Network Penetration Methods Empoloyed

Cap Gemini Internet Startup Project August 2000 to December 2000

IP Schema

Designed and implemented an IP address schema for the Project environment (Web site/ DMZ/ Intranet/ development and remote offices) ie the complete network design for the project in the UK and for offices abroad. This was provided in an easily updateable access-controlled standardised spreadsheet set format.

Co-Location Suppliers Sourced Domain Name Registration

A complete study was undertaken on the supply of suitable co-location suppliers and a technical requirements document was prepared from the designs to prepare for tender receipt. I undertook the technical sourcing of the sourced the Web Hosting supplier for the project in City Of London Telecommunications Company as offering the best of the breed in co-location suppliers in terms of compromise between accessibility / remoteness and cost.. A complete domain name set acquisition was completed across all top level domains.

High Availablity Firewall and Router Configuration

Designed and implemented a High Availability Firewall and Router configuration for the Project environment (Web site/ DMZ/ Intranet/ development and remote offices) This involved a High Availability design for the web hosting Co-location site including Cisco Pix 520 HA front end firewalls configured to protect the Web servers, Cisco Local directors in HA configuration for Web Server load balancing complete with sticky sessions setup for the web servers., and Nokia 330's in VRRPmc HA configuration Checkpoint Firewall-1 4.1 SP2 (client, management server, and gateway design) for backend access to/from secured database servers. The Co-location design was complete with out-of-band / secure dialup access via Cisco 3620 Router to all co-lo components. The backend database was designed as an Windows 2000 server cluster hosting Microsoft SQL server applications. A separate development network was designed. I built configured and tested the firewalling infrastructure in a test rack before deployment. Firewall rulesets designed for front end requirements and backend (Nokia) requirements to include the dcom Microsoft sql database requirements.