Building a Computer Systems Infrastructure Project

Section A

Above you will see a network diagram of your final project.  In a team of 1-3 you will utilize all the information you have learned this semester and information from previous semesters to build this infrastructure.  All of the tasks built into this project are specifically garnered from real life examples that you as a Computer Systems major will be expected to build/administer.   
 
In this document you will see that there are 3 sections (A,B and C).  You will observe that there will be minimum requirements for each section.  If you choose to go above and beyond, that is great and can only help your grade.  Since this project is designed to test your practical knowledge, a large percentage of the grade is based on whether all the required content is present or not.   
 
Please keep in mind that there are some parts in this project that if they are not functional the entire project will be impacted.   
You will be given this project on day 1 of the course.  You are in charge of how you manage your time.  From day 1 you should begin working on the project.  This is a third semester course and you have acquired adequate knowledge to start it. 
 
*Section A: 
-    Fully functional(FQDN) webserver quarantined within two firewalls(DMZ) o “functional” is defined as -> when a user types into their browser"www.StudentExample.com” (or whatever name you choose) the user will be directed to the correct website).  Your website does not need to be graphically “fancy.” 
o    A machine from outside of your network must be able to reach it 
o    A user machine from Section B must be able to reach it o A user machine from within the internal network in Section A must be able to reach it. 
-    Windows Server o Domain Controller o Service: DNS (Functional) 
o    Demonstrate 20 group policies configured  
-    Primary Pfsense o SNORT Module installed 

? Snort rules 
•    Log Facebook traffic coming from Section A and B 
•    Alert rules for traffic coming from nontypical sources(Minimum 3) 
-    External facing PFSense o Firewall rules to block ICMP Flood 
o    Firewall rules to block 3 different types of Denial of 
Service attacks o Demonstrate an additional rule that external facing firewall should have. 
-    Internal User Machine o Must utilize firewalld zones 
? Demonstrate intentionally restrictive rules set in place. o Must be able to access the webserver(visit hosted website) 
o    Must be able to access the internet through external PFsense 

Section B

Section B:(VPN must be functioning to receive a grade for Site B) 
-    HR User Machine: 
o    Must have a firewalld zone set up 
?    Zone must have specific permissions set up that let them have a wide variety of permissions 
o    Is able to access the webserver, via vpn, in Section A - Standard User Machine: 
o    Must have a firewalld zone set up 
?    Zone must be set up with restrictive permissions  
?    Zone does not have to be exactly the same as 
“locked down Permission” user machine in Section A 
-    SNORT NIDS o On a Unix based Operating System.  Set up SNORT so that it is monitoring this network. 
?    Alert for pings coming from HR and Standard user directed towards the SNORT machine 
?    Ignore pings from the pfsense router in this network(Section B) 
Section C:(VPN must be functioning to receive a grade for site C) 
-    Offsite Storage:  A machine (Unix/Windows you pick) that will be a repository for some data storage o Demonstrate that from across the VPN you are able to automate data being sent from Section A and Section B and that data is being stored. 
o    There are many ways to do this, be creative. 
 
General Expectations not Section Specific: 
-    Python or some other scripting language is in use. 
o    It is expected that you will use scripting in some fashion in this project.  Your grade for your scripting will be based on quantity and complexity, not on how hard it was for you to do.
 
This portion of the project is separate from the technical part.  During your presentation your instructor will ask each team member 2 questions that are separate from general questions of probing to understand the project.  The purpose of these questions is to assess what you have learned about the concepts in the project.  You will not be told in advance to your presentation what the questions will be, there is no documented list of questions to prepare for.  As an individual you have to understand every element of the project.  During your presentation your instructor will say “[student name] this is question 1 for you.” etc.  It will be obvious that this is THE question you are being graded on.  Questions will be asked sporadically throughout the presentation.  There is no formal question period.   
 
There are no harder or easier questions, if you know your project and the concepts behind it then there is no such thing as a hard question. 
 
Below you will see the rubric for how your answer to the questions are graded. 
Question 1 
0     Did not answer 
A severe lack of knowledge on the topic has been demonstrated 
1     Answer is mostly correct.  However it is clear that student is not confident on the subject matter.  Answer reflects a need for deeper knowledge in order to achieve a higher level of competency.   
2     Was able to answer the question presented correctly, there were some inaccuracies.  A deeper level of knowledge on the subject matter would allow the student to be able to have greater confidence in answering the question.  
3     Understands the underlying technology in play very well. 
Confidently speaks to the subject matter. 
Was able to with great accuracy explain their answer when called upon 
 
0     Did not answer 
A severe lack of knowledge on the topic has been demonstrated 
1     Answer is mostly correct.  However it is clear that student is not confident on the subject matter.  Answer reflects a lack of knowledge. 
2     Was able to answer the question presented, there were some inaccuracies.  A deeper level of knowledge on the 
    subject matter would allow the student to be able to have greater confidence in answering the question.  
3     Understands the underlying technology in play very well.