This thesis explores the design and implementation of a secure access solution for external workers connecting to the corporate network of Racom. The study begins with a detailed analysis of the current network environment, focusing on VLAN segmentation and VPN connection options. The aim of this work is to propose a secure environment for external workers, enabling them to access selected corporate resources without requiring dedicated Ethernet connections.
The implementation utilizes the 802.1X protocol for user authentication and authorization, which enables dynamic assignment to appropriate VLANs based on Active Directory information. This approach provides a high level of security with the flexibility to access from any port in the network.
For monitoring external worker activities, a comprehensive system was implemented based on collecting and analyzing logs from the Sophos XG firewall and SNMP monitoring of the network infrastructure. The monitoring solution uses a combination of rsyslog and Zabbix tools for centralized collection, filtering, and analysis of security events.
The entire system was tested in a controlled environment, which demonstrated its effectiveness in detecting security incidents and automatically responding to potential threats. The implemented monitoring enables real-time tracking of external worker activities through a specialized dashboard.
The results show that the combination of the 802.1X protocol and a comprehensive monitoring system significantly enhances the security of network infrastructure while maintaining flexibility for external worker connections. The proposed solution provides an effective tool for managing access to corporate resources and proactive detection of security threats.