Firewall Freelance Jobs

I have set up an Opnsense firewall but need to further optimize its functionality. To make best advantage of the features it offers, I require an expert in Opnsense firewalls who can guide me on how to leverage its security features.

Ideal Skills:
-Expertise in Opnsense firewall operation and features.
-Excellent knowledge in firewall security management.

Job Details:
- The firewall has one network interface installed.
- The task does not require any additional setup or installation.
- The job is ambiguous on implementing specific security features as this will be determined after consultation with the chosen applicant.
- The freelancer will advise on best practices for the security features to be leveraged, majorly focusing on those provided by Opnsense.
- The specialization should ideally include Intrusion Detection and Prevention, VPNs and Traffic Shaping.

Skills: Linux, Web Security, Computer Security, Network Administration, Internet Security

We are a small professional association with data from surveys run over the last 10 years. We'd like to make this data accessible to our members so that they can manipulate it in a visually pleasing way. We'd like to upload the survey data into one place so that members can create their own dashboards and reports without needing help from us, and according to permissions that we set. We'd like them to be able to create reports based on filters that they specify, and create trend graphs.

Optimally, this project would be done in Looker Studio and branded to our organization (www.LDPconnect.com). We'd also like everything to be accessible only from behind a firewall in our website so that only logged in members can use it.

Can you help?

I'm in need of an IT support professional or team who can assist with network setup and troubleshooting at the Pullman Orchard Hotel in Singapore.

Key Responsibilities:
- Network Setup: Primarily focusing on the configuration and optimization of the hotel's network.
- Troubleshooting: Addressing any network-related issues that may arise.

Specific Areas of Focus:
- Firewall and Security Settings: Ensuring the hotel's network is secure and protected against potential threats.

Please note, at this stage, I'm uncertain whether ongoing monitoring and maintenance for the firewall and security settings will be required.

Ideal Skills and Experience:
- Extensive experience in network setup and troubleshooting.
- Proficient in configuring firewall and security settings.
- Prior experience providing IT support in a hotel or similar environment would be highly advantageous.

I look forward to receiving your bids.

Skills: System Admin, Computer Security, Cisco, Network Administration, Internet Security

I'm looking for a highly skilled Azure Network engineer to assist with setting up and configuring our network security. You'll be tasked to undertake the following responsibilities:

- Network Configuration: This will involve the setup and management of VPNs and IP addresses, as well as work on subnet configurations.

- Firewall Setup: While the specifics are yet to be defined, you will be responsible for setting up our firewalls to provide maximum security.

Please note, the details of any specific firewall rules are still under consideration and will be shared once they have been finalised.

Ideal skills for this project include in-depth knowledge of Azure Networks, experience with VPN and IP address setups, subnet configurations and a deep understanding of firewall security measures. A sharp eye for detail, excellent problem-solving skills, and commitment to high-level security are also crucial for this role.

Skills: System Admin, Computer Security, Azure, Windows Server, Network Administration

I need assistance Cisco side to connect a VPN between a Cisco 1941 ISR to a Fortinet Firewall.

I have all of the details from the Fortinet side but am struggling to get the tunnel up on the Cisco side.

Many thanks, Richard :-)

Hello, I am looking to develop a full security as a service plugin VERY similar to malcare (actually if it is possible to literally replicate it's functionality, that'd be great).
Review video: https://streamable.com/q14zrg

The idea is to have a plugin and an online service, that would allow WordPress users to scan their site for all known malware, clear their site with one click and restore core wp files, along with options for continous protection such as firewall, daily scans, etc.

Obviously third party services should be used for the functionality (patchstack, others..) and a full understanding and development plan should be presented. Need to be fast and we should be able to cut corners/whitelabel existing services as much as possible.

We are an Australian based MSP and Cloud company in the AEST time zone. Must be able to work Eastern Australian times between 8:30am – 17:30pm Monday – Friday.

