Download Case Study (.pdf, 93 KB)

Solution:
At its new polyclinic in Prievidza, Unipharma has implemented a converged LAN/WLAN network which distributes data, voice and video. The solution includes server infrastructure and a virtual desktop system. Implemented by TEMPEST, the solution also covers central infrastructure administration, user mobility, secure access to network resources and services, as well as remote access management.

Supplier:
TEMPEST, a. s.

Products:

LAN infrastructure elements:

• Cisco Catalyst 6509E
• Cisco Catalyst 4507R
• Cisco Catalyst 4948G
• Cisco Catalyst 3560G
• Cisco ASA 5520 firewalls + AIP-SSM-10

Server infrastructure and desktops:

• HP ProLiant 580
• HP ProLiant 380
• HP EVA
• VMware ESX server
• Symantec Veritas Netbackup 6.5
• SunRay 2, FS
• RayMote W*Admin 4.0

IP telephony:

• Cisco CallManager
• Cisco Unity Connection 2.1
• Cisco 2821 s 2 x Fast-Ethernet, 2 x T1/E1
• Cisco VG224, 2 x Fast-Ethernet, 24 x FXS ports with RJ-21

Cameras:

• AXIS 210 IP cameras

Key benefits:

• convergence solution with centralised management of infrastructure for data, voice and video
• fast secure access to patient data and examination results
• increased user mobility affording totally convenient access to data, applications and voice services
• high level of security for data, patients and facilities

Key requirements:

• multi-level, redundant, secure LAN and WLAN infrastructure for 200 terminal stations
• convergence of data, voice and video with infrastructure scaling options
• secure and high availability of server infrastructure, backup
• secure virtual desktop environment
• IP telephony system for 200 users
• camera monitoring system
• central infrastructure administration
• client mobility

Unipharma is one of the largest pharmaceutical companies in Slovakia. Its principal line of business is wholesale trade in pharmaceutical products, therapeutic cosmetics, medical supplies and equipment. The company also operates hospitals in several cities. Not long ago the company decided to build a medical-diagnostic centre in Prievidza, where its headquarters are located, equipped with digital instrumentation technology. Due to its strategic significance, the size of the investment and the need for problem-free operations, the investor wanted to have reliably designed infrastructure, a secure internet connection, voice communications and monitoring system.

Assignment

The specification for the requested infrastructure solution at the Medical Centre in Prievidza had several levels. The polyclinic needed to possess a LAN infrastructure with secure internet connection, server infrastructure, desktop environment, IP telephony system and camera system. The solution must be centrally administered, open and tailored for trouble-free upgrades of its respective parts.

Multi-layer hierarchy and infrastructure redundancy
The customer requested a multi-layered solution. The specification was based on a multi-level hierarchy and redundancy for key LAN infrastructure elements. For the wireless LAN infrastructure, TEMPEST received the request for a fluid link transition between WLAN access points and a centralised management system. The basic requirements for the internet connection included security, high availability, the ability to create multiple DMZs and remote access with authentication, authorisation and accounting. The basic requirements for the server and desktop infrastructure were high availability, high performance, scalability, backup, security and simple administration.

Converged data, voice and video
The scope of work also included the establishment of a reliable IP telephone system scaled to a user population of approximately 200 end-users. Each user must also have a voicemail box and other services available. The solution also has to include a CCTV camera system to record the movement of people in and around the building. The system must be part of the new infrastructure, and centrally administered.

Design and implementation of infrastructure, IP telephony and monitoring system

LAN infrastructure: security, convergence and high availability
“The LAN network in the Medical Centre in Prievidza was implemented by TEMPEST as a secure, converged and redundant infrastructure able to securely carry data, voice and video,” said Radoslav Ďuriška, Sales Manager for TEMPEST. The LAN network is split into two layers and a number of distribution blocks (modules). The access layer is home to high-performance switches with redundant power and fifth-generation “control units”. The backbone layer is made up of two high-performance switches, both equipped with “Firewall Service Modules” (FWSMs). The firewall controls traffic between compartments according to set rules. The other parts of the LAN network can be divided into three modules. The server farm module uses two switches with redundant power. The voice module also uses two switches, and two voice gateways. The switches are connected to the firewalls and voice gateways, which provide for external call routing. The internet module consists of two firewalls linked into a cluster. Both are equipped with AIP-SSM-10 modules, which provide IPS functionality. The proposal for the WLAN architecture was preceded by a site survey for radio propagation. The survey firmly determined the positioning of the wireless access points. “The main objective of the Wi-Fi solution is to provide full user connectivity to the information systems, including voice and data services, while preserving mobility and security throughout the building”, stated Roman Karak, Unipharma’s information technology director.

