Mohammed Khamis Belal

รับสมัคร Network Security Engineer - Honeypot  งานสัญญาจ้าง ต่อสัญญาเรื่อยๆ สถานที่ทำงาน พระราม9 Hybrid work Budget: 40K - 55K พิจารณาตามประสบการณ์ Firewall Management - Configuration (Site to site or client to site) of new VPN tunnels. - Routing of traffic through the gateways. - NATing of incoming and outgoing traffic through NAT rules. - Configure new gateways and getting them into production. - Creation of rules (Access, deny and block) to control traffic. - Configure SNMP so that alerts are sent to respective Syslog server. - Refining existing rules to minimize the number of rules used. - Software update on all Security Gateways - Troubleshoot calls with users (Generic access) or clients (VPN). - Removal of errors (License, rule error) during a policy push. - Enabling Role based access (Super user, admins, read only). - Rule management using Tufin analysis as and when planned. - Configure the SNMP so that logs are forwarded Syslog servers  - Monitoring the health of the firewall -- CPU utilization, cluster status, interface status ,AD connectivity, Dash board connectivity Intrusion Prevention - Configuration of IPS blade and fine tuning(Add rules to prevent and detect) as per security standards - Rule Documentation (List of rules which are in Prevention and Detection). - Enabling Role based access (Super user, admins, read only). - Analyze & investigate triggered events. - Send notifications to users when alerts are received. - Escalation to required Personnel during a security breach - Monitoring the health of the device -CPU utilization, interface status. สนใจสอบถามได้เลยนะคะ Line: kamin_mc

١

🚀 𝗘𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹 𝗖𝗼𝗺𝗺𝗮𝗻𝗱𝘀 𝗘𝘃𝗲𝗿𝘆 𝗡𝗢𝗖 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿 𝗦𝗵𝗼𝘂𝗹𝗱 𝗠𝗮𝘀𝘁𝗲𝗿! 🚀 As a NOC Engineer, being proficient with command-line tools is key to efficiently managing and troubleshooting networks and systems. Here are some of the most important commands that can help you excel in your role: 𝟏) 𝗣𝗶𝗻𝗴: 𝗽𝗶𝗻𝗴 <𝗜𝗣/𝗵𝗼𝘀𝘁𝗻𝗮𝗺𝗲> Check network connectivity and latency. 𝟐) 𝗧𝗿𝗮𝗰𝗲𝗿𝗼𝘂𝘁𝗲/𝗧𝗿𝗮𝗰𝗲𝗿𝘁: 𝘁𝗿𝗮𝗰𝗲𝗿𝗼𝘂𝘁𝗲 <𝗜𝗣/𝗵𝗼𝘀𝘁𝗻𝗮𝗺𝗲> (𝗟𝗶𝗻𝘂𝘅) / 𝘁𝗿𝗮𝗰𝗲𝗿𝘁 <𝗜𝗣/𝗵𝗼𝘀𝘁𝗻𝗮𝗺𝗲> (𝗪𝗶𝗻𝗱𝗼𝘄𝘀) Trace the route packets take to reach a destination. 𝟑) 𝗡𝗲𝘁𝘀𝘁𝗮𝘁: 𝗻𝗲𝘁𝘀𝘁𝗮𝘁 -𝗮𝗻 Display active network connections and listening ports. 𝟒) 𝗡𝗦𝗟𝗼𝗼𝗸𝘂𝗽: 𝗻𝘀𝗹𝗼𝗼𝗸𝘂𝗽 <𝗱𝗼𝗺𝗮𝗶𝗻> Query DNS to obtain domain name or IP address mapping. 𝟓) 𝗜𝗣𝗖𝗼𝗻𝗳𝗶𝗴/𝗜𝗳𝗰𝗼𝗻𝗳𝗶𝗴: 𝗶𝗽𝗰𝗼𝗻𝗳𝗶𝗴 (𝗪𝗶𝗻𝗱𝗼𝘄𝘀) / 𝗶𝗳𝗰𝗼𝗻𝗳𝗶𝗴 (𝗟𝗶𝗻𝘂𝘅) Display network configuration details of your machine. 𝟔) 𝗧𝗼𝗽/𝗛𝗧𝗼𝗽: 𝘁𝗼𝗽 / 𝗵𝘁𝗼𝗽 Monitor system processes and resource usage in real-time. 𝟕) 𝗗𝗙: 𝗱𝗳 -𝗵 Check disk space usage on filesystems. 𝟖) 𝗨𝗽𝘁𝗶𝗺𝗲: 𝘂𝗽𝘁𝗶𝗺𝗲 Show how long the system has been running and load averages. 𝟗) 𝗗𝗺𝗲𝘀𝗴: 𝗱𝗺𝗲𝘀𝗴 | 𝗴𝗿𝗲𝗽 <𝗸𝗲𝘆𝘄𝗼𝗿𝗱> Print kernel and boot messages for troubleshooting hardware or system issues. 𝟏𝟎) 𝗦𝗦𝗛: 𝘀𝘀𝗵 <𝘂𝘀𝗲𝗿>@<𝗵𝗼𝘀𝘁> Securely connect to a remote machine. 𝟏𝟏) 𝗚𝗿𝗲𝗽: 𝗴𝗿𝗲𝗽 <𝗽𝗮𝘁𝘁𝗲𝗿𝗻> <𝗳𝗶𝗹𝗲> Search for specific text patterns within files. 𝟏𝟐) 𝗖𝘂𝗿𝗹: 𝗰𝘂𝗿𝗹 -𝗜 <𝗨𝗥𝗟> Fetch HTTP headers to check website response and troubleshoot issues. 𝟏𝟑) 𝗦𝘆𝘀𝘁𝗲𝗺𝗰𝘁𝗹: 𝘀𝘆𝘀𝘁𝗲𝗺𝗰𝘁𝗹 𝘀𝘁𝗮𝘁𝘂𝘀 <𝘀𝗲𝗿𝘃𝗶𝗰𝗲> Manage and check the status of services on Linux systems. 𝟏𝟒) 𝗧𝗲𝗹𝗻𝗲𝘁: 𝘁𝗲𝗹𝗻𝗲𝘁 <𝗜𝗣> <𝗽𝗼𝗿𝘁> Test connectivity to a specific port on a remote server. 𝟏𝟓) 𝗪𝗵𝗼𝗶𝘀: 𝘄𝗵𝗼𝗶𝘀 <𝗱𝗼𝗺𝗮𝗶𝗻> Retrieve domain registration details and check domain availability. Mastering these commands will not only help you resolve issues faster but also enhance your efficiency as a NOC Engineer. Keep practicing and stay ahead! 💻🚀 #NOCEngineer #ITCommands #NetworkOperations #TechTips #SysAdmin #2024 #Linux #Ubuntu #L1Engineer #LinuxCommands #PratikMandge

