To: Managed Service Provider

From: Paul Antoniou, Senior IT Advisor, Infranexus

Date: 12/02/24

Introduction

This technology paper provides an overview of the current state of the IT infrastructure and managed
services used by Infranexus. It will also describe the scope of service required for a future state
Infranexus operating model and managed service provider (MSP).

Managed Services

Infranexus technology operation is outsourced to an MSP who manages and assumes the
responsibility of providing technology services across the business. The MSP runs the day to-day
aspects of the IT operations as well as hosting all IT infrastructure within Microsoft public cloud
environments including Microsoft 365 and Microsoft Azure. The MSP hosts backup services in a
separate cloud facility. The services that MSP provides include Software as a service (SAAS), Desktop
as a service (DAAS) and Infrastructure as a service (IAAS). Although virtual devices (including servers)
are managed and kept up to date, most local devices are unmanaged. Citrix is used as the backbone
of the desktop user experience. From a support summary view, over the last 12 months, the business
is averaging 20 tickets per day with more the 50% of those tickets being submitted via email (the rest
via phone). Support includes 1 onsite visit per month and an unlimited amount of support (tickets)
during business hours. Any support that is accrued after hours and is not associated with MSP
responsibility, for example, supporting a 3rd party implementation, is chargeable. All end user onsite
and remote hardware ordering and installation (Laptops, monitors etc) are also managed and
purchased outright through the MSP. The business is also currently reviewing its Cyber Security model
as the incumbent does not provide these services (outsourced to a third party).

Infrastructure Components

Citrix Cloud

Citrix Cloud is a cloud-based platform that enables us to deliver secure and scalable virtual desktops
and applications to our end users. It plays a critical role in ensuring remote access and efficient
management of our IT resources.

Citrix Cloud Connector

The Citrix Cloud Connector is deployed on Azure F4s v2 virtual machines. These machines are equipped
with 4 vCPUs and 8 GB of RAM, making them suitable for handling Citrix Cloud management tasks.
They act as a bridge between our on-premises resources and the Citrix Cloud services.

Page | 1
MSP Briefing Pack (Commercial in Confidence)
Azure Servers

There are five Azure D4s virtual machines with 4 vCPUs and 16 GB of RAM. These servers are
responsible for running various applications and services, including Azure SQL Server (MYOB
AccountRight Premier), Azure Resolve 10 Server, Azure Bluebeam Server and Azure File Server.

Azure SQL Server (MYOB AccountRight Premier v19.5)

Azure SQL Server Standard Edition runs on a B2ms virtual machine with 2 vCPUs and 8 GB of RAM. It
provides an accounting database solution for our business (MYOB AccountRight Premier). It plays a
vital role in managing our financial records and transactions.

Azure Resolve 10 Server

The Azure Resolve 10 Server, running on a B2ms virtual machine, is responsible for handling resolution
services within our business.

Azure File Server

This B2ms virtual machine is used as a file server to store and share important documents and files
across the business.

Azure Desktop Server (Bluebeam Revu Standard x64 20.1)

Bluebeam Revu is used for PDF editing and collaboration. It is installed on a dedicated Citrix
workstation within the business.

Azure Desktop Server (Southern Cross Station) *decommissioned Nov 2023 – Backed Up

An additional Azure B4ms virtual machine is deployed to run security applications for Southern Cross
Station.

Users and Groups

• 178 enabled user accounts (67 member accounts, 112 guest accounts)
• 32 disabled user accounts
• 35 mail-enabled groups and 68 security-enabled groups.

Microsoft 365 (M365)

Our business uses various M365 services, including Exchange Online, SharePoint, Microsoft Teams,
and OneDrive for Business, for email communication, collaboration, and document management.
Although SharePoint is available, it is not widely used throughout the business.

O365 Backup

Acronis Cyber Protect Cloud for Office 365 is used for backup. Daily backup of data is performed and
stored in an offsite cloud backup solution. Daily backups are retained for 7 days, Weekly backups are
retained for 4 weeks, Monthly and annual backups are retained for 7 years.

