Skill UI

Configures pfSense firewall rules, NAT policies, VPN tunnels, and traffic shaping to enforce segmentation, limit inter-VLAN flows, and protect DMZ, internal, guest, and IoT zones in enterprise or SMB deployments.

Designs and implements IEC 62443-3-2 security zones and conduits for OT networks, covering risk-based partitioning, SL-T assignment, industrial firewall microsegmentation, and validation through traffic analysis and penetration testing aligned with the Purdue Reference Model.

Designs and migrates OT networks from flat to segmented architectures using VLANs, industrial firewalls, data diodes, and SDN to enforce Purdue-inspired zones while validating traffic control for ICS operations.

Design network segmentation with firewall security zones, VLANs, ACLs, and microsegmentation so teams can map traffic, enforce least-privilege access, and halt lateral movement while satisfying compliance such as PCI DSS or HIPAA.

Guide configures Palo Alto Networks next-gen firewalls end-to-end, covering App-ID and User-ID policies, zone protection, SSL decryption, and threat prevention profiles so enterprises can secure traffic between trusted, untrusted, DMZ, guest, and data center zones.

Applies the Purdue Enterprise Reference Architecture to ICS/SCADA networks, mapping assets to hierarchical security zones, defining firewall/VLAN rules, and enforcing OT-to-IT DMZ controls so IEC 62443 requirements and defense-in-depth strategies are met.