IT‑IS‑Networking
Technology › Security Architecture

Fortinet

VDOM-separated inline intrusion prevention at the enterprise core, with separate inspection policy per internet path.

Also known as VDOM, FortiGate

Left to right is time. Each row is one of the 6 disciplines this one worked alongside, ordered so kindred disciplines sit next to each other rather than alphabetically — a landscape only means anything if neighboring rows belong together. Height is the work running in that domain in that year, weighted by what failure would have cost — life-safety ×3, a statutory obligation ×2.2, the estate itself ×1.5, an evaluation ×1. Every project declares which of those it was, so each ridge traces to an entry you can open and disagree with. Only the work that used this technology is counted, so what shows here is the company it kept rather than the record around it. Height and color are on the record-wide scale rather than this page’s own, so a modest estate draws a modest landscape and any two of these pages can be read against each other.

Deployed enterprise intrusion prevention on Fortinet using virtual domains to run separate inspection policy per internet path — commodity internet and the research and education network handled independently — inline at the core rather than out of band, with monitoring and probe segments designed in from the start.

Also set architecture and delivery standards for Fortinet engagements across the NRI North America client portfolio.

Applied in

  • Enterprise Architecture Practice Build2024–2026An architecture practice of up to fourteen, built and run to a design review gate and a weekly rhythm — so engagements were delivered against one design language rather than individual preference.
  • Vendor and Partner Program2024–2026Seven technology and service partners brought in across two years for capability the practice did not have or could not scale, with a formal manufacturer specialization track behind it.
  • Enterprise Fortinet IPS Deployment2012–2024VDOM-separated inline intrusion prevention at the enterprise core, with separate policy per internet path.

Career

See also