Must have excellent verbal & written skills in English and also speak English with little to no accent. You will be speaking to our clients on daily basis so must be confident & comfortable with English.

The Support Role is focused on the day to day support of our clients Microsoft365 and Wintel environments as well as other general PC/printer/network related issues.

The following activities are typical for this role:
Troubleshooting day to day user IT issues
Troubleshooting server, PC issues in our clients environment
Setup and deploy new users and the resources in clients Microsoft 365 of Azure Virtual Desktop environments
Email troubleshooting
Scheduling
Review system Event Logs and when trouble shooting complex issues
Perform administrative tasks pertaining to the end User environment , Applications, FSLogix, AD policies.
Proactively monitor the health and performance of clients network include Azure Virtual Desktop and it’s dependencies in order to maintain optimal performance and to predict a possible or imminent failure and take corrective actions when necessary.
Perform M365 administration in all areas - exchange, sharepoint, Endpoint manager etc
Perform Proactive Maintenance on clients networks.
Assist with Projects and deployments

MUST HAVES:
Honesty and integrity
Dedicated workspace with own space and no distractions
Must have experience with Connectwise Manage and Automate and ITGlue
Must have experience working with a small MSP
Must have experience with Microsoft 365 - in all areas including exchange, sharepoint, endpoint manager, conditional access
Knowledge in Azure Virtual Desktop
• Self-motivated and detail driven.
• Good Interpersonal Skills
• Technical Writing and Documentation Skills a must
Understanding of concepts and working knowledge of following technologies:,
• Active Directory and Azure Active Directory
• Windows Terminal Services
• DHCP, & DNS
• Multi-Site deployments


DESIRABLES:
• Azure and Azure Virtual Desktop
• Firewall Knowledge: SonicWALL
Must have good stable internet and a backup option.
• Networking concepts (Switches, Gateways, Routers, Firewalls, VPN, VLAN)
• Ideally PRTG

Looking for someone to be apart of the team for long term

Perks include:
*We pay for your certification exams
*Final Friday of the month lunch paid for.
*Flexibility
*For Filipino staff - 13 month pay
*Bonuses

PLEASE ONLY APPLY IF YOU ARE COMMITTED AND LOOKING FOR A LONG TERM ROLE.

I am currently in need of a skilled professional who can assist with the installation and configuration of CyberPanel and OpenLiteSpeed. The tasks at hand will include:

- Installation and Configuration: The primary task is to successfully configure CyberPanel and OpenLiteSpeed to meet my hosting needs. This includes setting up the software, fine-tuning it for optimal performance, and ensuring it's properly integrated within my existing infrastructure.

- Multiple Websites Hosting: I require the capability to host multiple websites. This will involve setting up virtual hosts, handling domain configurations, and ensuring smooth operation of all hosted sites.

- Email Server Setup: Establishing a functional email server within CyberPanel is a key requirement. This entails creating custom email domains, setting up forwarding rules, and ensuring the email server is integrated with the hosting environment.

- Advanced Security Features: It is essential that the setup incorporates advanced security measures. Key concerns here are scalability and load balancing, custom email domains and forwarding rules, as well as robust firewall protection and DDoS mitigation.

Ideal candidates should have a strong background in CyberPanel and OpenLiteSpeed, with a proven track record in successful installations and configurations. Experience with managing multiple websites, setting up email servers, and implementing advanced security features is highly desirable. A proactive approach to troubleshooting and a keen eye for optimization is also appreciated.

Skills: PHP, System Admin, Linux, Web Security, Web Hosting

Network Engineer

Following is the experience and skillset required that we are looking in a Network Engineer
1. **Cisco Firewall Implementation and Management:**

- Design, implement, and maintain Cisco firewall rules to protect enterprise network infrastructure.

- Configure and optimize firewall policies to ensure secure and efficient traffic flow.

- Monitor firewall performance, troubleshoot issues, and ensure high availability and reliability.

- Conduct regular firewall rule audits to identify and remediate potential security vulnerabilities.

