snhu 6 - 1 Project One Submission: Network Evaluation Report Joshua Minnick Information Technology Department, Southern New Hampshire University CYB-310 Network Defense Professor Kevin Kenna February 18, 2024 1
snhu I. Network Evaluation Report A. Challenge One I have been advised users on the Network_1 segment need to have all access to the Network_3 segment. The first step in troubleshooting any networking issues is to review the network diagram if one is available. After reviewing the network diagram provided, I can see the Network_1 segment and Network_3 segment is connected using two switches and a pfSense router with firewall capabilities. This diagram shows me the networks have been configured using physical connections that should allow for the transfer of data, however, there are two areas of concern. The diagram shows the physical connection between the pfSense router partitioning Network_3 segment and the switch used to connect the Network_3 devices is severed. This means we have a physical connection issue and will need to replace the ethernet cabling connecting the pfSense device to the switch for Network_3. Once the ethernet cable is replaced, I can look more closely at the configuration of the devices on the Network_3 segment for any issues or concerns. The diagram shows the Network_1 switch that allows data transfer, as well as the Network_3 switch and the primary switch for this network. However, looking at the pfSense router labeled Network_3, it shows this device appears to be disabled or improperly configured for data transfer. Because pfSense devices can be utilized as firewalls, the first step I would take in troubleshooting this issue is to review the configurations within the firewall to ensure rules have been set 2
snhu and are appropriate for the network traffic that will need to pass through this device. The likely culprit for this issue is an improperly configured firewall, often being the rules were never defined. Firewalls are deny by default devices meaning all traffic is denied when this device is initially installed, and rules must be set to allow any traffic through. I would configure the firewall rules and set proper traffic allowances which would then allow users on the Network_1 segment to have all access to the Network_3 segment. B. Challenge Two I have been told the users on the Network_2 segment cannot access the internet. As always, the first step is to review the network diagram for any physical connection issues that may be causing problems. Upon reviewing the network diagram, I can see there are three probable causes of the loss of internet availability to the Network_2 segment. One probable cause is a physical connection issue while the other two causes are related to configuration issues with pfSense firewall devices. Looking at the pcs connected to the Network_2 segment there are two devices that show they do not have physical connection to the Network_2 switch. These devices will not be able to transfer any data, meaning internet connectivity is inaccessible until a physical connection is established with ethernet