Extensive experience with TCP/IP networking. With my interest in security, extensive experience in filtering TCP/IP connectivity in corporate, ISP, and other networks, with an emphasis on balancing security, performance, usability and other considerations.
Familiar with TCP, UDP and ICMP protocols, IP encapsulation and other network concepts, including routing with BGP, OSPF and RIP. Experienced in load-balancing multiple circuits with hardware and also through use of both static routes and EBGP.
Experienced in deploying IP filtering on Unix platforms as well as remote access systems including the ability to write custom filters for many operating systems and appliance platforms.
On Unix I have installed Darren Reed's free "IP Filter" package, the basis for the standard Solaris packet filter, as well as extensive experience using 'pf' on BSD systems, both as firewalls and to provide additional protection on special purpose servers, including maintaining secure web servers and authentication servers.
I also have experience with commercial firewalls, including Sidewinder, PIX/ASA, Firewall-1 and others.
Extensive experience with hardware and software TCP/IP monitoring systems including Network General, Sniffer Pro, Shomiti, Sourcefire, Sun's Snoop and TCPdump to diagnose network problems.
Experienced in designing, configuring and tuning Virtual Private Network implementations, including hardware and software products from Nortel, Cisco, Firewall-1, Sidewinder, and others, including IPSEC, SSL, and proprietary protocols.