- Implement advanced security features such as VPN, NAT, and IDS/IPS on Cisco firewalls.



2. **Security Audits and Compliance:**

- Conduct comprehensive security audits to assess the effectiveness of network security measures.

- Identify security gaps and vulnerabilities, and recommend remediation strategies.

- Ensure compliance with industry standards, regulations, and best practices.

- Prepare detailed audit reports and present findings to senior management.

- Implement continuous monitoring and improvement processes to enhance security posture.



3. **Cisco Identity Services Engine (ISE) Implementation:**

- Deploy, configure, and manage Cisco ISE to enforce security policies across the network.

- Integrate Cisco ISE with other network devices and services for centralized authentication, authorization, and accounting (AAA).

- Implement and manage network access control (NAC) policies using Cisco ISE.

- Troubleshoot and resolve issues related to Cisco ISE deployment and operation.

- Stay updated with the latest Cisco ISE features and enhancements to leverage new capabilities.



4. **Network Monitoring and Management:**

- Utilize network monitoring tools such as SolarWinds to oversee network performance and security.

- Set up and configure monitoring dashboards to provide real-time visibility into network health.

- Analyze network traffic and logs to detect and respond to security incidents.

- Generate regular reports on network performance, availability, and security metrics.

- Collaborate with other IT teams to resolve network issues and optimize performance.

Servers Administration
Firewall Administration
Switches Administration
EDR Administration
BCP
Vulnerability Management

I need help automating data extraction from a number of PDF files that come in diverse formats. The information that needs to be extracted includes both text and tables.

The task is time-sensitive, and I require the project to be completed within a month.

Ideal skills for this project include:
- Python
- pdfminer python library
- machine learning

If you are able to commit to this project and meet the deadline, I would love to hear from you.
Expectations:
- minimum accuracy 95%
- deliver pre-trained machine learning models
- The system must run on our ubuntu/windows servers behind a firewall
- No (rest/graphQL) API calls to external services
- Knowledge transfer to enable me to maintain/modify the code
- You must be able to transfer IP rights to me for the whole application. So:
1. For the code / models that you develop, you must transfer IP rights to me. You would not claim any IP right on these.
2. If you use any component / library / model etc developed by someone else, it must be open source only.

Skills: Python, Web Scraping, PDF, Machine Learning (ML)

I need an expert to secure and clean up my 35 individual Wordpress sites in a Justhost cpanel. The primary objective is to prevent future security breaches, with a particular priority on 5 specific sites. This project must be completed within 2 weeks.

- **Security Measures**:
- Implement strong firewall protection to keep hackers at bay.
- Integrate a monthly malware scanning and removal routine to safeguard the sites from any malicious code.

Ideal candidate would have:
- Proven experience in securing and cleaning up Wordpress sites.
- In-depth knowledge of Justhost cpanel and its functionalities.
- Expertise in firewall protection and regular malware scanning.
- Able to prioritize tasks and manage time effectively.

Skills: PHP, Web Security, WordPress, Web Hosting, Internet Security

We are looking for an experienced Sr. IT Engineer to join our team. We are seeking an individual located in North America with a Senior-level of experience and a specialty in Microsoft Azure and 365 cloud solutions. The ideal candidate must have a deep understanding of Azure services such as infrastructure engineering and cloud architecture, as well as familiarity with Microsoft Office 365 environment and security settings. Additionally, we are looking for a team member who is reliable, highly organized, and can maintain a high standard of professionalism. Knowledge of scripting and automation is a plus. Project experience in a similar role will also be taken into consideration. If you are a well-rounded IT professional with the necessary experience and exceptional skill set for this position, please apply today.


Primary work will be performed remotely. Must have excellent internet service and reliable working computer. We are primarily looking for engineers in North America or able to work with our clients between 4:00am - 6:00pm PST. Must be able to speak and write proficiently in English.


If you meet the criteria below and are interested in complex IT projects let me know. We have enough work for 2-4 full time team members. I will need a formal CV/Resume for all applicants before you will be considered.


