Network security, from the operations side.
I am growing from network operations into network security. This page separates what I do in production from what I am still building in labs.
What I have actually done.
Fortinet firewalls
Support and troubleshooting of Fortinet firewalls in enterprise environments.
802.1X, DHCP snooping, port security
Implemented at Mando Automotive on enterprise switching.
Captive portal and RADIUS authentication
Implemented and maintained for HSIA networks with 500+ daily users.
Network access troubleshooting
NAT, ACLs, routing and firewall behaviour across LAN, WAN and WLAN.
Incident evidence and reporting
Root-cause analysis written up chronologically for enterprise clients.
Certified.
Cisco Certified Network Associate
Issuer: Cisco
Microsoft Certified Solutions Expert
Issuer: Microsoft
VPN and security answers.
How does a site-to-site IPsec VPN work?
Read the answerVPN & securityWhat is the difference between IKE Phase 1 and Phase 2?
Read the answerVPN & securityThe VPN tunnel is up but users cannot reach the remote LAN. What do you check?
Read the answerVPN & securityHow do you troubleshoot a FortiGate IPsec VPN?
Read the answerVPN & securityWhat is the difference between a site-to-site VPN and a remote-access VPN?
Read the answerVPN & securityHow do you troubleshoot traffic that a firewall is blocking?
Read the answerLabs I am building.
Not finished, and labelled as such. Each gets a write-up when it has evidence.
Secure guest Wi-Fi segmentation
Design a guest network that is isolated from administrative networks but still has the internet access it needs.
Deliverables: Network diagram, IP plan, firewall rules, connectivity test results
Firewall policy review
Review rules in a lab, find overly permissive access, restrict what is unnecessary and verify what is allowed and denied.
Deliverables: Before-and-after policy design, test matrix, findings
Network traffic analysis with Wireshark
Analyze a public training capture for DNS failures, TCP problems and retransmissions.
Deliverables: Display filters, findings, incident report
Hiring for network security?
I'm interested in Network Security Engineer roles. The quickest way to reach me is LinkedIn.