Projects

Perimeter, mail and monitoring for ČMZRB

2011–2022

For Českomoravská záruční a rozvojová banka I spent eleven years managing firewalls, VPN, mail gateways and a monitoring system.

design and simulation of dual Internet connectivity with BGP (2011),
Cisco ASA firewalls in a failover pair: upgrades, replacement with new models (2017), DMZ, OWA publishing,
AnyConnect remote access with certificate authentication and CRL checking; during the Covid pandemic in 2020, rapid deployment of a standby VPN gateway on Cisco ASAv,
replacement of perimeter routers and DMZ switches (2020), LAN upgrades and hardening (DHCP snooping, port-security, TACACS+),
mail gateways in the DMZ (Postfix, Amavisd-new), mail system audit, DNS,
monitoring in Nagios and NagVis covering AS/400, disk arrays and applications, custom plugins and a web service for feeding data into the iTop CMDB.