This posting is for individuals only. We cannot hire other organizations for this position.


This type of position requires significant trust. Candidates will need to complete certain tasks to demonstrate their competency to be considered for employment.


===== REQUIREMENTS =====
- Microsoft Azure Configuration, Deployment & Administration (Virtual Machines, Networks, Storage)
- Microsoft Office 365 Configuration, Deployment & Administration & Migration expert
- Microsoft Intune Administration & Support
- Azure Virtual Desktop, Administration and Deployment
- Extensive PowerShell scripting
- Windows Server (2012 R2, 2016, 2019, 2022)
- Ability to learn and manage applications in an enterprise environment
- IT Security solutions and applications


===== PLUSES=====
- Programming and development experience (C, C#, Python, etc.)
- Knowledge of internet firewall and Ethernet switching in a business environment
- Proficiency in: GP's, Basic TCP/IP switching and routing and firewall knowledge, security
- Virtual Server (VMware/Hyper-V)
- AWS Cloud Experience (Deployment, Administration, Support)
- Sophos IT Security (Deployment, Administration, Support)
- Certifications: MCSE, MCP and related vendor certs and specialties (experience and aptitude are desired over certifications)
- Connectwise PSA, RMM, Automate and/or other PSA and RMM experience
- Linux and Mac experience
- Microsoft RDS
- RapidRecovery Backup Software Experience
- Experience as an independent consultant


===== Personal Attributes =====
- Flexible Schedule and willingness to travel occasionally
- Should own basic tools like reliable vehicle and portable computer
- Must be able to prove experience
- Self-learner, self-starter, work unsupervised
- Personable and can work well with end users
- Good communication AND documentation skills, keeps smiling and cool under pressure.
- Works well with a team
- Willing to self start on training


===== Employment Type =====
Job Type: Contract to start, expected conversion to Full-time direct employment in the future.
Pay: $75,000.00 - $100,000.00 per year DOE


COVID-19 considerations:
We follow all the Covid health rules to protect our employees and clients



===== IMPORTANT =====
Payment for work will only be done via Freelancer.
Only individuals may apply (no companies or groups)
To apply you must do 2 things:
1) Send me offer/interest here on Freelancer
2) Complete our interview questions here: https://form.jotform.com/242066875824162

All communication must be done via this project here on Freelancer.

Skills: Windows Server, Microsoft SQL Server, Powershell, Virtualization, Microsoft Azure

We are looking for an experienced Sr. IT Engineer to join our team. We are seeking an individual located in North America with a Senior-level of experience and a specialty in Microsoft Azure and 365 cloud solutions. The ideal candidate must have a deep understanding of Azure services such as infrastructure engineering and cloud architecture, as well as familiarity with Microsoft Office 365 environment and security settings. Additionally, we are looking for a team member who is reliable, highly organized, and can maintain a high standard of professionalism. Knowledge of scripting and automation is a plus. Project experience in a similar role will also be taken into consideration. If you are a well-rounded IT professional with the necessary experience and exceptional skill set for this position, please apply today.


Primary work will be performed remotely. Must have excellent internet service and reliable working computer. We are primarily looking for engineers in North America or able to work with our clients between 4:00am - 6:00pm PST. Must be able to speak and write proficiently in English.


If you meet the criteria below and are interested in complex IT projects let me know. We have enough work for 2-4 full time team members. I will need a formal CV/Resume for all applicants before you will be considered.


This posting is for individuals only. We cannot hire other organizations for this position.


This type of position requires significant trust. Candidates will need to complete certain tasks to demonstrate their competency to be considered for employment.


