Ensuring a reliable and secure information exchange between mobile devices and application servers. To solve this task, we upgraded the isolated wireless infrastructure for production systems at a regional enterprise as well as secure transport communications channel between MSPD Holding and application servers located at a corporate center. In addition, we made the wireless infrastructure for production systems (WiFi WMS) compliant with the target vision as part of the unified standard of the enterprise for similar systems.

The project scope comprised upgrading the wireless infrastructure for SAP production systems. The main goal of the project was to ensure reliable and secure information exchange between mobile devices and application servers.

The Customer's problems and needs

• Legacy WLAN equipment
• No full Wi-Fi coverage of warehouse areas
• Absence of failsafe WLAN systems
• Need to deploy security systems to comply with corporate policies

Tasks

• Ensure seamless roaming within warehouse areas
• Improve the WLAN system to comply with the corporate security standard

Solution

Upgrading the wireless infrastructure for production systems using Cisco, Dell, Lenovo, Rittal equipment as well as open-source software tools.

We performed the following work within the scope of the project:

• Full-scale design of a failsafe, secure WLAN
• Project documentation development
• Operating documentation development
• Radio planning of the Customer's industrial warehouses 
• Creating a failsafe cluster of RADIUS servers based on Cisco ISE
• Implementing authentication on the EAP-TLS basis using digital security certificates
• Creating an isolated secure LAN segment using a cluster of new generation firewalls—Cisco ASA with Firepower
• Deployment of the WLAN monitoring system based on Cisco Prime
• Creating a system for displaying the location of client devices on industrial warehouse map based on Cisco CMX
• Deployment of a system for collecting, displaying, and storing information security alerts on the basis of ELK open source solution (Elasticsearch, Logstash, Kibana)
• Creating a failsafe cluster of WLAN controllers on the basis of Cisco WLC
• Deployment of the highly available cluster of reverse-proxy servers based on the open-source Nginx solution
• Migration to the upgraded WLAN without interrupting business-critical services
• Construction and mounting work related to WLAN upgrade

Benefits for the Customer

• A new system built in full compliance with the Customer's corporate standards
• Upgrade of the legacy equipment no longer supported by its manufacturer
• The problem of Wi-Fi coverage in industrial warehouses areas removed