Skill UI

A comprehensive guide for implementing, auditing, and enforcing least-privilege firewall rules within Google Cloud Platform (GCP) VPC networks. This process ensures robust network segmentation, restricts unauthorized ingress and egress traffic, and enables the application of hierarchical firewall policies across an entire organization, significantly bolstering cloud security posture.

This guide provides a comprehensive deep dive into implementing advanced network segmentation and zero-trust security controls within Kubernetes clusters using Calico. It covers standard Kubernetes NetworkPolicy, utilizing Calico's GlobalNetworkPolicy, and defining security Tiers, ensuring fine-grained, least-privilege communication between pods, and establishing robust security architectures for compliance.

This guide details the implementation of microsegmentation using Akamai Guardicore, enabling organizations to map complex application dependencies, visualize east-west traffic flows, and enforce least-privilege network policies. It is crucial for achieving zero-trust compliance by preventing lateral movement across heterogeneous workloads in data centers, cloud environments, and Kubernetes clusters.

This guide details the implementation of robust network access control (NAC) using 802.1X, RADIUS authentication, and platforms like PacketFence. It enables identity-based access enforcement, performs endpoint posture assessment, and dynamically assigns users to appropriate VLANs. Ideal for achieving zero-trust architecture and meeting stringent compliance standards (e.g., PCI-DSS).

This skill details the deployment of Cisco Identity Services Engine (ISE) for comprehensive network access control. It utilizes 802.1X, MAC Authentication Bypass (MAB), and posture assessment to centralize policy enforcement. ISE acts as a RADIUS policy server, providing dynamic VLAN assignment, downloadable ACLs, and robust authentication for both wired and wireless enterprise environments.

A comprehensive guide for deploying and managing network deception systems using industry-leading honeypot platforms like OpenCanary, T-Pot, and Cowrie. This skill helps security professionals detect unauthorized access attempts, trace lateral movement, and gather critical threat intelligence by simulating vulnerable services within a controlled environment. Ideal for enhancing network security architecture and creating early warning indicators for intrusions.

Suricata is a high-performance, open-source network threat detection engine used for deep packet inspection. This skill details the deployment and configuration of Suricata in Intrusion Prevention System (IPS) mode. It covers setting up custom rules, integrating third-party rulesets (like Emerging Threats), and actively blocking malicious traffic in real time, making it essential for robust network security and compliance enforcement.

This guide details how to use Kubernetes NetworkPolicies to enforce granular, pod-level network segmentation. It covers establishing default deny rules, defining specific ingress and egress rules for services, and implementing zero-trust microsegmentation. Use this skill to build robust security architecture and prevent lateral movement within a container cluster.

A comprehensive guide and tool for implementing secure network segmentation in Operational Technology (OT) environments. It utilizes the Purdue Model and traffic baseline analysis to design secure zones using VLANs, industrial firewalls, and data diodes, ensuring migration from flat networks without operational disruption. Ideal for achieving IEC 62443 compliance and securing IT/OT convergence points.

This skill guides the design and implementation of robust network segmentation using firewall zones, VLANs, ACLs, and microsegmentation. Learn to build secure, isolated zones (like DMZ, PCI CDE, Management) to enforce least-privilege access, restrict lateral movement, and meet stringent compliance requirements (PCI DSS, HIPAA).

A comprehensive guide to deploying Palo Alto Networks Next-Generation Firewalls (NGFWs). Covers advanced security techniques like App-ID for application awareness, User-ID for identity mapping, zone-based policy enforcement, SSL decryption, and robust threat prevention profiles. Essential for building enterprise-grade network security architectures.

This guide details passive OT network traffic analysis using Nozomi Networks Guardian sensors. It provides methods to achieve comprehensive asset visibility, real-time threat detection, and vulnerability assessment across sensitive Industrial Control Systems (ICS) without disrupting operations. It is crucial for building robust OT Security Operations Centers (SOCs) and ensuring compliance with industry standards like IEC 62443.