Network Design and Security for Remote Access in Retail Stores

This report examines remote network access solutions for retail stores, focusing on goals, network design, security, and risk management. The objectives include providing remote access to all retail locations using Cisco VPN designs, implementing cloud-based solutions like PaaS, NaaS, and SaaS to mitigate risks, and utilizing IPSec for network security. The report details the network design, including the use of RRAS servers, SSTP, and RADIUS for user authentication. It also addresses security and risk concerns such as encryption, network security, and resource monitoring, alongside vulnerabilities in remote access customer devices. The analysis covers dual WAN links, Cisco ISR, Catalyst Switches, and VPN configurations. Key advantages of the projected remote access include enhanced network availability and software access, network scalability, and increased access layer protection. The report provides a comprehensive overview of remote network access, including implementation details, security considerations, and potential risks.

REMOTE NETWORK
ACCESS
NAME
DATE

Remote Network Access Goals and Objectives
 Needed telecommunication design for the Retail store is talked about in the past areas and from the
fundamental assessment of the correspondence prerequisites distinguished obviously, promote remote
system organization and control has the critical part.
 In view of the contextual analysis thought of it as, is accepted right around five thousands retail locations are
actuality worked under a brought together organization and server regulator; now giving distant access to
added retail location from some additional store is the strategic target established in this unique situation.

Remote Network Access Goals and Objectives
 IT Specialists have the entrance to distant areas of the retail locations, where advance
improvements are examined above the present segment and the fundamental goals and
objectives are as given underneath
 To give distant access to all the retail locations utilizing run of the mill Cisco VPN designs
 To give cloud-based arrangements like PaaS, NaaS, and SaaS to keep the hazard
circumstances although misfortune or calamity of the present distant access controls
 Execution of the IPSec for the present system
 To distinguish and design the related dangers and dangers before arrange and introduce the
remote access to all the retail locations.
 The capacity to distribute Virtual Private Networks (VPNs) to various end users.

Network Design to support the remote access
 The environment that is utilized for the situations is shown in the graphic underneath,
demonstrating the user building up a link with the RRAS server over TCP443 or what will
better perceive as the HTTPS port.
 This same supporting environment is utilized by SSTP, incorporating the SSL certificates,
utilized to secure the passage
 In this design, it has labeled some of the sections which will indicate the initial network
which is involved with the essential SSTP execution, incorporating the RADIUS (also
called the Network Policy Server), which is utilized to check the user's approval to
continue with building up the request for the tunnel.
 The rest of the servers are added to the situation as the NAP is enabled services,
incorporating the Certification Authority, and for instance, a straightforward Windows
Update Server to provide basic remediation to non-compliant users.

Security and Risk Concerns
 Remote access and the relating safety is given utilizing the Cisco design, equipment and
programming setups as appeared and in this segment, potential dangers and security
dangers as related are talked about to sum things up.
 With separate to the security consistence, proposed organize configuration incorporates
the key segments like firewalls, switches, switches and extra security parts too.
 Extra security parts incorporate the firewall switches with itemized approaches and
principles and IDS (Intrusion Detection System), where they are introduced and arranged
above the important regions of retail locations to similar Internet edge, Data focus, Contact
focus and Store

Risks Of Remote Network Access
 Not encoding information: Encryption is frequently viewed as the best method to accomplish
information security and is characterized as the change of electronic data into another form
normally called ciphertext that cannot be effortlessly comprehended by any other persons outside
the approved groups (Gallup & Newport, 2010).
 Weak network security :With the normal cost of cybercrime achieving $7 million for every
association yearly, organizations can't bear to be thrifty about network security.
 Ineffective resource monitoring: An Information Technology monitoring solution gives visibility
into the majority of the managed computers on a network, empowering you to make predictable
updates, be cautioned when new gadgets are included and reveal potential Information
Technology issues before they wind up glaring issues (Das at el., 2010,)
 Remote network Access Vulnerabilities Remote access customer gadgets generally have weaker
protection than standard customer gadgets due to the fact that many gadgets are not managed by
the organization itself,

Concerns Of Remote Network Access
 Secure Access :Bring Your Own Device technique has made it feasible for everybody to
have capacities to access remote networks. In any case, this does not imply that everybody
can have similar access benefits.
 Connectivity: Worldwide mobile data traffic continues to grow over years. Desires are
highly set for the remote network which is fast and consistent.
 Mobility: Chat rooms, forums, and Message boards come up when an application or a new
brand of mobile gadget declaration enters the market.

Examination
 Dual WAN links similar Alternative and Primary links are additional to the unified division
and they are again linked with the DC or Servers over the incorporated administration
framework.
 Rest of the equipment and system foundation segments like Cisco ISR (utilized for
Internet Security), Catalyst Switches (utilized for appropriated get to), and administration
VLAN are associated utilizing PPP_1000 network.
 Entry arrangements, terminal administrations arrangements, and VPN arrangements have
been utilized for quite a while to endeavor to anchor remote access associations with the
corporate system.
 Up to this point, it has been exceptionally hard to sufficiently anchor VPN associations
with individual firewall arrangements and approaches. Arrangements are presently being
offered to anchor this VPN access in a dynamic and sensible way.

Examination
 Remote controllers and the comparing setups are associated with the remote local office
areas, where the IT experts can utilize the access and controls the concentrated servers
utilizing both the workplaces and cell phones utilizing the remote availability also. Next
are the vital focal points with the projected remote access for the retail location
 Whole arrange accessibility and software's get to is upgraded because of the parallel ways
designed
 Because of the parallel gadget configuration, arrange versatility can likewise be
accomplished
 Due to the quantity of end focuses over the remote segments, new associations and more
noteworthy access layer assurance is conceivable with the approach of WCS configuration
took after