١٥

٢ تعليق

𝗖𝗼𝗺𝗺𝗼𝗻 𝗤 & 𝗔 𝗼𝗳 𝗢𝗽𝗲𝗻𝗦𝘁𝗮𝗰𝗸 Get answers to the most frequently asked questions about OpenStack, covering everything from installation and configuration to troubleshooting and performance optimization. 🚀 𝗞𝗲𝘆 𝗙𝗲𝗮𝘁𝘂𝗿𝗲𝘀 𝗼𝗳 𝗢𝗽𝗲𝗻𝗦𝘁𝗮𝗰𝗸: * Scalable and flexible cloud computing * Multi-cloud support for hybrid environments * Open-source and community-driven * Automated resource management * Strong security and compliance features * Cost-effective infrastructure solutions 🤔 𝗪𝗵𝘆 𝗢𝗽𝗲𝗻𝗦𝘁𝗮𝗰𝗸? Empower your business with a customizable, scalable, and efficient cloud solution. 👉 𝗥𝗲𝗮𝗱𝘆 𝘁𝗼 𝘀𝗰𝗮𝗹𝗲 𝘆𝗼𝘂𝗿 𝗶𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲? One-stop OpenStack Solution will increase business growth at faster with Plexus Cloud. 𝗟𝗲𝘁’𝘀 𝘁𝗮𝗹𝗸 𝗯𝘂𝘀𝗶𝗻𝗲𝘀𝘀! 🌐https://lnkd.in/ghJVgGCB 📧[email protected] 📞+8809613001010 📞+8801958-615675 𝗪𝗵𝘆 𝗖𝗵𝗼𝗼𝘀𝗲 𝗨𝘀 𝗳𝗼𝗿 𝗢𝗽𝗲𝗻𝗦𝘁𝗮𝗰𝗸? We’re a community of cloud experts dedicated to helping you unlock the full potential of OpenStack. With our expertise, tailored guidance, and hands-on support, we make it easier for businesses to deploy, manage, and optimize cloud infrastructure. From start to scale, we’re with you at every step.

