Security requirements for Mountain Sky school project for Cisco NetAcad from Bucharest, Romania

	Cisco Networking Academy TCS - Mountain Sky School Project
	Requirements	Wiring map	MDF/IDF details	VLANs	IP addressing	Cable runs	Router config.	Security	Equipment list
Addressing \| General \| LAN & Wiring scheme \| Security \| Servers \| WAN

SECURITY REQUIREMENTS

- Network security encompasses a double firewall implementation architecture for the Internet connection, with all Internet exposed applications residing on a public backbone network. In this implementation all connections initiated from the Internet into the schools private network will be refused

- This is accomplished using Access Control Lists (ACLs) on the router, so that all traffic from the curriculum LANs will be prohibited on the administration LAN. Exceptions to this ACL policy can be made on an individual basis

-Applications such as e-mail and Directory services will be allowed to pass freely since they pose no risk. An user ID and Password Policy will be published and strictly enforced on all computers attached to the administration LAN. All computers in the school's network will have full access to the Internet

- All ACLs will be controlled at the district office and exceptions to the ACLs will be reviewed prior to implementation

Network security approach	Double firewall architecture
Ways of control	Access Control Lists (ACLs)
Applications not subject to ACLs	E-mail and Directory services
Number of logical LANs	3 separate LANs (VLANs)
Enforced security measures	UserID and Password Policy (on admin network)