Manish Vats

• Working as Cyber Security Lead Engineer, Handling various day to day incident/tasks w.r.t to various Security Devices like Cisco FTD, Cisco Umbrella Proxy, Imperva WAF
• Working as Lead Engineer for technologies associated Network Security and Endpoint Security Handling various Escalated incident and resolving them Working day to day task related to WAF and Proxy For example Enrollment of website on imperva, creating Security policies and managing them
• Working with Assurance team to mitigate the vulnerability of Security Devices like upgrading FXOS of firepower Working on ZTNA project , Enabling Posture Assessment on Endpoint and Creating policy on ISE to restrict the traffic within the organization

• I am working in Vulnerability Remediation team where my role is to remove the vulnerability of security devices (Firewall, VPN Solution and Load balancer)
• Removing the Vulnerability by upgrading the Cisco ASA to the recommended version
• Removing the vulnerability by deploying the standard configuration on security devices
• Configure the standard config on firewall as vulnerability arises due to config mismatch during the scan.

• Installation Configure and Manage the Palo Alto FW.

• Done a Migration from Checkpoint FW to Palo Alto using the migration tool (expedition) of PA.

• Deploy the FW in L3 mode and creating various zone-based security policies.

• Configure Dynamic and Static NAT and configure the firewall in HA (active backup).

• Adding various profiles like vulnerability protection, Antivirus, Antispyware, URL Filtering, Data protection, File Protection, content-based profiles to the security profile.

• Configure the wildfire profile for the detecting the zero-day attack. Also Configure the Zone based DOS profile and DDOS protection to webserver

• Integrate the Firewall with the AD and doing the multifactor Authentication for the Global protect users.

• Configuration of SSL VPN both clients based and clientless. Also configure the site to site VPN (IPSEC).

• Deploy Radware Server Load Balancer and Link Load Balancer at Punjab National Bank and F5 LTM at Air Vistara.

• Deploy the load balancer in both the mode i.e. one arm and two arm routed mode.

• Configure the VLAN, Interface IP, Gateway and floating IP in deployment of ADC in HA mode

• Configure the node and pool member and Virtual Server.

• Enabling various profile like persistence, load balancing method and SSL offloading.

• Deploy Radware & F5 WAF in which created the security profile and then attach it with the Virtual Service.

Deploy the WAF in transparent mode for few weeks and then enforcing the security profiles to block the illegitimate traffic

• Providing support for the Client's Network
• Responsible to provide maintenance and operational support in areas of firewall and network security infrastructure daily
• Installing and Configuration Checkpoint Firewall to optimize the network
• Configuration and Troubleshooting on IPSEC Virtual Private Network (VPN), Up-gradation of signature packs
• Strong knowledge of Firewalls (Stateful Inspection, NGFW) Hands on experience on Checkpoint Firewall (Configuration, Policy formation, Troubleshoot) Good knowledge related to Firewall Architecture and Packet Flow Adding Rules, NAT and troubleshooting connectivity issues in Checkpoint FW
• Configuration and implementing IDS, IPS, Cluster