Virtual server infrastructure and desktops
The server infrastructure is built using virtualisation software from VMware for the consolidation and management of systems in mission-critical environments. Physically, two HP servers connected to a disk array are used. Both servers are integrated with a virtual centre installed on another server. Three virtual servers providing the individual services run on the physical servers. These are configured in duplicate for reasons of high availability of network services. Symantec Veritas Netbackup is used for backup. The virtual desktop infrastructure at the Medical Centre is based on ultra-thin Sun Ray clients from Sun Microsystems together with RayMote W*Admin enterprise infrastructure management software developed by TEMPEST.

IP telephony solution concept
Before implementing the IP telephony solution itself, it was necessary to set aside a separate VLAN and IP address range and to set the required quality of service (QoS) for IP telephony. The IP telephony solution includes four elements: CallManager, the voice gateway, Unity Connection (central voicemail) and the IP phones themselves. Cisco CallManager runs on two servers, which are linked together in a cluster. Cisco Unity Connection 2.1 is installed on the servers and acts as an extension to Cisco CallManager for voice messaging. The connection of IP phones to the PSTN is handled by the voice gateway, through which all calls to the PSTN are routed. In selecting the equipment, TEMPEST relied on a proven brand, Cisco, the world leader in the field of voice, video and data transmission. Cisco offers a range of hardware IP phones, conferencing stations and software IP phones. “The IP phones have incomparably more functions than classic analog or digital telephones. The range’s higher-end models have graphic displays where one can browse the corporate telephone directories as well as arbitrary information produced by the firm’s applications servers,” said Peter Čambala, account manager for Cisco Slovakia.

Monitoring system
Another component of the solution is a system of CCTV cameras in and around the building. TEMPEST implemented the solution on an IP platform, whereby an identical principle was also applied for the new warehouse building in Bojnice. “The advantage of this compared to traditional analogue solutions is the possibility to work directly with the digital signal, which enables further processing of the video as well as its recording and storage”, Ďuriška noted. TEMPEST decided to utilise AXIS 210 IP cameras. The system also includes a video server and a repository for video sequences captured by the cameras.

Summary – mutual satisfaction

All of the solutions mentioned were fully implemented by TEMPEST staff in mid-2008. So far, neither employees nor IT staff at the polyclinic – which has already opened to the public – have reported any deficiencies with the infrastructure. TEMPEST put a 25-member team on the project. “The project was extremely challenging technically. The key to managing it successfully lay in the team’s commitment and in the above-standard collaboration of qualified technologists on both sides”, says Vladimír Slovák, project manager for TEMPEST. “In applying the individual solutions, we also had to consider the polyclinic’s use of digital technology – as an example, how it is one of three healthcare facilities in Slovakia using nuclear magnetic resonance imaging. Data from the digital instruments is stored in a central data warehouse, which besides capacity and availability must also satisfy demanding security requirements. So in terms of security, TEMPEST arranged not just the perimeter, but also data access for internal doctors. The solution is also designed to allow other healthcare institutions to access data, though this portion of the project will be addressed at a later date.

“On a European scale, Unipharma’s Medical Centre building is a state-of-the-art facility, both in terms of implemented information technology and the medical equipment that is used. From the standpoint of those who worked on the project, I can say that the collaboration with TEMPEST was constructive, effective and successful. So was the input of the customer team that worked together with TEMPEST on the solution and which in no small way contributed to the successful completion of the project”, said Roman Karak, Unipharma’s director of information technology, summarising this successful project.