← Back to projects

Projects

Perimeter, Mail and Monitoring at ČMZRB

  • design and simulation of dual Internet connectivity with BGP (2011),
  • Cisco ASA firewalls in a failover pair: upgrades, replacement with new models (2017), DMZ, OWA publishing,
  • AnyConnect remote access with certificate authentication and CRL validation; during COVID in 2020, rapid deployment of a backup VPN gateway on Cisco ASAv,
  • replacement of perimeter routers and DMZ switches (2020), LAN upgrades and hardening (DHCP snooping, port-security, TACACS+),
  • mail gateways in DMZ (Postfix, Amavisd-new), mail system audit, DNS,
  • monitoring in Nagios and NagVis including AS/400, disk arrays and applications, custom plugins and a web service for passing data to the iTop CMDB.