Page | 2
MSP Briefing Pack (Commercial in Confidence)
Microsoft Defender and Microsoft Lighthouse for Office 365

Defender provides protection against viruses and email threats for our business. Defender is deployed
on all Virtual Desktops and is used for perimeter protection before external emails are delivered to
mailboxes.

Citrix XenDesktop

Citrix XenDesktop is used to deliver virtual desktops and applications to end users.

Microsoft Teams Room Pro

Microsoft Teams Room Pro facilitates efficient online meetings and collaboration, serving the
communication needs of our teams.

Project Plan 3 and Visio Plan 1

Project Plan 3 and Visio Plan 1 are utilized for project management and diagram creation, respectively.

Progen v7.0 (Progenesis)

Progenesis is used for Lease and Property Management.

Devices

Fortigate 80-F Firewall (8 x GE RJ45 ports, 2 x RJ45/SFP shared media WAN ports)

The FortiGate Firewall provides network security and access control to protect our infrastructure from
external threats. This device is housed in the Bourke Street office rack and managed by the MSP.

Internet Connectivity

The Bourke Street office runs a Fibre Network (1000 Mbps) as well as a redundant NBN Internet (100
Mbps download, 40 Mbps upload). (Automatic failover – Configured through Fortigate FW)

Southern Cross Station

There is an Internet link installed at the old office as well as two racks that contain some
communication equipment (routers, switches) that fall under MSP management.

Page | 3
MSP Briefing Pack (Commercial in Confidence)
Adobe Acrobat Pro

Adobe is used throughout the business (27 Licenses) but not all end users have access. Within Citrix,
the default application to open PDF files is Microsoft Edge. MSP believe Adobe Reader causes
problems within the Citrix environment.

Harvest

Cloud based Timesheet tool (Desktop Shortcut on Citrix).

iComm and MSP Supported Yealink Meeting Room Devices (Total of 3)

The Bourke Street office has 3 x meeting rooms (Boardroom, Enhance, Exceed). Each room has a
Yealink CTP18 device that is supported by iComm (Device) and MSP (Network).

USW 24 POE Switch

Bourke Street office has a USW 24 port switch installed in a mid-size rack. The MSP manages the
switch.

Thinkcell

Chart creation Addin (PP, Excel) installed on designated Citrix and local devices within the business.

Applications Inflight

FloQast Vendor and MSP is currently assisting the business in rolling out FloQast in partnership with
the Finance Team.

Azure Applications

Page | 4
MSP Briefing Pack (Commercial in Confidence)
Remote Users

Infranexus does have staff that operate outside of the main office in Victoria, WA and NSW that are
issued with a laptop and access internal systems using Citrix Virtual Desktop. These staff are attached
to an asset and usually have an Infranexus email address and/or their own email address that is asset
aligned.

Examples: username@southerncrossstation.com.au, username@stouthercrossstation.net.au,

username@praeco.com.au, username@assetco.net.au, username@wlg.com.au

Potential Future Enhancements

ERP (NetSuite, Decom MYOB Server), adopt OneDrive, Teams and SharePoint for Records
Management (Decom File Server), Develop Intranet, move Resolve Server to cloud or alternative
(Decom Resolve Server), implementation of a Sustainability and Risk application (Myosh, Protecht),
move Bluebeam Virtual Desktop Server to cloud or alternate (Decom BlueBeam Desktop Server).

Page | 5
MSP Briefing Pack (Commercial in Confidence)
 Page | 6
MSP Briefing Pack (Commercial in Confidence)
MSP Invoice Summary

Subscription Type
Azure
Licensing
O365 Backup
Support
Network
Other Products

Service Name
Azure DNS (Usage)
Backup (Usage)
Bandwidth (Usage)
Log Analytics (Usage)
Storage (Usage)
Virtual Machines (Usage)
Virtual Machines Licenses (Usage)
Virtual Network (Usage)
4005 - DaaS Infrastructure Azure
4010 - Express Route Core Management
4011 - Static IP (IP Address) First 5
4014 - Azure CSP Tier 1 Support

