Asher Khan

Project 1:
Managing security assessment project duration 3 months, Appliances FortiGate 601E, Forti proxy, ISE, Cisco WLC 3800.
Deployed Voicemail service for Cisco C2921.
Security assessment with Qualys, Tenable.

Project 2:
Provide professional services for semi government customer.
Managing ISE fine tuning with version 2.7
ISE guest profiling for self-registration with authorization, authentication policy.
ISE authentication, authorization policy fine tuning for dot1x authentication wired users.
Implementation radius server for 9300 Cisco switches on all end users for dot1x authentication.
Proxy traffic fine tuning for Cisco 3500 WLC traffic Wi-Fi end users.

Project 3:

Migration of Cisco ASA 5545 to Fortigate 201E with three branches separately.
Managing policies from inside to outside traffic.
Managing VPN tunnels to cloud servers.

Project 4:
Migration of Palo Alto 3450 to DR site.
Implementation of Qualys installation scanner,
cloud agent, patch management.
Finding Gaps and provide security recommendations.
Fixing Gaps for Re-assessment

Managing security operations below security :

NAC
DLP
Mail Security
Firewalls
Siem
DDOS
EMS
Incident response, Alerts
Incident events investigation

Hands on Skills:
 Source Fire : 8530, 8920
 Palo Alto :PA-2050
 Integrated Service Routers : - 18xx, 28xx, 2811, 8xx
 Cisco Catalyst Switches: - 650x, 450x, 3725, 3750, 3550, 3560.
 Fortinet Firewalls :60E, 601E
 Microsoft Active Directory
 ASA 5516, 5506
 Trendmicro
 ISE
 AMP(FireAMP)
 DNAC
 WSA
 Cisco ASA 5506, 5516
 NGIPS
 FTD
 Stealthwatch

 Policies consisting of VLAN switching through SNMP, applying downloadable ACLs through Cisco ISE and configuring Standard and Extended ACLs locally.
 Implementing RADIUS authentication/authorization on Cisco ISE for central management of all network devices across the organization

 Integrating FTD, NGIPS into FMC, and integration of Fire AMP cloud on FMC
 ASA, configured failover, cluster, multiple context
 Managing Network infrastructure of fourty Cisco Catalyst switches 2950, 2960, 3750& two Cisco core switches 4507R +E.
 Managing OPManager to monitor network performance & backups.
 Managing HA firewall Fortinet 601e from core to ISP.

- Monitoring day to day operations standalone firewall Fortigate core to ISP.
- Managing trendmicro for endpoint security.
-Managing Network printers & servers through ---YQ.
- Updating network diagram as per requirement to enhance the network.
- Configuring & Managing IP Phones Matrix through GUi.
- Managing fortinet 500D day to day operations.
- Working for future projects to secure current environment.

Managing overall network security infrastructure including below technologies
Cisco switches routers, Fortigate firewalls, Symantec manager for endpoint securities

Managing senior team project with documentation LLD and HLD
Administration of network appliances
Site surveys for network projects
Day to Day operations