Loading
Case study · 2019

Secure WAN Infrastructure, Cisco Firewall Hardening and Digital Display Deployment

Network Infrastructure Solutions Cybersecurity & Governance
Year
2019
Client type
Institutional Entity

01Summary

In 2019, DIMAS implemented an institutional project covering WAN connectivity, local networks, fiber-optic infrastructure, digital presentation and document digitization equipment. The work included supplying, installing and configuring the contracted components, performing associated tests, and providing relevant training. For the security scope, DIMAS installed two Cisco ASA 5510 appliances, configured firewall rules and security policies, and performed hardening and configuration testing in coordination with the client. The project also included managed network switches, WAN communications equipment, copper and fiber cabling, projectors, and administrative and engineering document scanners. This case study reflects the approved scope without claiming guaranteed security or continuous managed security operations after handover.

02Requirements

The client required communications infrastructure connecting its networks and associated sites, with managed switching, fiber-optic connectivity and WAN access components supporting the organization of data traffic. Requirements included firewall rules and security policies, structured cabling and network distribution cabinets, together with presentation equipment and scanners for documents and technical drawings. The contracted scope also included installation, configuration, testing and training. Two Cisco ASA 5510 appliances were supplied from legacy stock at the client's request, with the client informed before delivery that their official manufacturer support had ended, as confirmed by DIMAS management.

03Technical fit

The project combined managed LAN infrastructure, WAN communications equipment, and copper and fiber transmission media. Components included a Cisco Catalyst 3850 switch, two PLANET GS-5220-20T4C4X switches, ten PLANET MGB-LX transceivers, Patton routers and extenders, and Ad-net communications multiplexers. Approved activities included VLAN configuration, static routing and aggregation of connectivity over fiber within the implementation scope. For security, two Cisco ASA 5510 appliances were used to configure firewall rules and security policies, perform hardening and test the configurations in coordination with the client. The deployment also covered shielded and unshielded Cat6 cabling, distribution cabinets and fiber patch cords, alongside BenQ projectors and Plustek and Colortrac scanners. Device capabilities are presented as component specifications, not as measured project performance or guaranteed security outcomes.

04Documented scope

  • Supply, install and prepare the approved LAN, WAN, fiber-optic, cabling and network distribution components.
  • Configure managed switches, VLAN segmentation, static routing and fiber-based connectivity aggregation within the project scope.
  • Install and configure two Cisco ASA 5510 appliances, establish firewall rules and security policies, perform hardening and test configurations in coordination with the client.
  • Prepare presentation and scanning equipment, carry out associated testing and training, and hand over the contracted scope.

05Key components

01 BenQ MH550 — 56 Full HD DLP projectors, with installation and connectivity accessories for presentations, meetings and training.
02 BenQ MS531 — 37 SVGA DLP projectors, with installation and connectivity accessories for institutional presentations and training.
03 Plustek OpticSlim 1180 — 14 A3 flatbed scanners for digitizing documents, drawings and large-format paper records.
04 Colortrac SmartLF SCi 42c — 16 wide-format color scanners, with floor stands and color upgrades for digitizing engineering plans and maps.
05 Cisco WS-C3850-24T-E — 1 managed 24-port Layer 3 switch for LAN connectivity, aggregation and routing.
06 PLANET GS-5220-20T4C4X — 2 managed network switches for aggregation, VLAN configuration, static routing and fiber connectivity.
07 Ad-net AN-FM-240-ETH — 4 PDH fiber multiplexers for transporting E1 and Ethernet communications within the WAN infrastructure.
08 PLANET MGB-LX — 10 single-mode 1GbE SFP transceivers for compatible fiber-optic network uplinks.
09 D-Link NCB-C6SFGRR-305 — 21,250 meters of shielded Cat6 SF/UTP network cable for structured copper LAN cabling.
10 D-Link NCB-C6UGRYR-305-24 — recorded quantity of 3,000 of Cat6 UTP network cable, for structured LAN cabling; the measurement unit is not explicitly stated in the available source.
11 D-Link NWR-12U-6060-BL-GL — 17 wall-mount 12U network cabinets, with the recorded power distribution, cable management, cooling and lighting accessories.
12 D-Link NWR-9U-6045-BL-GL — 6 wall-mount 9U network cabinets, with integrated distribution, enclosure and cable management accessories.
13 Patton OnSite 2603/K/EUI — 20 T1/E1 gateway routers for network connectivity over legacy WAN services.
14 Patton DiamondLink Model 3201 / 3201/R/UI — 10 G.SHDSL routers for network connectivity over copper pairs.
15 Patton CopperLink CL2301/4ETH/EUI — 6 managed Ethernet extenders for extending network connectivity over copper wiring.
16 Cisco ASA5510-BUN-K9 — 2 ASA 5510 firewall appliances for installation, configuration, security rules and policies, hardening and configuration testing.
17 TTI Fiber FC/UPC-LC/UPC-SM-DX-G657A1-03.0mm-10M — 6 single-mode duplex fiber patch cords, 10m each, FC/UPC to LC/UPC.
18 TTI Fiber FC/UPC-LC/UPC-SM-DX-G657A1-03.0mm-10M — 6 single-mode duplex fiber patch cords, 10m each, retained as a separate source item.
19 TTI Fiber SC/UPC-LC/UPC-SM-DX-G657A1-03.0mm-10M — 6 single-mode duplex fiber patch cords, 10m each, SC/UPC to LC/UPC.
20 TTI Fiber LC/UPC-LC/UPC-SM-DX-G657A1-03.0mm-5M — 6 single-mode duplex fiber patch cords, 5m each, LC/UPC to LC/UPC.
21 D-Link NCB-C6SGRYR1-1 — 320 shielded Cat6 STP patch cords, 1m each, for connecting network outlets, switches and patch panels.
22 D-Link NCB-C6SGRYR1-3 — 210 shielded Cat6 STP patch cords, 3m each, for network equipment and outlet interconnections.
06·Delivery record

The project record lists a delivery date of 9 November 2019, a contractual duration of 45 days and an actual duration of 52 days. The work covered supply, implementation, installation, configuration, associated testing and training within the contracted scope. The record does not explain the duration difference or independently establish a particular performance level or guaranteed security outcome.

07 · Why DIMAS

DIMAS supplied the approved components and performed the associated installation, preparation and configuration work within the contracted scope. Its role included configuring switches and WAN/LAN and fiber-optic connectivity components, installing and configuring two Cisco ASA 5510 appliances, establishing firewall rules and security policies, and performing hardening and configuration testing in coordination with the client. Responsibilities also covered preparing presentation and scanning equipment and providing training related to the deployed equipment and solutions. The case study does not include continuous managed security services or guaranteed prevention of all attacks.

Start a structured conversation about your requirement.

Share the business need, site context and preferred service area. DIMAS will use the information to understand the enquiry and determine an appropriate next step.