Intricate Network Security & EVE-NG Strategy

@AwaisChaudhry

Hello, I’m Muhammad Awais. I will deliver a practical, defense-in-depth network security plan with hands-on EVE-NG implementation and concise documentation. My approach aligns with your goal to strengthen inter-branch connectivity and harden critical systems, with 60% hands-on EVE-NG work and 10% documentation. I’ll start with a scalable IP addressing plan (departments, DMZ, firewall zones) and then implement L2/L3 security controls (VLANs, ACLs, port security, DHCP snooping, DAI, storm control, anti-spoofing). I’ll establish encrypted site-to-site VPN with failover across all branches, deploy IDS/IPS tuned against simulated attacks, and set up active/active firewalls with proper internal, DMZ, and external zones. I’ll enforce AAA & RBAC via TACACS+/RADIUS and craft device-level roles, ensuring auditable access. End-to-end testing will verify ACLs, segmentation, VPN tunnels, failover behavior, firewall rules, and IDS/IPS alerts. I’ll deliver architecture diagrams, configuration samples, test logs, and a concise runbook for maintenance. I’ll coordinate milestones, access, and sign-off to fit your December 13 deadline. Could you share your preferred VPN topology (hub-and-spoke vs full mesh) and existing WAN links? Do you require any specific firewall vendors or licenses for HA and DMZ zoning? Which sites or branches should be prioritized for migration and testing? What are the expected SLAs for VPN failover and IDS/IPS alert response? Do you have existing TACACS+/RADIUS ser

@AmazingEngr76386

Leveraging a decade of hands-on experience in computer and internet security, I have the skills and proficiency required to carry out your intricate network security project. I've already accomplished the first three tasks on your list and willing to fully live up to your broad requirements by expertly implementing Advanced IDS/IPS Deployment, Firewall High Availability, AAA&RBAC Controls, and End-to-End Testing. My practical and comprehensive understanding of IP Addressing & Subnetting, L2/L3 Security Controls, Secure VPN Connectivity augments my proficiency with EVE-NG (essential for this project). Network security is not just a passion for me; it's an area I excel in. I'm known for my meticulousness when it comes to delivering exceptional results that harden critical business systems against potential threats. Also worth noting is my extensive experience working both solo and as part of a team which means that though you're engaging a freelancer, you also get the capabilities of a full-team at no additional cost or hiring hassles. Finally, my flexible approach backed by timely communication habit ensures all aspects of this project are proceeding smoothly within scheduled timelines. By partnering with me, not only will you benefit from my network administration expertise, but also gain access to unlimited support throughout and after the project completion. Let's secure your business together and set a new standard in Network Security!

@Muhammadzeesha59

As an experienced Senior Full Stack Developer, my strong background in Computer Security, Internet Security, Linux, and Network Administration makes me the ideal candidate for your Intricate Network Security & EVE-NG Strategy project. I have already completed tasks 1, 2, and 3 while tasks 4, 5, 6, and 7 are right within my realm of expertise. Applying L2/L3 security controls including VLANs, ACLs, port security, DHCP snooping, DAI, storm control, and anti-spoofing is something that I've done countless of times before. Moreover, I understand the critical nature Network Security has for your organization and therefore I will give every aspect the detailed attention it deserves. On top of ensuring the successful implementation using EVE-NG with scalability in mind as required for task one; I will equally devote invaluable time during device hardening to make sure that your system can withstand most known attacks through advanced IDS/IPS Deployment. Most importantly, my top priority is delivering nothing less than perfection and on time. With an office in Pakistan and U.K., our work process will remain smooth irrespective of any geographical constraints. These attributes coupled with my extensive experience in each task you require and my ability to offer "BEST SOLUTIONS" within planned deadlines makes me truly the best fit for this project. Let's discuss further details and get started on building a solid Defense-in-Depth strategy for your organization!

@Zawiya3

As an experienced IT professional, my skillset is tailored to your network security project and EVE-NG implementation needs. Having already completed IP Addressing & Subnetting and L2/L3 Security Controls tasks in the past, I am equipped with the knowledge and experience to carry out tasks 4-7, which include Advanced IDS/IPS Deployment and Firewall High Availability. My proficiency in Linux, Network Administration, and Network Security combined with my knack for identifying areas prone to security vulnerabilities makes me an ideal fit for this project. I have a strong grasp of VLANs, ACLs, DHCP snooping, DAI, anti-spoofing, L2/L3 Security Controls that you require and can leverage this knowledge to ensure your infrastructure is fortified against potential threats. Moreover, I understand the value of thorough testing in network security. My ability to validate every component from ACLs to VPN tunnels along with my competence in threat simulation allows me to deliver comprehensive results aligned with your requirements. Aiming high for quality work that meets deadlines effectively, I am confident that I will be able to complete your task satisfactorily before the December 13th deadline.

@gauravk919

As an experienced Network and DevOps Engineer, I am ready to start this intricate security project immediately. I specialize in building robust, multi-layered Defense-in-Depth architectures and possess deep, hands-on expertise with EVE-NG Pro for complex network emulation and security validation. With Tasks 1, 2, and 3 completed, my focus is strictly on the critical advanced security and testing phases (Tasks 4, 5, 6, and 7) to ensure a high-availability and fully validated solution by the deadline. ✅ Execution Plan (Tasks 4-7): IDS/IPS (Task 4): Install, tune, and validate sensors using simulated attacks for accurate alerting and minimal false positives. Firewall HA (Task 5): Deploy active/active firewalls in EVE-NG, configuring Internal, DMZ, and External zones with optimized rules. AAA & RBAC (Task 6): Integrate TACACS+/RADIUS for centralized AAA and enforce device-level Role-Based Access Controls. E2E Testing (Task 7): Conduct exhaustive testing (ACLs, VPN failover, firewall resilience) and deliver the validation report and the remaining 10% documentation. Given the strict December 13th deadline (today), I will dedicate my full focus to immediate configuration and testing. I am bidding $500 USD, reflecting the advanced complexity and urgency of these remaining tasks. Let's discuss your specific EVE-NG environment and start this afternoon.