Phanindra Garlapati

• Worked on Palo Alto PAN-OS features like GlobalProtect VPN, User-ID, and APP-ID to enforce secure remote access and granular application control. • Deployed Palo Alto Networks VM-Series firewalls in AWS to protect cloud applications and workloads, utilizing same security policies as on-premises networks. • Deployed Palo Alto 5000 and 3000 series device to the production environment, managed them via Panorama. • Collaborated with cross-functional teams to troubleshoot and resolve complex network security issues leveraging Palo Alto firewall logs and reports. • Experience on working with IPsec, VPN, security profiles and SSL decryption on Palo Alto firewall. • Implemented Palo Alto Panorama M-500 for centralized management, enabling efficient policy enforcement and streamlined firewall configuration across multiple locations. • Implemented consistent security profiles, logging, and reporting using Panorama to ensure unified security management. • Experienced in troubleshooting and resolving technical issues related to Fortinet firewall configurations and connectivity. • Designed and deployed Fortinet FortiGate 200E Series firewalls to safeguard mid-sized networks, implementing advanced security features. • Deployed Fortinet FortiGate VM-Series firewalls in AWS to safeguard cloud applications, utilizing advanced security features and policies. • Managed FortiGate60D, 60E, 60C, 200D VPN setups, including IPsec and SSL VPNs, providing secure remote access for employees and partners while maintaining confidentiality and integrity of data transmission. • Utilized FortiAnalyzer for centralized logging and analysis of security events, generating actionable insights and reports on network traffic patterns, threats, and incidents. • Configure, maintain and upgrade of data centre infrastructure Nexus 7k, 6k, 5k,2k and UCS, employing VDC.

• Deployed intrusion detection and prevention systems (IDS/IPS) on AWS using tools like Snort, enhancing threat detection capabilities. • Enforced MFA for AWS management console and APIs, adding an extra layer of authentication to prevent unauthorized access. • Deployed INFOBLOX DDI (DNS, DHCP, IPAM) solutions within AWS, ensuring reliable and scalable network services for cloud workloads. • Hands on experience in documenting ISEC-generated reports and alerts related to AWS to identify patterns and potential breaches, ensuring timely mitigation. • Designed and implemented security policies on PA-5000 devices to ensure consistent application and user access control across AWS workloads. • Created customized reports and dashboards on the Palo Alto Networks dashboard to visualize security metrics and trends for informed decision-making. • Worked on Fortinet FortiGate’s threat intelligence services to swiftly contain and mitigate security incidents, minimizing impact on network operations. • Implemented FortiGate 1000 series in secure SD-WAN architectures, optimizing traffic routing and low-latency security services. • Configured security policies, intrusion prevention, and unified threat management (UTM) on Juniper SRX devices to protect against cyber threats. • Involving in leveraging AWS Auto Scaling groups and Fortinet’s high availability configurations to ensure dynamic scalability and continuous availability of security resources. • Utilized Cisco Nexus 7000 switches to establish Virtual Private Cloud (VPC) peering connections, facilitating communication between different VPCs within AWS environments. • Configured and maintained Arista switches from series such as Arista 7200, 7300, and 7500 series, optimizing for performance scalability, and redundancy (Secondary Switches). . .

• Developed and enforced security policies using checkpoint firewalls R75.10, R77, R81 to control traffic flow and mitigate risks. • Worked on configuring and maintaining Cisco ASA firewalls, including Cisco ASA 5500-X Series, 5500 Series, and 5585-X series. • Configured and managed sit-to-site VPNs and remote access VPNs and implemented threat detection and response capabilities. • Worked on Cisco 2300, 4000, 6500 series router and Cisco 1600, 2900, 6500 series switch. • Integrated SolarWinds with Azure Monitor to gain insights into the performance and health of Azure resources, enabling proactive issue resolution. • Monitored and analyzed real-time network flows with Tetration, detection abnormal patterns and potential breaches. • Involved in configuration of Access lists ACL on checkpoint firewall for the proper network routing for the B2B network connectivity. • Physically assembled Firewalls, IDS/IPS, and Nexus 7Ks and assisted in Rack-n-Stack within the Datacenter. • Hands on experience of ACL’s BGP, EIGRP Protocols. Implementing security policies using ACL, AAA. • Created custom dissectors and filters in Wireshark to focus on specific network elements and extract relevant information. • Worked on networking routing protocols such as RIP, OSPF, BGP, EIGRP and manipulated routing updates using route-map distribute list and administrative distance. • Troubleshoot and configured connectivity issues related to VPN, DHCP, DNS, Firewall DMZ. • Configuring IPsec VPNs as per customer requirements with standard encryption and encapsulation. • Involved in load balancer deployments, ensuring proper configuration and load distribution.