٣

Network Engineer vs. Cybersecurity Engineer 1. Role and Responsibilities: Network Engineer: -Primary Focus:Design, implementation, and management of network infrastructures (LAN, WAN, VPN, etc.). -Key Tasks: - Configuring routers, switches, firewalls, and other networking equipment. - Managing network performance, ensuring uptime, and troubleshooting issues. - Planning and implementing network upgrades and expansions. - Working with network protocols, subnetting, and IP addressing. Cybersecurity Engineer: Primary Focus:Protecting networks, systems, and data from cyber threats. Key Tasks: - Designing and implementing security measures (firewalls, intrusion detection systems, etc.). - Monitoring for security breaches and responding to incidents. - Conducting risk assessments and vulnerability testing. - Developing security protocols, policies, and awareness programs. 2. Skill Sets: Network Engineer: Technical Skills:In-depth knowledge of networking protocols (TCP/IP, BGP, OSPF), network architecture, and hardware. Tools:Cisco IOS, Juniper, Wireshark, SolarWinds. Certifications:CCNA, CCNP, JNCIS. Cybersecurity Engineer: Technical Skills:Knowledge of security protocols, encryption, firewalls, and intrusion detection/prevention systems. Tools:SIEM tools, firewalls, antivirus software, penetration testing tools. Certifications:CISSP, CEH, CompTIA Security+, CISM. 3. Work Environment: Network Engineer Typically works in IT departments, telecom companies, data centers, or as part of managed service providers. Cybersecurity Engineer: - Works in various sectors, including IT departments, government agencies, financial institutions, or cybersecurity firms. - Collaborates closely with network engineers, IT managers, and compliance officers. 4. Career Path: Network Engineer: - Progression may lead to roles like Senior Network Engineer, Network Architect, or Network Manager. - Can also specialize in areas like wireless networking, network automation, or cloud networking. Cybersecurity Engineer: - Progression may lead to roles like Senior Security Engineer, Security Architect, or Chief Information Security Officer (CISO). - Can specialize in areas like ethical hacking, incident response, or compliance. 5. Industry Demand: Network Engineer: - High demand due to the growing need for robust network infrastructure, especially with the rise of IoT and cloud computing. Cybersecurity Engineer: - Extremely high demand, driven by the increasing frequency and sophistication of cyberattacks across all sectors. 6. Salary: - Network Engineer: - Salary varies by experience and location, but generally ranges from $60,000 to $120,000 annually. -Cybersecurity Engineer: - Typically commands a higher salary due to the critical nature of the role, with ranges from $70,000 to $150,000 or more annually.

٢٧

٢ تعليق

CCIE DevNet Classes - Understand Netconf XPath Filters in 6-Minute #CCIE #DevNet #NETCONF #XPath #Filter

