Client

StarLightMedia
Web-site:

About Client

Starlight Media group is the largest media group in Ukraine.

Tasks

  • Identification of the existing network architecture and assessment of its architectural maturity
  • Sufficiency estimate for existing hardware and assessment of the current and future consumption of network resources
  • Assessment of the network infrastructure scalability (free ports available, the necessity for modernisation of existing hardware).
  • Identification of risks associated with speed of network infrastructure recovery following hardware failures
  • Provision of advice regarding network infrastructure optimisation

Problems

Starlight Media is the largest media group in Ukraine that owns 6 TV channels: STB, ICTV, Novy Kanal, M1, M2, and QTV. Until recently, each channel had a separate IT infrastructure.
During the consolidation under unified management, the fact that different platforms were based on different architectures and included hardware from different manufacturers.
To unify and optimise the IT infrastructure management processes, an audit was deemed necessary, as well as the creation of a strategy for IT infrastructure development and optimisation over the following few years.
The project was meant to cover the company’s main IT services together with business processes of its IT department. The audit was aimed at assessing the existing network infrastructure, determining if it was mature enough to meet the needs of the business, and developing recommendations for its improvement and enhancement of its reliability.

Before the audit, the customer often responded reactively to emerging technical issues, which led to an even greater complication of IT infrastructure and its support. The customer also had a hard time allocating budget for IT infrastructure development.

Criteria

Функциональные блоки:

  • WAN (подключение к внешним каналам связи) – обеспечивает маршрутизацию в интернет внешних сетей, а также предоставляет блоки публичных адресов другим департаментам
  • Backbone или Core (ядро сети) – обеспечивает взаимосвязь площадок между собой, посредством использования собственных каналов передачи данных Заказчика, а также маршрутизацию подсетей между площадками и в интернет сегменты
  • Security Edge (безопасность периметра сети) – обеспечивает защищенный доступ удаленных сотрудников к ресурсам сети
  • LAN Edge (уровень доступа) – обеспечивает доступ конечных сетевых устройств к сети на площадках и агрегацию соединений
  • Monitoring (управление) – обеспечивает централизованное управление с оборудованием сети и оповещения персонала, ответственного за эксплуатацию сети в случае внештатных ситуаций в работе сети

Методы проведения:

  • Инициация 
  • Сбор первичной информации, включая имеющуюся документацию, анкетирование и интервьюирование специалистов Заказчика, обследование сетевой
  • Анализ собранной информации – общие сведения, детальное изучение состава оборудования, физического и логического дизайнов
  • Подготовка отчета – детальное описание имеющейся инфраструктуры Заказчика, перечень найденных уязвимостей и рекомендации по их устранению
  • Презентация результатов.

Охват:

  • Анализ имеющейся документации
  • Анкетирование и интервьюирование специалистов Заказчика
  • Состав оборудования
  • Физический дизайн
  • Логический дизайн
  • Текущая утилизация ресурсов
  • Анализ канального уровня
  • Анализ сетевого уровня
  • Анализ параметров качества обслуживания
  • Анализ мер обеспечения информационной безопасности
  • Анализ отказоустойчивости

 

Solutions

Network Audit

Results

The audit results revealed how the network infrastructure blocks analysed could be modernised and developed. The project was not limited to any specific hardware or brand/vendor. Based on the company’s projected growth, critical points were identified in the project and solutions proposed. The project also involved assessment of the company employees’ skills.

 The preliminary activity enabled actual assessment of the existing network infrastructure and gave an insight into what steps could be required for infrastructure development. The audit results became a great foundation for the strategy of the company’s IT department.

Features

Project specifics:

  • The IT department’s existing hardware came from different manufacturers, which made its administration cumbersome; hence the need for additional staff and longer response times
  • Freeware solution limited realistic analysis of what was going on in the company-wide network infrastructure

Project limitations:

Excluded from the project were:

  • Security assessment for the customer’s IT services as pertains information security (confidentiality, reliability, access levels assurance)
  • Network hardware design and configuration
  • Audit of the customer’s wireless data network (radio monitoring)
  • Analysis of the company’s network traffic
  • Analysis of firewall, intrusion prevention system (IPS), and additional internal security services
  • Analysis of the corporate VoIP system
  • Analysis of the physical layout of hardware and cable systems
  • Documentation of the existing network infrastructure