===== REQUIREMENTS =====
- Microsoft Azure Configuration, Deployment & Administration (Virtual Machines, Networks, Storage)
- Microsoft Office 365 Configuration, Deployment & Administration & Migration expert
- Microsoft Intune Administration & Support
- Azure Virtual Desktop, Administration and Deployment
- Extensive PowerShell scripting
- Windows Server (2012 R2, 2016, 2019, 2022)
- Ability to learn and manage applications in an enterprise environment
- IT Security solutions and applications


===== PLUSES=====
- Programming and development experience (C, C#, Python, etc.)
- Knowledge of internet firewall and Ethernet switching in a business environment
- Proficiency in: GP's, Basic TCP/IP switching and routing and firewall knowledge, security
- Virtual Server (VMware/Hyper-V)
- AWS Cloud Experience (Deployment, Administration, Support)
- Sophos IT Security (Deployment, Administration, Support)
- Certifications: MCSE, MCP and related vendor certs and specialties (experience and aptitude are desired over certifications)
- Connectwise PSA, RMM, Automate and/or other PSA and RMM experience
- Linux and Mac experience
- Microsoft RDS
- RapidRecovery Backup Software Experience
- Experience as an independent consultant


===== Personal Attributes =====
- Flexible Schedule and willingness to travel occasionally
- Should own basic tools like reliable vehicle and portable computer
- Must be able to prove experience
- Self-learner, self-starter, work unsupervised
- Personable and can work well with end users
- Good communication AND documentation skills, keeps smiling and cool under pressure.
- Works well with a team
- Willing to self start on training


===== Employment Type =====
Job Type: Contract to start, expected conversion to Full-time direct employment in the future.
Pay: $75,000.00 - $100,000.00 per year DOE


COVID-19 considerations:
We follow all the Covid health rules to protect our employees and clients



===== IMPORTANT =====
Payment for work will only be done via Freelancer.
Only individuals may apply (no companies or groups)
To apply you must do 2 things:
1) Send me offer/interest here on Freelancer
2) Complete our interview questions here: https://form.jotform.com/242066875824162

All communication must be done via this project here on Freelancer.

Skills: Windows Server, Microsoft SQL Server, Powershell, Virtualization, Microsoft Azure

We Have a Private Network that we would like to access via 2 different ISP. Each ISP has its own Static IP Schema. We would like dual firewall routers so we have full redundancy on each device. We host our own dual DNS internal servers for our private Network. We have 250UP/DOWN fiber from AT&T with Class C address subnet and 10 Meg Comcast business cable with 5 static IPs for a backup connection. 
We would like to VPN to a single Private network on IKEv2 and Open VPN for both setups. 
Watchguard has been our firewall of choice for 10+ Years. We are looking for someone with experience on this setup to deign and assist in implementing the above solution. 
Thank you
Kip


Skills: Networking, Consultant

We have a primary ISP and all our public IPS are associated with this ISP, and we have a secondary ISP connected to the same firewall (Cisco MX 84) so if the primary is down then the Public IPs should fall back to secondary ISP.

I'm looking for a skilled professional who can help me setup and configure the SOHOs XG Firewall within my local area network. The primary goal of this project is to enhance the security of my network.

Key Requirements:
- Setting up and configuring the SOHOs XG Firewall to enhance network security
- Managing the firewall for a network consisting of 11-50 devices
- Prioritizing monitoring and control for web browsing, file downloads/uploads, and streaming services

Ideal Skills and Experience:
- Proven experience with network security setups and firewall configurations
- Familiarity with the SOHOs XG Firewall
- Ability to manage a network of 11-50 devices effectively
- Previous experience in prioritizing and controlling specific types of traffic on a network

If you have the required skills and experience, please bid on this project with your relevant experience and approach to setting up the SOHOs XG Firewall.

Skills: System Admin, Computer Security, Cisco, Network Administration, Internet Security

I'm looking for a skilled professional who can help me setup and configure the SOHOs XG Firewall within my local area network. The primary goal of this project is to enhance the security of my network.

