IE-Project Question For Articles (AUC Firewall) (v.02)
IE-Project Question For Articles (AUC Firewall) (v.02)
IE-Project Question For Articles (AUC Firewall) (v.02)
We got the award for Supply And Installation Of Firewall For Regional Office And Access
Switches For AU Conference Center on October 15,2020
Supply And Installation Of Firewall For Regional Office And Access Switches For AU Conference
Center
US$ 249,980.61(Two Hundred Forty Nine Thousand Nine Hundred Eighty and 61/100 Dollar)
One of the biggest challenge of MIS is the IT network of African Union. In fact, AU C uses a 3 tiers
network infrastructure with accesses switches, one distribution switch for each building and one
main core switch for all incoming and outgoing traffic, Between 2017 and 2018 a lot
enhancements have been done to improve the network:
Replacement of Old Core switch 6500 series;
Removal of all single point of failure;
Installation of all new generation firewalls; installation of High density WIFE network;
Installation of the Distribution switches of ACC;
Deployment of network monitoring tools: Identity Service Engine and Stealwatch.
Many assessments and audits have proved that the heterogeneous network of African Union
using at the same time Cisco, HP, ZTE and Huawei network equipment bring a lot of matters it
terms of maintenance cost, technicians' skills and security of the infrastructure.
The main purpose of this project is to increase the capacity of HQ's network by purchase of the
remaining equipment required for the New Conference Centre and license for security
purposes.
And also to undertake the revamping of African Unio Network enhancement-Firewall for
Regional Office and Access Switch for AUCC(Conference Center network) by the replacement of
the old ZTE access switches ,support the network extension with arrival of new staff and
proceed to the deployment of network control and monitoring tools.
1. Supply of the Cisco ASA Firewall and Supply and Installation of Cisco Access Switches as
per the approved Design.
2. Migration of the network from the existing infrastructure to the New Access switches
with Minimal Downtime.
3. Integration of the Access switches with a Network Access Control tool of ISE.
4. Configuration of the Access Switches for Users to Authenticate through 802.1x though
the cisco Identity Services Engine.
5. Configuration of the Access Switches for Network Devices, the likes of, Access Points
and IP Phones to be Authenticated through the MAB on the Cisco Identity Services
Engine.
6. Delivered Design, Implementation, Migration and As-Built Document through the
Implementation Phases.
Solomon Shiferaw
Cherinet Alemayehu
Fikirte Kibru
Kalkidan Seyfu
Misle Ameha
Yohannes Kefyalew
Teshager Sisay
Ahmedin Abubeker
Rahel Degefa
Abdi Seyum
Gelantu Tesfaye
CISCO
China
We prepared and shared SPG and LLD to the client. The client reviewed and gave comments on
the LLD to add implementation that is out of the scope of the project. The scope of the project
only includes migrating the existing 22 ZTE access switches to new Cisco switches. The client
requested to add ISE and stealthwatch integration. After we received the comment, we did
small research on the impact of the requested change on the project and found out that the
requested feature will affect the project schedule (which will add up to 1 month time to the
schedule baseline of the project). We discussed the issue with our CEO to receive
recommendations. Our CEO advised us to include the implementation as we have a good
relationship with the client. Finally, we informed the client that the requested feature is out of
scope but IE will accept the request due to its partnership with AUC team, AUC team thanks IE
for the consideration.
15. What was the feedback from the client when the project was closed?
“ IE Network Solutions PLC has shown professionalism and leadership during the project delivery
and implementation phases. Our technical team has highly benefited from their technical skills,
and we recommend IE Network Solutions for similar and related projects. ”