١٢

١ تعليق واحد

SprintGrad- Making IT Simpler! 🚀 BGP Routing: Unpacking the RIBs and Their Role in the Information Flow | CCIE Enterprise Border Gateway Protocol (BGP) is the backbone of inter-domain routing on the internet. A key part of its operation involves maintaining various Routing Information Bases (RIBs) to process and disseminate routing information effectively. ✅ Adj-RIB-In (Per Peer): Each BGP peer connection maintains its own Adj-RIB-In. This database stores the raw, unprocessed routing information received from that specific peer via BGP UPDATE messages. ✅ Input Policy Engine: Before the routes in the Adj-RIB-In are considered for path selection, they undergo filtering and potential manipulation through the Input Policy Engine. This allows network operators to enforce policies based on attributes like local preferences, AS paths, and community values. ✅ BGP Decision Process: The BGP Decision Process is the core algorithm that selects the best path to each destination. It evaluates the routes in the Adj-RIB-In after policy filtering, as well as any locally injected routes, using a multi-step process based on various path attributes. ✅ Loc-RIB: The Loc-RIB, short for Local RIB, stores the "best" routes selected by the BGP Decision Process. These are the routes that the BGP speaker considers to be the most optimal paths to reach different destinations across the internet. ✅ Output Policy Engine: Before advertising the selected routes to peers, the Output Policy Engine applies outbound policies. This step allows network operators to control what routes are shared with specific peers and how they are presented. ✅ Adj-RIB-Out (Per Peer): Each BGP peer connection also has an Adj-RIB-Out. This database stores the routes that have been selected for advertisement to that specific peer, after being processed by the Output Policy Engine. Understanding the roles of these different RIBs is fundamental to comprehending the BGP decision-making process and how it contributes to the reliable routing of data packets across the complex landscape of the internet. 💡 I hope this post has been helpful, if you have any questions or inputs, please feel free to leave a comment below. Also, tag someone who would find this helpful! 🔗 Follow SprintGrad - where learning is just a visual away!- https://lnkd.in/g8k62XY3 #PracticalTraining #BGP #BorderGatewayProtocol #OpenShortestPathFirst #RoutingProtocols #OSPF #NetworkEngineering #NetworkTroubleshooting #NetworkingTips #ccie #IGMP #PIM #multicasting #enterprisenetworking #dcaci #cisco #aci #cisconetworking #nexus #datacenter #Networking #CiscoCertification #ITCertification #NetworkEngineer #Cisco #RoutingAndSwitching #NetworkArchitecture #NetworkProtocols #NetworkSecurity #ITJobs #NetworkAdmin #NetworkInfrastructure #NetworkEngineering #NetworkingSkills #CareerInNetworking #NetworkingKnowledge #CiscoNetworking #SprintGrad #SprintGradBGP

٩١

٣ تعليق

DHCP Server on Cisco Router on Flat Network (Without VLAN) Lab #2 Objectives of this lab is to:  -learn how to perform the process of activating a router as a DHCP server. -recognize some of the configurations related to DHCP. lab file link:https://lnkd.in/eExXi9-y

٥٠

٦ تعليق

CCNP Job Interview Questions and Answers 1 :: What is the purpose of a default route? A default route is used if there is not a specific entry in the routing table for the destination. 2 :: Explain the difference between a classful and a classless routing protocol? Classless routing protocols advertise subnet mask information along with the network prefixes. Classful routing protocols do not. Therefore, for a classful protocol, all subnets for the major network number being used must be the same length. Also, classful protocol cannot support discontinuous networks prefixes. 3 :: What are the states that an EIGRP route can be in and what do these states mean? The passive state means that a router has a successor for a route. The active state means that a router does not have a successor or feasible successor for a route and is actively sending queries to neighbors to get information about the route. 4 :: What are the purposes of areas in an OSPF network? Areas allow the design of a hierarchical network. Routes can be summarized or blocked in an area to reduce the amount of routing information on internal OSPF routers. 5 :: Why are intra-area summary routes not allowed? OSPF databases on routers in the same area must be identical. If route summarization was allowed within an area, some routers would have specific routes and some routers would have summary routes for routes in the area. If this were allowed, the databases for the area would never agree. 6 :: What types of routes are allowed into a stub area? OSPF intra-area and interarea routes, and a default route. External routes are not advertised into a stub area. 7 :: What types of routes are allowed into a totally stubby area? OSPF intra-area routes and a default route. OSPF interarea and external routes are not advertised into a totally stubby area. 8 :: What types of routes are allowed into a NSSA? OSPF intra-area and interarea routes, and possibly a default route. External routes from ABRs are blocked, and external routes from ASBRs are converted to N1 or N2 routes. 9 :: What types of routes are allowed into a totally NSSA? OSPF intra-area routes and a default route. External routes from ABRs are blocked, and external routes from ASBRs are converted to N1 or N2 routes. 10 :: What is the difference between an E1 and E2 OSPF route? An E1 route contains the OSPF cost to reach the ASBR plus the cost from the ASBR to the external route. An E2 route contains only the cost from the ASBR to the external route.

١٠٩

٥ تعليق

⚡️Network teaching in SEMATEC I taught the following topics in this course: NetworkTopology - Network device and cable - OSI and TCP/IP model layer - Basic Routing&Switching - IP Plan subneting&Superneting - IPV6 - Port addressing in tcp/ip - Introduction of protocols ARP & ICMP & DHCP & IIS & ADDS & DNS & NAT & PAT - Basic virtualization Topology - Introduction of HP server hardware 🌐🚀

١٧٤

١٤ تعليق

Master Linux User Management Video Series Announcement: Linux Command Line: User Add, Delete & Password Explained 🚀 Boost Your Linux Skills 🚀 Join us for our new series, Linux Command Line: User Add, Delete & Password Explained What You'll Learn: Add Users: Use the useradd command effortlessly. Delete Users: Safely remove users with userdel. Manage Passwords: Secure your accounts using the passwd command. Pro Tips: Quick tricks to streamline user management. 🔒 Why This Matters: Mastering user management is key to effective system administration and security. Whether you’re a beginner or looking to refine your skills, this series is for you 👉 Stay Tuned for practical insights that will elevate your Linux expertise!

