Case Study: Network Overhaul For A Growing Office Environment

Background

A client approached us with the need for an IT audit, complete redesign and technical overhaul of their office network. Their current network infrastructure is outdated, which led to performance issues, security vulnerabilities, and limited scalability. The client’s goal is to future-proof their network, requiring a solution that can support up to 600 concurrent users, enhance security, improve overall efficiency, and remain cost-effective.

 

Initial Assessment and Challenges

After an initial consultation and IT audit with the client, several key areas of improvement were identified:

1. Outdated Hardware and Network Architecture: The existing network infrastructure was built on aging hardware, leading to frequent downtimes and reduced efficiency.
2. Security Vulnerabilities: The lack of standardized security protocols posed significant risks, especially concerning the secure accessibility of their Multiprotocol Label Switching (MPLS) connections.
3. Scalability Concerns: The current network was not designed to handle the anticipated growth in user numbers, requiring a robust solution to support up to 600 concurrent users.
4. Inadequate Wi-Fi Coverage: The existing wireless network did not provide comprehensive coverage across the office, leading to dead zones and connectivity issues.
5. Guest Access Management: The absence of a structured guest management system made it difficult to control and secure guest access to the network.
6. Website Blocking Policies: The client needed the ability to block specific websites on different networks during specified times to enhance productivity and security.

Solution Development and Implementation

Network Layout Design

To address the client’s requirements, we started by designing a new network layout. This involved a detailed assessment of the existing hardware and the identification of components that required replacement. We developed a Bill of Quantities (BOQ) that balanced performance, reliability, and cost-efficiency. The recommended hardware included the Ubiquiti UCK-G2-Plus Cloud Key, USW Pro-24 Switches, USW-Aggregation, and U6-LR-US WiFi-6 access points.

Firewall Configuration

A critical aspect of the project was enhancing the network’s security. The client had recently acquired a FortiGate 500E firewall, which we updated to the latest stable FortiOS. The firewall configuration involved setting up port interfaces, VLANs, activating Intrusion Detection System (IDS) and Intrusion Prevention System (IPS), and establishing IPv4 policies specific to each VLAN. This comprehensive setup ensured that the network was protected against potential vulnerabilities and that only authorized devices could access the MPLS connections.

Wi-Fi Enhancement

To eliminate connectivity issues, we conducted a detailed analysis of the wireless coverage using advanced heat mapping tools. This allowed us to identify and address any coverage gaps. We deployed U6-LR Access Points strategically across the office to provide robust 5GHz WiFi 6 coverage, ensuring high-speed connectivity throughout the building.

VLAN Implementation

Given the client’s limited understanding of Virtual Local Area Networks (VLANs), we designed a user-friendly VLAN structure tailored to their needs. The VLANs were segmented for specific purposes, including management, official devices (such as laptops, printers, and NAS access), mobile devices (with internet access only), guest access, and VoIP for IP phones. This structure ensured efficient network segmentation and optimized resource allocation.

Network Layout Design

IP Address Management

With the requirement to support up to 600 users concurrently, efficient IP address management was crucial. We implemented VLAN segmentation and subnetting techniques to manage the IP addresses effectively. By using /22 and /21 subnets on separate VLANs, we ensured seamless IP address allocation and management, meeting the client’s scalability needs.

Guest Management and Access Control

We implemented a guest management system and a Wi-Fi access portal to regulate guest access. This solution allowed the client to maintain network security standards while providing controlled access to visitors.

Website Blocking Policies

Finally, we configured policies to block specific websites on different networks during specified timeframes. This granular control helped enhance both security and productivity within the organization.

The TechExpress Advantage

By hiring TechExpress, the client ensured that their IT needs were addressed comprehensively and efficiently. Our team of experts specializes in creating customized solutions that are perfectly aligned with the unique requirements of each client. Whether it’s a complete network overhaul, security enhancements, or scaling infrastructure to meet growing demands, TechExpress is equipped with the expertise and tools to deliver results.

• Expertise Across the Board: From hardware procurement to network design, security configuration, and beyond, We offer end-to-end services that cover all aspects of IT infrastructure management.
• Customized Solutions: We don’t believe in one-size-fits-all solutions. We take the time to understand each client’s specific needs, crafting bespoke solutions that deliver the best possible outcomes.
• Future-Proofing Your Network: With a focus on scalability and adaptability, we design networks that can grow with your business, ensuring long-term reliability and performance.
• Security at the Core: In an age where cybersecurity is paramount, We ensure that your network is fortified with the latest security protocols, safeguarding your business from potential threats.
• Cost-Effective Strategies: Balancing performance with cost efficiency is at the heart of our approach. We provide solutions that meet your needs without breaking the bank.

Results and Outcomes

The comprehensive network overhaul successfully addressed all the client’s challenges:

• Enhanced Performance and Scalability: The new hardware and network architecture significantly improved performance and allowed for future growth, supporting up to 600 concurrent users.
• Robust Security: The implementation of globally standardized security protocols and the updated firewall configuration fortified the network against potential threats.
• Improved Wi-Fi Coverage: The deployment of U6-LR Access Points ensured strong Wi-Fi coverage throughout the office, eliminating dead zones.
• Efficient Guest Management: The new guest management system provided secure and controlled access for visitors, maintaining the integrity of the network.
• Effective Resource Allocation: The VLAN structure and IP address management strategy optimized the use of network resources, ensuring efficient and secured operations.
• Increased Productivity: The website blocking policies helped the client maintain a productive and secured work environment by restricting access to non-essential sites during work hours.

Conclusion

TechExpress delivered a tailored and cost-effective solution that not only resolved the client’s immediate network challenges but also positioned them for future success. By partnering with TechExpress, you can ensure that all your IT needs are met with precision and expertise. Our ability to provide comprehensive, secure, and scalable solutions makes us the ideal partner for businesses looking to optimize their IT infrastructure and stay ahead in a rapidly evolving digital landscape.