Product Name Quantity

1009 - Exchange Online (Plan 1) 5
1012 - Exchange Online (Plan 2) 2
Microsoft 365 Business Premium 51
Microsoft 365 Business Standard 1
Microsoft Defender for Office 365 (Plan 1) 2
Microsoft Entra ID P1 1
Microsoft Teams Rooms Pro 3
Project Plan 3 5
Visio Plan 1 1
2008 - Windows Remote Desktop Services SAL 40
2010 - Citrix XenDesktop - per user 40

Backup Type Quantity

1007 - Enterprise Backup for Company Email - Exchange 51
1008 - Enterprise Backup for Company Files - SharePoint/OneDrive 1

Page | 7
MSP Briefing Pack (Commercial in Confidence)
Supported Resource Unit Type Quantity
3018 - User Profile Management S2D Cluster Per Desktop User 40
3013 - Remote Support (EXCH User) Per Mailbox User 9
3001 - MS Subscription Admin Services per User Per User 51
3002 - MS Core Directory and Reporting Services Per User 51
3003 - MS Subscription Admin Services per VM Per VM 13
3005 - MS Patch and Monitoring per VM Per VM 13
3014 - Network Monitoring per Link Per Link 2
3015 - Proactive Management of Mailbox Backup Per Mailbox (Backup) 51
3016 - Proactive Management of Sharepoint Data Backup Per Sharepoint (Backup) 1
3017 - Admin/Support Ent Backup per 1GB Proactive Mgmt of Blob Data Backup 0.10 Per 1GB (Backup) 5952
3028 - Identity Protection Alerting Per Subscription 1
3029Z - Remote Support *95 Per Office License 52

Product Name
ACM - CoreNetwork Symmetrical - Monthly Cost - AAPT Fibre400 Layer 2 VLAN & Layer 3 Internet
ACM - Fibre Internet 1000Mbps - LV11, 607 Bourke Street, Melbourne

Product Name
ACM - Local Onsite Security and Remediation - Monthly Visit - Infranexus
ACM - SQL Svr Standard Edition SAL Per User
ACM - Domain Name Budget CRZ Monthly - praeco.com.au, assetco.net.au, infranexus.com.au, infranexusmanagement.com.au
ACM - DNS Hosting - Monthly - assetco.net.au & praeco.com.au
ACM - Adobe Acrobat Pro Licenses x 27
ACM - Project Standard Edition SAL Per User
ACM - DNS Hosting - Per Month - assetco.net.au & praeco.com.au

