IT‑IS‑Networking
Technology › Security Architecture

Intrusion Prevention & Detection

Inline inspection at the core designed to fail open rather than down, with monitoring segments planned in from the start.

Also known as IPS, IDS

Left to right is time. Each row is one of the 8 disciplines this one worked alongside, ordered so kindred disciplines sit next to each other rather than alphabetically — a landscape only means anything if neighboring rows belong together. Height is the work running in that domain in that year, weighted by what failure would have cost — life-safety ×3, a statutory obligation ×2.2, the estate itself ×1.5, an evaluation ×1. Every project declares which of those it was, so each ridge traces to an entry you can open and disagree with. Only the work that used this technology is counted, so what shows here is the company it kept rather than the record around it. Height and color are on the record-wide scale rather than this page’s own, so a modest estate draws a modest landscape and any two of these pages can be read against each other.

Intrusion prevention architecture placed inline at the enterprise core rather than out of band, and high-availability security platform design that fails open rather than closed.

Detection you cannot see is not a control, so monitoring and probe segments were part of the design rather than something retrofitted once an incident demanded them.

Applied in

  • Healthcare Estates2024–2026Five providers — firewall and intrusion-prevention upgrades against an active vendor advisory, a multi-site data center fabric on standing retainer, and segmentation with virtual desktop.
  • Firewall Refresh and Intrusion Response2025A multi-site next-generation firewall refresh for a nonprofit health provider — and an intrusion the night after cutover, met with geo-fencing and containment run alongside day-one support.
  • Security Posture, Incidents and Federal Liaison2012–2024Working directly with the City's Chief Security Officer on posture, governance, attacks and breaches — and alongside Homeland Security and the FBI when an incident reached that far.
  • Enterprise Fortinet IPS Deployment2012–2024VDOM-separated inline intrusion prevention at the enterprise core, with separate policy per internet path.
  • Fourteen Weeks on the ToolsApril – August 2024The densest hands-on stretch of the NRI tenure — seven client engagements worked personally, in the configuration and the peer reviews and the customer calls, while taking over a team from the second day.
  • Cecil Disaster Recovery Data Center2015–2023Facility and network design for the recovery site — power, cooling and carrier entry as well as what ran inside.
  • Juniper Enterprise Security Suite2009 – 2021A security platform rather than a firewall — selected on an instrument written before anyone knew who would win, operated for twelve years, and retired in stages on a plan the same team wrote.
  • Enterprise Firewall Policy and OperationsMay 2009 – March 2017Eight years running the rule base directly across two platform generations — every rule, change and upgrade — then handing it down to a dedicated post rather than holding it.

See also

Also searched as

  • SIEM
  • SOC
  • security operations
  • incident response
  • threat detection