network and detail a plan to provide security that they need.
Acme has a relaxed and open working environment. The only security in place for the offices and kitchen are locks on the front door. Bill is a retired police officer that acts more like a "Walmart greeter" than a security guard. The one-story building contains the company offices, kitchen, warehouse, and distribution center.
Employees at Acme have the choice between having a desktop and laptop computer. Most employees decided laptops would work best for them. Office employees work on a flex-schedule and are allowed to work from home. Using laptops, they have all of the information and applications they need. Management uses laptops in the manufacturing plant to check inventory and delivery schedules. Workstations are a mix of Windows XP, Windows Vista, Ubuntu, and MAC OS X. All workstations obtain an IP address from a DHCP server at Acme. Workstations have Microsoft Office, including Outlook, and anti-virus and antispyware are installed. Certain departments require database, accounting, and graphic software. The MIS department assists with workstation support, but it is difficult to monitor the laptops.
The file and print servers are Windows Server 2003 running Active Directory. One Windows server is running Microsoft Exchange for email. There are Linux servers, one that supports DNS and FTP, the other runs Apache that is used for the internal and external websites. The company utilizes Cisco routers and switches. The servers and router are located in an old conference room. The switches are located throughout the company. Wireless routers and access points are also located throughout the company.
Because many employees work from home, access to email, the FTP server, and websites must be accessible from outside the company. There are no formal network policies, so changing passwords, updating anti-virus definitions, and updating operating systems is often left to the employees discretion.
Create network and physical diagrams of the Acme infrastructure