Page | 8
MSP Briefing Pack (Commercial in Confidence)
Service Name Service Type Resource Name Unit Quantity
Azure DNS Azure DNS Azure DNS - Public 1 3.18
Backup Backup Backup - Azure VM - AU Southeast 1/Month 15.98
Backup Backup Backup - Standard - AU Southeast 1 GB/Month 5936.94
Bandwidth Bandwidth Inter-Region Bandwidth Inter-Region - Inter Continent - Intercontinental 1 GB 6.31
Bandwidth Bandwidth Inter-Region Bandwidth Inter-Region - Intra Continent - Oceania 1 GB 16
Log Analytics Log Analytics Log Analytics - Pay-as-you-go - AU Southeast 1 GB 10.24
Storage Blob Storage Blob Storage - Hot LRS - AU Southeast 10K 983.06
Storage Standard HDD Managed Disks Standard HDD Managed Disks - S10 LRS - AU Southeast 1/Month 9.41
Storage Standard SSD Managed Disks Standard SSD Managed Disks - E10 LRS - AU Southeast 1/Month 9.15
Storage Standard Page Blob v2 Standard Page Blob v2 - LRS - AU Southeast 1 GB/Month 228.79
Storage Standard HDD Managed Disks Standard HDD Managed Disks - S4 LRS 10K 5705.95
Storage Standard SSD Managed Disks Standard SSD Managed Disks - E4 LRS 10K 24249.57
Storage Standard SSD Managed Disks Standard SSD Managed Disks - Snapshots LRS - AU Southeast 1 GB/Month 2.14
Storage Standard HDD Managed Disks Standard HDD Managed Disks - Snapshots LRS - AU Southeast 1 GB/Month 417.87
Storage Standard HDD Managed Disks Standard HDD Managed Disks - S20 LRS - AU Southeast 1/Month 2.06
Storage Tables Tables - LRS 10K 0.91
Storage Standard HDD Managed Disks Standard HDD Managed Disks - S6 LRS - AU Southeast 1/Month 5.08
Storage Premium Files Premium Files - LRS - AU Southeast 1 GB/Month 254.3
Storage Standard HDD Managed Disks Standard HDD Managed Disks - S30 LRS - AU Southeast 1/Month 4.11
Storage Files Files - LRS 10K 7724.57
Storage Standard SSD Managed Disks Standard SSD Managed Disks - E6 LRS - AU Southeast 1/Month 1.02
Storage Files Files - LRS - AU Southeast 1 GB/Month 605.46
Storage Standard HDD Managed Disks Standard HDD Managed Disks - S4 LRS - AU Southeast 1/Month 0.6
Storage Premium SSD Managed Disks Premium SSD Managed Disks - P10 - AU Southeast 1/Month 0.01
Storage Tables Tables - LRS - AU Southeast 1 GB/Month 0
Virtual Machines Virtual Machines Dv3 Series Virtual Machines Dv3 Series - D4 v3 - AU Southeast 1 Hour 4439.32
Virtual Machines Dv3/DSv3 Series D4 v3/D4s v3 1 Hour 4308.19
Virtual Machines Dv3/DSv3 Series D2 v3/D2s v3 1 Hour 263.62
Virtual Machines BS Series B2ms 1 Hour 2222.92
Virtual Machines BS Series B4ms 1 Hour 738.39
Virtual Machines Virtual Machines Dv3 Series Windows Virtual Machines Dv3 Series Windows - D4 v3 - AU Southeast 1 Hour 741.12
Virtual Machines Virtual Machines Dv3 Series Virtual Machines Dv3 Series - D2 v3 - AU Southeast 1 Hour 264.62
Virtual Machines Virtual Machines BS Series Virtual Machines BS Series - B4ms - AU Southeast 1 Hour 739.97
Virtual Machines Virtual Machines FSv2 Series Windows Virtual Machines FSv2 Series Windows - F4s v2 - AU Southeast 1 Hour 742.98
Virtual Machines Licenses Windows Server Windows Server - 4 vCPU VM 1 Hour 4449.82
Virtual Machines Licenses Windows Server Burst Windows Server Burst - 4 vCPU VM 1 Hour 741.97
Virtual Machines Licenses Windows Server Burst Windows Server Burst - 2 vCPU VM 1 Hour 3.12
Virtual Machines Licenses Windows Server Windows Server - 2 vCPU VM 1 Hour 3.37

Page | 9
MSP Briefing Pack (Commercial in Confidence)
File Server Data Storage

WLG Backup (Infranexus have a subsidiary called WLG)

WLG backup their data into the Azure File Server. G: is dedicated to this backup (SFTP server running on the file server).

Page | 10
MSP Briefing Pack (Commercial in Confidence)
 Page | 11
MSP Briefing Pack (Commercial in Confidence)
Virtual Desktop 41-43

Page | 12
MSP Briefing Pack (Commercial in Confidence)
Virtual Desktop 11 (WS2008 R2)

Page | 13
MSP Briefing Pack (Commercial in Confidence)
 Page | 14
MSP Briefing Pack (Commercial in Confidence)
Virtual Desktop Blue Beam

Page | 15
MSP Briefing Pack (Commercial in Confidence)
DNS Zone Summary

Page | 16
MSP Briefing Pack (Commercial in Confidence)
 Page | 17
MSP Briefing Pack (Commercial in Confidence)
 Page | 18
MSP Briefing Pack (Commercial in Confidence)
 Page | 19
MSP Briefing Pack (Commercial in Confidence)