Key Requirements:
- Setting up and configuring the SOHOs XG Firewall to enhance network security
- Managing the firewall for a network consisting of 11-50 devices
- Prioritizing monitoring and control for web browsing, file downloads/uploads, and streaming services

Ideal Skills and Experience:
- Proven experience with network security setups and firewall configurations
- Familiarity with the SOHOs XG Firewall
- Ability to manage a network of 11-50 devices effectively
- Previous experience in prioritizing and controlling specific types of traffic on a network

If you have the required skills and experience, please bid on this project with your relevant experience and approach to setting up the SOHOs XG Firewall.

Skills: System Admin, Computer Security, Cisco, Network Administration, Internet Security

We are looking for an IT professional based in Hanoi, Vietnam that can assist us with some installation tasks to perform onsite.
This job will require 1/2 to 1 day of work. Upon successful completion of the job, we may require additional assistance from time to time onsite for future expansions or support cases.

Qualifications:
- Experience with Cisco and Dell switch L2 configuration (vlans)
- Experience with Mikrotik router configuration (BGP, VPN, Firewall)
- Experience with Server administration and Linux system installation

I'm in need of a network engineer adept with MSP tools such as N-able, NinjaOne, and network management and security practices.

Key Tasks:
- Firewall setup and management
- Router & Switch configuration and management
- General networking and MSP Services (Remote monitoring and management, Mobile device management, Help desk support)
- Automated Scripts & Network Policies

**Requirements:**
- Sound knowledge of MSP tools and practices
- Proficient in network configuration & management
- Ability to work during US hours
- Proficient in wireless networking
- Experience in Office 365 Administration
- Experience in RMM & MDM
- Prior experience with firewall setup and management, router configuration and management, switch configuration and management
- Capability to deliver quality work on an urgent basis

Please only bid on this project if you meet the above criteria.

Skills: System Admin, Computer Security, Cisco, VoIP, Network Administration

I'm in need of a network engineer adept with MSP tools such as N-able, NinjaOne, and network management and security practices.

Key Tasks:
- Firewall setup and management
- Router & Switch configuration and management
- General networking and MSP Services (Remote monitoring and management, Mobile device management, Help desk support)
- Automated Scripts & Network Policies

**Requirements:**
- Sound knowledge of MSP tools and practices
- Proficient in network configuration & management
- Ability to work during US hours
- Proficient in wireless networking
- Experience in Office 365 Administration
- Experience in RMM & MDM
- Prior experience with firewall setup and management, router configuration and management, switch configuration and management
- Capability to deliver quality work on an urgent basis

Please only bid on this project if you meet the above criteria.

Skills: System Admin, Computer Security, Cisco, VoIP, Network Administration

Implement and Enable Microsoft Defender: Deploy Microsoft Defender on 80-90 endpoint devices, ensuring activation of features like safe attachments, links, spoof intelligence, and anti-phishing capabilities.

Configure and Deploy Policies: Set up comprehensive Defender policies, including compliance policies on Intune and Endpoint Detection and Response (EDR). Enable security recommendations, vulnerability assessments, automated investigations and responses, live response sessions, attack simulations, and baseline security policies for Microsoft.

Integrate with Existing Security Infrastructure: Ensure seamless integration with our current security systems, including Sophos firewall, VPN, and Azure Portal hosting VMs. Configure Data Loss Prevention (DLP) policies on O365, covering cloud protection, web protection, email protection, etc.

Documentation and Guidelines: Provide detailed documentation and guidelines for the IT team on managing and maintaining Microsoft Defender.

Requirements: Proven experience in implementing Microsoft Defender and transitioning from other endpoint security solutions like Trellix. Strong understanding of Microsoft O365, Active Directory (on-premise), Azure, and Intune. Familiarity with endpoint security tools such as Trellix and firewall/VPN solutions like Sophos. Relevant certifications in Microsoft security technologies are a plus.

Submission Requirements: Candidates must submit a detailed capabilities statement highlighting their experience with Microsoft Defender, including specific deployments, policy configurations, and integrations. Provide examples of transitioning from other security solutions like Trellix, and detail your expertise with Microsoft O365, Azure, Intune, and security infrastructure integration.

