In the following, you can find a listing of in part anonymized short descriptions of consulting projects which we have carried out recently.
We will be glad to provide further information and recommendations for your individual projects in a personal interview.
Check Point migration from R77.30 to R80.X - planning and implementation
Target
Planning and implementation of a migration of the Check Point infrastructure for a service provider in the healthcare sector while maintaining availability as far as possible and minimizing downtime.
Customer
Regional service provider in the healthcare sector
Scope
3 person days
Activities
- Analysis of the existing operating network
- Joint decision with the customer on design issues
- Presentation of the migration strategy
- Implementation of the migration
- Validation of the function and security of the new Check Point R80 infrastructure
Result
The migration made it possible to achieve significantly higher IPSec VPN performance, which was not possible with the previous version due to its architecture.
Cisco ACI migration - planning and implementation
Target
Planning and implementation of a Cisco ACI platform for a regional service provider in compliance with company-specific processes and security requirements
Customer
Regional service provider Stadtwerke Neumünster
Scope
approx. 10 person days
Activities
- Analysis of the existing operating network
- Recording customer requirements
- Joint decision with the customer on design issues
- Development of a migration strategy
- Execution of the migration
- Validation of the function and security of the new ACI infrastructure
Result
A functional Cisco ACI infrastructure was put into operation without interruption.
Preliminary study IPv6 migration
Objective
Effort estimation and preliminary planning for the subsequent IPv6 migration of the entire IT infrastructure
Customer
IT service provider from the financial sector
Scope
approx. 40 person days
Activities
- Collection of all relevant components
- Assessment of the IPv6 capability of the components
- Identification of problem areas
- Setting up the test environment/laboratory
- Development of a migration strategy
- Effort and cost estimate for migration steps
Result
A resilient plan for the subsequent introduction of IPv6 is available.
Implementation of SAN management
Target
Implementation and operation of a SAN management tool (Cisco DCNM-SAN) in compliance with company-specific processes and security requirements
Customer
Bank
Scope
approx. 60 person days
Activities
- Testing the switch configurations (Cisco MDS)
- Creation of scripts for commissioning new switches
- Installation & upgrade of the DCNM-SAN in a test environment
- Documentation on installation, customization, operation of the tool
- Support in questions regarding the DCNM-SAN & coaching of employees
Result
The SAN management tool is in productive use.
Network optimization SDH & IP
Objective
Qualified evaluation of the existing network concept and identification of optimization potential
Customer
Electricity supplier
Scope
8 person days
Activities
- Analysis of the existing operating network (IP/SDH)
- Development of optimization approaches
- Recommendation for better dimensioned network components
- Concept development for multi-client capability of the IP network
Result
Cost savings through the use of the recommended network components, migration plan for further network development.
Vendor selection for MPLS-TP
Target
Determine manufacturer for new MPLS-TP equipment due to discontinuation of existing SDH product
Customer
Infrastructure operator
Scope
5 person days
Activities
- Analysis of the existing operating network (SDH wide area network)
- Recording of customer requirements
- Analysis of product and solution alternatives for MPLS-TP
- Development of the most suitable alternative
Result
The customer opted for the recommended solution
UC coupling Cisco & Microsoft
Goal
Connect existing environments for telephony (Cisco) and instant messaging/conferencing (Microsoft) with the greatest possible range of functions.
Customer
IT service provider
Scope
approx. 10 person days
Activities
- Presentation of the three different concepts Dual Forking, Remote Call Control (RCC) and CUCiLync
- Evaluation of the functionalities of all variants
- Practical tests of all variants
- Implementation of the selected variant (dual forking)
Result
The dual forking concept for linking the two systems was introduced productively.
PKI Design & Implementation
Target
Design and set up two-tier PKI infrastructure for VPN access and code signing
Customer
Public institution
Scope
approx. 8 person days
Activities
- Consulting on the PKI structure
- Joint decision with the customer on design issues
- Planning the PKI
- Setting up the certification authorities
Result
A functioning CA infrastructure was put into operation.
Segmentation and access control in critical infrastructures
Target
Securing network traffic between autonomously operated industrial Ethernet networks from the networks for management and monitoring
Customer
Operator of a critical infrastructure (KRITIS)
Scope
approx. 60 person days
Activities
- Analysis of the network traffic
- Display of possible security measures (802.1X, VPN, TLS, firewall, proxy, etc.)
- Concept creation
- Setting up a PKI
- Consulting hardware suppliers regarding the implementation of certificate rollout and use
- Automatic certificate distribution using SCEP and EST
Result
Project is still ongoing.