Network Engineer
Cisco
Total years of experience :14 years, 1 Months
Roles and responsibilities \[FEDnet Project\]
- Configuration and Administration of Cisco ASA with Series ASA-5585 using CSM
- Configuration and Management of Cisco ESA and WSA using SMA for products C680/S680
- Administration of Source-Fire using Firesight Management system, Citrix load balancer (SDx, MPx)
- Implementation and Administration of Routing Protocols and switching Technologies
- Management using Prime Infrastructure, Audit for existing network for any security issues.
- Implementing changes and resolving incidents related to the network and documenting using HP service Manager
- Troubleshooting problem cases and providing resolution to the end customer.
- Design and Administration of FireEye EX (Email), NX (Web), HX (Host based)
Troubleshooting Palo Alto Firewalls issues in the network and providing configuration help to clients.
- Implementation and Migration from Juniper, Fortinet, Stonegate, ASA to PaloAlto firewall.
- Conducting POC at various business opportunities.
- Handing issues with Global protect, User-id agent, High Availability, Panorama.
- Configuration of IPSEC tunnels with and without proxy id, Configuring cross VPN with Juniper, ASA.
- Implementation of HIP profiles, Url-filtering, Threat filtering, Content filtering. Decryption using certificates.
- Managing and supporting routing protocols.
- Configuration of Palo Alto firewalls with Vwire mode, layer 3 interface, layers 2 interface, tap interface.
- Upgrading Palo alto firewalls.
- Configuring logging on the firewall and pushing the logs to the panorama and managing devices using Panaroma.
- Generating reports for the user -activity and Bandwidth usage.
- Configuration of Inbound Nat, Pat.
- Troubleshooting the firewall using Flow-basic Flow App to identify the flow of traffic through the firewall.
- Worked on PA 200, PA 500, PA 2020, PA 3020, PA 5020, PA 7050, PAN OS 4.x, 5.x 6.x, 7.x
- Cisco ISE with Wired/Wireless, MAB, Posture Validation, Profiling, Local web authentication, Wired Central web authentication, Wireless CWA.
-Configuration and Administration of Cisco ASA with Series ASA-5506/ ASA-5512/ASA-5516/ ASA-5525 with firepower services, Firesight Management
-Migration of Fortigate, Cisco ASA, Stonegate to PaloAlto Firewall.
-Managing the firewall using Panorama, Sync and push the panorama settings to the firewall.
-Implementation and Administration of Cisco ISE with Wired/Wireless with DACL and Vlan Assignment.
-Administration of Cisco ACS to manage allowing/deny access to the device along with authorization and Accounting for the accessed device.
-Migration of legacy Cisco ACS to Cisco ACS 5.8
-Configuration and Maintenance of Allied Telesis Switches
The Major Migration Project Assisted For PaloAlto: Amlak Finance, Dubai Properties Group, Dubai Courts, ADJD, Mena-Corp, Lamprell, Netcetra
ASA 5525 with firepower implementation in University of central Punjab.
Cisco ISE Implementation in IFFCO (Sharjah)
Allied Telesis Design and Implementation (Sharjah Central Prison)
-Supporting a 24*7 Network of clients for Palo Alto Firewalls
-Troubleshooting Palo Alto Firewalls issues in the network and providing configuration help to clients.
-Handing issues with Global protect, User-id agent, High Availability, Panorama.
-Configuration of ipsec tunnels with and without proxy id, Configuring cross vpn with Juniper, ASA, Checkpoint.
-Implementation of HIP profiles, Url filtering, Threat filtering, Content filtering. Decryption using certificates.
-Provided Corporate training to the Employees for cisco products
- Maintained 24x7 connectivity and security with the proper implementation of NAT translations and access lists on Cisco ASA firewall, enabling the ability to protect confidential data from outside sources.
-Encrypted each branch location connectivity with Remote - IPSec VPN using Cisco ASA 5550 with user identity being secured with authentication from Cisco ACS.
-Monitoring of the Network infrastructure and servers through Solarwinds using SNMP.
-Performed an analysis of security threats and created a network security policy that addressed the needs of the company, our clients and partners.
-Analyzed business requirements in order to plan and implement the most adequate solutions based on cost, time and efficiency.
-Instrumental in onsite technical support and installation of network devices like Cisco Network Devices,
3 Year Bachelors degree in Computer Application from Kashmir University