Projects
Perimeter, Mail and Monitoring at ČMZRB
2011–2022
- design and simulation of dual Internet connectivity with BGP (2011),
- Cisco ASA firewalls in a failover pair: upgrades, replacement with new models (2017), DMZ, OWA publishing,
- AnyConnect remote access with certificate authentication and CRL validation; during COVID in 2020, rapid deployment of a backup VPN gateway on Cisco ASAv,
- replacement of perimeter routers and DMZ switches (2020), LAN upgrades and hardening (DHCP snooping, port-security, TACACS+),
- mail gateways in DMZ (Postfix, Amavisd-new), mail system audit, DNS,
- monitoring in Nagios and NagVis including AS/400, disk arrays and applications, custom plugins and a web service for passing data to the iTop CMDB.