٤

Another lab for dhcp. Lab overview #ccnalab #ciscoccna Write your answer in the comments. .. .. @_networkforyou_ .. .. Follow us on Instagram. .. .. Turn on post notifications. .. .. @_networkforyou_ .. .. ccna200301 ccnp ccnacertification ccnatraining #ccnp_security #ccnpencor Thanks #Networkforyou #ccnacertification #ccnpencor #ccnatraining #ccnp #ccna200301 #CCNA #netwokforyou #CCNPSecurity

١

Hello... #Network #Engineer Top 5 scenario-based BGP interview questions along with their answers: 1. Scenario: Your BGP router is not forming a neighbor relationship with its peer. What steps would you take to troubleshoot this issue? Answer: ● Verify that the BGP neighbor IP addresses are correctly configured. ● Ensure that there is network connectivity between the BGP peers (e.g., no ACLs blocking TCP port 179). ● Check that both routers have the correct AS numbers configured for each other. ● Verify that the BGP neighbor states (e.g., using `show ip bgp neighbors`) are progressing beyond the Idle state. ● Confirm there are no duplicate router IDs in the BGP network. ● Review any relevant log files or debug outputs for error messages. 2. Scenario: Your BGP router is receiving routes from a neighbor, but they are not being installed in the routing table. What could be the problem? Answer: ● Ensure that the received routes are valid and do not contain any BGP attributes causing them to be rejected. ● Verify that the routes have a next-hop IP address that is reachable in the IGP. ● Check if there are any route filtering or policy statements in place that might be denying the routes. ● Confirm that the BGP administrative distance is lower than any other sources of the same routes. ● Make sure that there is enough memory and resources on the router to install new routes. 3. Scenario: Your BGP router is advertising a route to a neighbor, but the neighbor is not receiving it. What could be the cause? Answer: ● Verify that the advertised route is in the BGP table on the advertising router. ● Ensure that route advertisement is not being suppressed by BGP policies or filters. ● Check that the neighbor relationship is stable and there are no flaps. ● Confirm that there are no issues with AS-path filters or prefix-lists on the receiving end. ● Verify that the Maximum Prefix limit on the neighbor is not exceeded. 4. Scenario: Your BGP network is experiencing suboptimal routing due to asymmetric paths. How would you address this issue? Answer: ● Use BGP attributes such as Local Preference, MED, or AS-path prepending to influence route selection. ● Implement route maps or policy-based routing to enforce desired traffic flows. ● Utilize BGP communities to tag and manage routing policies across the network. ● Consider the implementation of BGP multipath to allow multiple paths for load balancing. ● Check for and resolve any inconsistencies in IGP metrics that might be affecting BGP route selection. #bgp #protocol #networking #Cisco #ccna #ccnp #interview

٩٠

٥ تعليق

✳ Most Complete Teaching of CCNP ENSLD 300-420 🎁 4 days left 50% Discount Link : English Version : https://lnkd.in/dxbxrFtr Persian Version : https://lnkd.in/de4er8GB

٥٠

What is Link Layer Discovery Protocol (LLDP)? | How link layer discovery protocol work? | LLDP default configuration? | how to configure LLDP? Link Layer Discovery Protocol LLDP it’s a nonproprietary protocol that works at layer 2. It is an open IEEE-standard 802.1AB. LLDP is an alternative to CDP. LLDP runs over the data link layer and it collects information about the neighboring devices. This information will help us in troubleshooting and documentation. LLDP and Cisco CDP work similarly but the big difference is that LLDP is a standard while CDP is a Cisco proprietary. LLDP has similar capabilities to CDP and there is an enhanced version to specifically address the voice application this version is called LLDP-MED (media endpoint discovery) but LLDP and LLDP-MED are not compatible. https://lnkd.in/dHrw9yym

٩