My website has suddenly stopped being indexed by Google. When searching in the Search Console, it shows that robots.txt is unreachable (it is not blocked by just unreachable). I modified the robots.txt and it is fine and should be crawled by Googlebot. I contacted my host company and they said everything is fine and their firewall is not blocking Google IP. I tried disabling all my WordPress plug-ins one by one but that did not solve this issue. I am clueless as to how to solve this crawling issue. Can you help and resolve this?

I need an expert with a deep understanding of hardware firewall configuration. The Firewall model has not yet been defined, your experience would be a key decision-making factor in this regard.

Main responsibilities:

- Analyze and configure the current firewall or the installation of a firewall recommended by you (Fortigate - Zyxel - Cisco...)
- Configuring this hardware firewall to enable network traffic monitoring and intrusion prevention

Ideal Skills and Experience:

- Strong experience in network security and firewall configuration
- Knowledge and experience of popular firewall brands like Cisco, Fortinet, Zyxel...
- Ability to analyze firewall configuration
- Exceptional problem-solving skills.

budget to be determined

We are seeking a highly skilled and experienced Palo Alto Networks Security Specialist to join our IT Security team. In this role, you will act as a Subject Matter Expert (SME) for Palo Alto Networks products, providing leadership, expertise, and support for our security infrastructure. You will play a critical role in configuring, managing, and optimizing our Palo Alto Networks firewalls and security platforms to ensure a robust and secure network environment.

Responsibilities:

Technical Expertise:
Possess deep knowledge of Palo Alto Networks products, including firewalls (PA-Series), PAN-OS operating system, threat prevention (WildFire), and security management tools (Panorama).
Configure and manage firewall policies, including security zones, network traffic rules, and application identification.
Implement threat prevention features to protect against malware, viruses, and other cyber threats.
Utilize advanced features like user identification (User-ID), URL filtering, and data filtering to enhance security posture.
Monitor network traffic and security logs to identify and troubleshoot security incidents.
Stay up-to-date on the latest Palo Alto Networks features, updates, and security threats.
Strategic Consulting:
Collaborate with security architects and network engineers to design and implement secure network solutions.
Provide guidance and recommendations for optimizing Palo Alto Networks deployments for performance and efficiency.
Evaluate new Palo Alto Networks products and features to identify opportunities for improvement.

I am seeking an experienced professional to create an MYSQL and web (https://docs.appsmith.com/getting-started/setup/installation-guides/docker) on my DigitalOcean server. This task requires an understanding of network setup and firewall considerations.

While no specific type of firewall has been designated, your knowledge and recommendation will be appreciated to ensure robust security.

SQL server should only be accessible internally on the server, No WAN access.
WEB services should be accessible externally.
Setup of SSL should be done for web service.

Key Requirements:

- Experience in creating SQL and Web Dockers
- Proficiency in configuring DigitalOcean servers
- Expertise in network setups and firewall configurations
- Proven capacity to offer educated recommendations for project improvements

When applying, please include your experience and any relevant past work. If you have experience with firewall configurations but did not specify the type, your application is still welcomed.

Skills: System Admin, Linux, Web Security, MySQL, Internet Security

I am seeking an experienced professional to create an MYSQL and web (https://docs.appsmith.com/getting-started/setup/installation-guides/docker) on my DigitalOcean server. This task requires an understanding of network setup and firewall considerations.

While no specific type of firewall has been designated, your knowledge and recommendation will be appreciated to ensure robust security.

SQL server should only be accessible internally on the server, No WAN access.
WEB services should be accessible externally.
Setup of SSL should be done for web service.

Key Requirements:

- Experience in creating SQL and Web Dockers
- Proficiency in configuring DigitalOcean servers
- Expertise in network setups and firewall configurations
- Proven capacity to offer educated recommendations for project improvements

When applying, please include your experience and any relevant past work. If you have experience with firewall configurations but did not specify the type, your application is still welcomed.

