Customers: Sibur-Khimprom
Contractors: Intact Product: SCS and Wireless Network Infrastructure ProjectsSecond product: Cisco Identity Services Engine (ISE) Third product: Cisco Adaptive Security Appliance (ASA) Project date: 2019/07 - 2020/01
|
2020
Upgrade your wireless infrastructure for production systems with Cisco, Dell, Lenovo, Rittal, and open source software.
Ensure reliable and secure communication between wireless mobile devices servers and applications. To do this, the regional enterprise modernized the isolated BIPS and the secure transport communication channel through the MSPD holding to application servers located in the corporate center, as well as bringing the existing BIPS Wi-Fi WMS to the target vision of a single enterprise standard for similar systems.
The project is a wireless infrastructure upgrade for SAP production systems. The main goal of the project was to build a reliable and secure information interaction between wireless mobile devices and application servers.
Customer Issues to Solve:
- Obsolete WLAN equipment;
- No full Wi-Fi coverage of storage facilities;
- Absence of fault tolerance of WLAN systems;
- Lack of security according to corporate policies.
Tasks:
- Provide seamless roaming within storage areas;
- Bring the WLAN system to the corporate security standard.
Solution:
Upgrade your wireless infrastructure for production systems with Cisco, Dell, Lenovo, Rittal, and open source software.
The project carried out the following activities:
- Full-fledged design of fault-tolerant, protected WLAN;
- Development of design documentation;
- Development of operational documentation;
- Implementation of radio planning of the Customer's industrial warehouses;
- Build a failover cluster of RADIUS servers based on Cisco ISE;
- Implementing EAP-TLS authentication using digital security certificates;
- Build an isolated secure LAN segment using the next generation Cisco ASA firewall cluster with Firepower;
- Deploying a Cisco Prime-based WLAN monitoring system;
- Build a client location mapping system on Cisco CMX-based industrial warehouse plans;
- Deployment of information security message collection, display and storage system based on Open Source solution ELK (Elasticsearch, Logstash, Kibana);
- Build a failover cluster of WLAN controllers based on Cisco WLC;
- Deploy an Open Source-based reverse-proxy server high availability cluster; Nginx
- Implementation of migration to upgraded WLAN without interruption of business-critical services;
- Implementation of construction and installation works to modernize WLAN.
Customer Benefits:
- A system that fully complies with the Customer's corporate standards has been created;
- Updated obsolete equipment that does not have manufacturer technical support;
- Fixed the problem of Wi-Fi coverage of production warehouses.