Enterprise/campus network solutions

Project background

Siemens Incubation Industrial Park: LANCE Times is a home intelligent manufacturing industrial park in Zhongshan Torch District, China. LANCE Times has invested 1.194 billion yuan to build a modern "cloud factory" that is digitally empowered. It will also work with Siemens to jointly build a manufacturing digital empowerment center. We need to build a unified communication platform that integrates basic platforms such as voice calls, instant messaging, video conferencing, and optical networks. We also need to establish a customer service center that integrates communication and integrates multi-channel customer inquiries and feedback through telephone, online customer service, and social media.

Project Requirements

1. Simple operation and maintenance

10+types of enterprise IT equipment, with high maintenance difficulty and even small scenarios without professional IT personnel, requiring the ability to operate and maintain simple cloud management

2. Brand image

Provide personalized, customized, and integrated unified solutions for IT needs of small and medium-sized enterprises

3. Remote networking

Traditional enterprise discrete scenarios require solutions for IT operation and maintenance management, as well as efficient unified office, instant messaging, OA synchronization, CRM, and other interoperability

4. High speed and stable network

A stable high bandwidth network that can seamlessly roam without dead corners or disconnections

5. Internet behavior control

Prohibit access to illegal websites, and also prohibit employees from accessing non work related websites such as games and entertainment during working hours

6. Internet behavior control

Portal authentication allows employees to access DingTalk/Enterprise WeChat with one click real name authentication, and their permissions are automatically synchronized with the organizational structure; Visitors are guaranteed and invited by employees, with real name associated with responsible persons. Visitor behavior can be traced and controlled, with full authentication and retention of online logs for 6 months, meeting compliance audit and security traceability requirements

Network topology

Installation layout

1. Site installation engineering drawing

2. Field installation test diagram

Highlights of the Solution

Internet behavior management

• Intelligent flow control recognition, prohibit employees from using unrelated applications, focus on work

Multi line superposition

• Support multiple external line access, load balancing, maximize bandwidth investment savings, and support multiple operator access

VLAN division

• Support flexible VLAN partitioning to ensure stable operation of multiple services

Easy to expand

• Good scalability is required, which can be easily expanded in the later stage to protect investment costs

EAAS Cloud Management

• Scan code to start, devices can be managed in the cloud, reducing IT personnel investment costs

Firewall Network Security Protection

• Deploy next-generation firewalls (integrated with IPS/AV/AWF) to accurately and real-time identify and block network layer threats such as DDoS attacks, port scanning, and abnormal traffic, ensuring stable operation of core business

User value

Wi-Fi 6 seamless roaming

• 3000Mbps Wi Fi 6 ceiling mounted AP smart antenna with strong signal coverage; Exclusive intelligent roaming technology, allowing terminals to roam freely without perception, and employees to work on the go without disconnection

Portal authentication

• Customize portal authentication interface to enhance brand image

Internal and external network isolation

• By setting different VLANs with different SSIDs, the internal and external networks of the enterprise can be isolated, and account speed limits can ensure the security and stability of the enterprise network

Real name authentication log retention, meeting the requirements of Equal Protection 2.0

• Portal authentication is integrated internally with DingTalk/Enterprise WeChat address book, enabling one click real name internet access, automatic transfer of power upon entry and exit, and precise traceability of behavior; Log retention for 6 months, meeting the requirements of Quality Assurance 2.0 and compliance auditing

Corporate Image

• Unified switchboard number and personalized welcome message for incoming calls, showcasing the corporate brand image

Centralized monitoring and control

• SD-WAN+NVR， Monitoring from different branch offices is transmitted back to the headquarters for centralized control

Multiple security protection systems ensure enterprise information security

• Integrating IPS, antivirus WAF、 A network firewall that integrates anti ransomware and anti phishing measures comprehensively resists various threats from the network layer to the application layer, protecting sensitive data of enterprises from theft, encryption, and destruction. It is a solid defense line to ensure information security

Equipment selection