Network Firewall and Security (Forescout)

Job Description

Responsibilities: 1 Switch Plug-in Optimization (wired) Align endpoint, L2, L3 association with same CounterACT appliance and Configure Connectivity Group Re-valuate and re-configure polling Intervals for L2 and L3 switches and routers after configuring connectivity groups. Validate and fix L2(MAC)/L3(ARP) Polling to ensure L3 devices are polled for ARP table, L2 devices only for MAC tables. 2 Wireless Plug-in Configuration Add any Wireless Controllers to the plugin Align Wireless controllers with CounterACT appliance for polling. 3 Classification Policy Classification Sub-Rules creation and clean up based upon: Device type (Vendor, Model, OS etc.) NIC MAC Authentication (MAB, dot1X etc.) 4 OT/iOT NAT Windows Mobile Devices Macintosh Printers VOIP Headset (HaloLens, Meta Quest etc.) Camera Network Devices Linux/Unix/AIX Unclassified 5 Clarification Policy creation OT/iOT Clarification Policy Unclassified Clarification Policy Validate comments in sub-rules Remove initial implementation troubleshooting sub-rules (Port 22 open, netbios/dns name, etc.) Review and restructure Network Device Clarification Policy 6 Control Policy Optimization: Create catch all buckets/sub-rules in each control policy. Review and modify Exemption sub-rules in control policies. Add secondary blocking action of Virtual Firewall, i.e., via Channels ingesting Network Tap traffic. Review and re-configure recheck setting of control policy sub-rules based on Classification, Clarification and Discovery policy optimizations. 7 Operating System Changes: Policy to detect if a device changes OS fingerprint from one OS to another such as Windows to non-windows. Windows Version Changed on a managed device. VPN Plug-in Configuration: Configure VPN plugin to help identify and validate devices connecting via VPN. Show more Show less