Summary               

Company: Food Standard Agency

Industry: Government

Challenges:

• Increase ROI

•Simplify client  Access to    Corporate Network with WiFi.

• Improve network  scalability

• Provide network integration with

fully Secure Wireless Network

Selection Criteria: Food Standard Agency needed a solution of wireless which is fully secure, scalable, adaptable and fully Compliance with Cabinet Office guidelines.

Network Solution:

• Cisco ASA Firewalls

• IC4500 UAC Appliance

• Junos Pulse UAC

• Juniper EX2200 switches

• Cisco 2504 Wireless Controllers     

• Cisco 3602 Access Points

Results:

• UAC element provide enhanced Security  with end user health checks

• 802.1X architecture provide secure authentication  of each Wifi equipment.

• Centralise Control of Wifi Infrastructure with IC4500 acting  as Infranet Controller to provide secure access to Wifi end users

• Simplified network Accessibility with Junos Pulse UAC.

The Food Standards Agency is an independent government department responsible for food safety and hygiene across the UK. FSA work with businesses to help them produce safe food, and with local authorities to enforce food safety regulations.  FSA works with stakeholders, other Government departments and public bodies, and international relations. FSA UK headquarters are in London, but the Agency also has offices in York, Scotland, Wales and Northern Ireland. Wifi require was in all offices  including the Head office in London.

Challange

As the Agency is a Public Sector and IL3 compliance Network, so Security was main focus of the Solution. Agency was not currently using any wireless solution, so the new wireless was for all offices and require transparency between Wired and Wireless while not compromising any Security. Also solution require accredited CoCo approved products from Cabinet Office and CESG compliance approach.

Selection Criteria

FSA looked for a network solution which would provide high performance integration with its existing environment, and enhanced security features to reduce the configuration steps required to maintain logical separation between Wired and Wireless. The selection process was based  on strong technical requirements, Security, performance, functionality, and economics all key criteria. Using mixtures of Juniper IC 4500 Series as Infranet Controller appliance with Juniper EX2200 switches as Infranet Enforcer of Wireless Network proved highly secure and compatible with required CESG Walled Garden architecture approach.

Solution

I proposed a  Solution, which fit the FSA environment perfectly. The Juniper IC4500  provide Centralised Controller for wireless with EX2200 switches as Enforcer point to provide access policies in the Network. IC4500 and EX2200 create secure encrypted channel to implement UAC access enforcement in Wireless Infrastructure. Cisco Access Points and Wireless Controllers act as Authenticator for the 802.1X environment with IC as RADIUS to Network. Cisco ASA firewalls provide Access filteration between the Wired and Wireless Network and provide enhanced security features. Junos Pulse with UAC element provide WiFi Access to end users includes host checking and end users Compliance checks.