Skills: System Admin, Linux, Web Security, MySQL, Internet Security

I have problem assigning proper nic for WAN and LAN network and accessing the firewall GUI with public ip.

#### Project Overview:
We are looking to set up a Virtual Private Cloud (VPC) with three VLANs (Development, Testing, and Production) within a single /22 subnet, and a WireGuard virtual machine (VM) to enable secure access for clients from the internet. The setup should allow different access levels for developers, testers, and operations teams. Additionally, the setup should be scalable, allowing the addition of more environments in the future using Ansible for automation.

#### Objectives:
1. Configure a VPC with a /22 subnet that includes three VLANs: Development, Testing, and Production.
2. Set up a WireGuard VPN server within the VPC to manage secure access from the internet.
3. Implement firewall rules to control inter-VLAN communication and internet access.
4. Use Ansible to automate the deployment and configuration process.
5. Provide documentation and playbooks for adding additional environments in the future.

#### Detailed Requirements:

##### 1. VPC and VLAN Configuration:
- **VPC Setup**: Configure a VPC with a single /22 subnet to host multiple VLANs.
- **VLAN Segmentation**: Create three VLANs within the /22 subnet:
- Production: 192.168.0.0/24 (192.168.0.1-192.168.0.254)
- Development: 192.168.1.0/24 (192.168.1.1-192.168.1.254)
- Testing: 192.168.2.0/24 (192.168.2.1-192.168.2.254)
- **IP Addressing**: Assign IP ranges for each VLAN as per the above segmentation within the /22 subnet.

##### 2. WireGuard VPN Setup:
- **VPN Instance**: Deploy a single WireGuard VPN instance within the VPC.
- **Public IP Assignment**: Assign a public IP to the WireGuard VPN instance for internet accessibility.
- **VPN Configuration**: Configure WireGuard to allow access to specific VLANs based on user roles (developers, testers, operations).

##### 3. Firewall Rules:
- **WireGuard Port**: Allow traffic on the WireGuard UDP port (default 51820).
- **Inter-VLAN Communication**: Set up firewall rules to:
- Allow communication within the same VLAN.
- Restrict or allow inter-VLAN communication based on predefined policies.
- **Internet Access**: Determine which VLANs (if any) require direct internet access and configure firewall rules accordingly.

##### 4. Ansible Automation:
- **Playbooks**: Develop Ansible playbooks to automate:
- VPC and VLAN setup within the /22 subnet.
- WireGuard VPN installation and configuration.
- Firewall rules application.
- **Modularity**: Ensure playbooks are modular to facilitate the addition of new environments (VLANs) within the /22 subnet in the future.
- **Idempotency**: Playbooks should be idempotent to ensure consistent and repeatable deployments.

##### 5. Documentation:
- **Setup Guide**: Provide a comprehensive setup guide detailing steps to:
- Deploy the initial configuration.
- Add new VLANs/environments within the /22 subnet in the future.
- **Playbook Usage**: Document the usage of Ansible playbooks, including variable definitions and execution steps.

#### Deliverables:
1. Ansible playbooks for VPC, VLAN, and WireGuard VPN setup within the /22 subnet.
2. Firewall rule configurations integrated into Ansible.
3. Comprehensive documentation including a setup guide and playbook usage instructions.
4. A functional VPC with Development, Testing, and Production VLANs and a WireGuard VPN instance accessible via the internet.

We are looking for an experienced expert to integrate OKTA Multi-Factor Authentication with our existing Palo Alto Firewalls. The goal is to enhance the security of our network by implementing a strong user authentication process. The successful candidate will have a deep understanding of OKTA Multi-Factor Authentication and Palo Alto Firewall configuration. They will be responsible for setting up and configuring OKTA MFA, integrating it with Palo Alto Firewall, and ensuring smooth operation and user experience. This project requires strong problem-solving skills, attention to detail, and the ability to work independently.
Relevant skills:
- OKTA Multi-Factor Authentication
- Palo Alto Firewall configuration for VPN