Network Security

For my IT 4336 Semester Project, I developed a comprehensive network security plan focused on 24/7 accessibility, IPv6 adoption, firewall configurations, VPN selection, and MITRE ATT&CK defenses. My approach ensures redundancy through load balancing, proactive monitoring, and disaster recovery strategies. I evaluated IPv4 vs. IPv6, recommending IPv6 for scalability and security, while maintaining IPv4 compatibility for external interactions. To protect the network, I proposed a two-firewall DMZ model, isolating public-facing servers while shielding internal resources. After researching firewall solutions, I identified Fortinet FortiGate 60E as the optimal balance of security, performance, and cost. For secure remote access, I recommended OpenVPN due to its strong encryption and flexibility. Additionally, I integrated MITRE ATT&CK strategies—deploying Application Control and Multi-Factor Authentication to mitigate scripting and credential attacks. My recommendations create a resilient and future-proof network, ensuring security, efficiency, and adaptability for enterprise growth.