SecArch3081

IT Security Consultant and Platform Architect at a pharma/biotech company with 10,001+ employees
Has 10+ Years Of Experience

Badges

55 Points9 Years

User Activity

Over 7 years ago

Contributed a review of ServiceNow: Stable solution but the security and web interface need improvement

Almost 8 years ago

Answered a question: OpenIAM vs Ping identity

I’m not familiar with those two products, unfortunately. Quest TPAM became One Identity, and is still the best, as far as I know.

Almost 8 years ago

Answered a question: OpenIAM vs Ping identity

Check out OneIdentity as another option in your analysis. https://www.oneidentity.com/ I'm not a vendor, and the company I work with does not use the IAM part, but I like it. Quest TPAM for privileged access management has been integrated to the OneIdentity suite, and is a…

Over 8 years ago

Commented on Password rotation, session recording & isolation and on-demand privileges.

Have you assessed TPAM/Safeguard? (was a Dell product, now One Identity)

Over 8 years ago

Commented on The Security Manager is the most valuable feature. It's been pretty stable.

Be careful with the "clean-up" report recommendations. Firemon tends to recommend deleting the hidden or shadowed rules, but those are often the more restrictive (better) rules, shadowed by an overly permissive rule at the top. Consider removing the top rule, and keeping…

Over 8 years ago

Commented on The most valuable feature is more or less the ability to look for the shadowed-based rules or rules that are being used.

Policy Test is extremely useful, as well--we use that constantly in request design phase to quickly identify zones and policy placement. Object search/Omni search is invaluable, as well, providing the ability to find all the rules that may need updating when a server…

Almost 9 years ago

Answered a question: Fortinet, Palo Alto or Check Point?

I already rule out Palo Alto, after trying to configure one for FireMon syslog reporting. You have to enable a syslog repeater, then configure for every single rule. CheckPoints seem most secure, but more difficult to configure than zone-based Junipers. I've only dealt…

Over 9 years ago

Commented on Policy test and access path analysis tools in Security Manager enable me to find existing firewall policies quickly, troubleshoot, or to help choose the optimal path for proposed rules.

Extremely valuable, being able to view all those detailed firewall configs in one place, and be able to see at a glance what was changed at a specific date.

Over 9 years ago

Contributed a review of FireMon Security Manager: Policy test and access path analysis tools in Security Manager enable me to find existing firewall policies quickly, troubleshoot, or to help choose the optimal path for proposed rules.

Experience

Reviews

Over 7 years ago

ServiceNow

Stable solution but the security and web interface need improvement

Over 9 years ago

FireMon Security Manager

Policy test and access path analysis tools in Security Manager enable me to find existing firewall policies quickly, troubleshoot, or to help choose the optimal path for proposed rules.

Answers

Almost 8 years ago

Identity Management (IM)

OpenIAM vs Ping identity

Almost 8 years ago

Identity Management (IM)

OpenIAM vs Ping identity

Almost 9 years ago

Firewalls

Fortinet, Palo Alto or Check Point?

Comments

Over 8 years ago

User Activity Monitoring

Password rotation, session recording & isolation and on-demand privileges.

Over 8 years ago

Firewall Security Management

The Security Manager is the most valuable feature. It's been pretty stable.

Over 8 years ago

Firewall Security Management

The most valuable feature is more or less the ability to look for the shadowed-based rules or rules that are being used.

Over 9 years ago

Firewall Security Management

Policy test and access path analysis tools in Security Manager enable me to find existing firewall policies quickly, troubleshoot, or to help choose the optimal path for proposed rules.

About me

PMP, ITIL, FMSE. Veteran technology and operations executive with a strong hands-on technical program management background; former USAF combat flight Instructor EWO, STO Chief, and Cyber Crew Commander. Provides thought leadership and influences the direction of technical and business solutions across organizations to ensure secure, mission-effective, IT operations.

Certifications

Operations Risk Management (ORM)
Project Management Professional (PMP)
ITILv3 Foundation
FireMon Solutions Expert (FMSE)
Chemical-terrorism Vulnerability Information (CVI)

Employers

US Air Force, ManTech Int'l, Qwest, TATA Consultancy Services, KATA Technologies

Education

St. Mary's University
Penn State University
Cecil College
Boston University