Overview
Project Background
An US federal agency, named Federal Agency X (FAX), employed a hybrid cloud model, leveraging both on-premises infrastructure and multiple public cloud providers. As the agency's services expanded, they encountered significant network latency and performance issues, affecting their daily operations and service delivery to the public.
Challenge
The Problem
- Network congestion leading to latency and packet loss.
- Inefficient routing between on-premises and public cloud infrastructures.
- Limited visibility into network traffic patterns.
- Complex network management due to multiple public cloud providers.
Solutions
What We Delivered
Network Assessment
- Comprehensive current state architecture
- Performance analysis report
- Tooling and process evaluation
- Backlog of prioritized actionable items to implemented.
Multi-Cloud Connectivity
- Express Route circuit in Active-Active Mode
- Common Nat Pool with Availability Zone ExpressRoute Virtual Gateways
- Tooling and process evaluation
- Backlog of prioritized actionable items to implemented.
SD-WAN Implementation
- Direct Interconnect model with NVA-in-VWAN Hub for Azure
- Configure Cisco Cloud onramp for Multi-Cloud design, extending the existing Cisco SD-WAN Fabric
Traffic Optimization
- Implement use of BGP communities with AS PATH prepending.
- Assigning high weight to local traffic
- Setting up Alerts and Monitoring for abnormal patterns or network behavior
Network Monitoring and Analytics
- Setup RMON and Cisco Network Assistance
- Configured log aggregation from Cisco Devices to Splunk
- Created advanced monitoring configuration leveraging Nagios and PRTG
Security Enhancements
- Implemented Cisco Zero Trust framework with NIST 800-207 compliance
- Configured Cisco Talos for Threat detection.
- Ensured Network and cloud security by protecting all network resources on-premises and in cloud and ensuring secure access for all connecting users.
Outcomes
Results & Impact
- Reduced Latency: With optimized routes and dedicated connections, FAX observed an 80% reduction in network latency.
- Enhanced Security: The introduction of advanced security measures resulted in a safer environment, reducing the risks of data breaches.
- Cost Savings: Due to optimized data flow and reduced redundancy, there was a 60% reduction in data transmission costs.
- Increased Visibility: The analytics tools offered actionable insights, allowing FAX to foresee potential issues and mitigate them proactively.
- Simplified Management: The use of SD-WAN simplified the management of a multi-cloud environment, making it easier for FAX to adopt new technologies in the future.
Conclusion
Closing Summary
Zion Cloud Solutions successfully revamped FAX's hybrid cloud network, resolving performance issues, enhancing security, and ensuring a smoother operational flow. The improvements not only enhanced the agency's efficiency but also strengthened its foundation for future technological endeavors.