Din 2020 furnizam servicii de securitate cibernetica si infrastructura IT pentru companii si institutii — securitate perimetrala Fortinet, detectie si monitorizare (SIEM, IDS/IPS, SOC 24/7), virtualizare, backup si recuperare in caz de dezastru, cu mentenanta continua sub SLA.
Portofoliu FortiGate in productie
Administram in productie 10 echipamente FortiGate (specialistul cheie gestioneaza in total 15):
| Model FortiGate | Tip | Unitati |
|---|---|---|
| FortiGate-VM02 | Virtual | 2 |
| FortiGate-VM04 | Virtual | 5 |
| FortiGate-81F | Fizic | 3 |
| FortiAnalyzer | Log management + raportare | 1 |
| TOTAL | 7 VM + 3 fizice | 10 |
- Politici si rutare — firewall pe zone/interfete, NAT/VIP, rutare statica si BGP, VDOM-uri, segmentare VLAN inter-VLAN, GeoIP + reputatie IP
- SD-WAN — multi-WAN cu selectie pe SLA (latenta/jitter/pierderi), failover automat, traffic shaping/QoS
- HA — clustere FortiGate activ-pasiv, sincronizare config+sesiuni, upgrade FortiOS fara downtime
- VPN — IPsec site-to-site redundant + acces la distanta FortiClient (IPsec/SSL-VPN), LDAP/AD/RADIUS, 2FA FortiToken
- NGFW/UTM — IDS/IPS FortiGuard, antivirus, web filtering, application control, DNS filter, inspectie SSL/TLS
- Loguri + vizibilitate — FortiAnalyzer + FortiManager, export syslog catre SIEM Wazuh, corelare Suricata/CrowdSec
Firewall si securitate pe Linux
- iptables / nftables — seturi avansate, ipset, GeoIP, reputatie IP (CrowdSec, AbuseIPDB, Spamhaus), Fail2ban, port knocking
- VPN — OpenVPN, IPsec (strongSwan), WireGuard — site-to-site si acces la distanta, cu LDAP
- Hardening — CIS Benchmarks verificat cu Lynis; hardening Windows Server; pfSense, OPNsense, Mikrotik ca platforme perimetrale
Detectie, preventie si monitorizare
- Suricata / Snort — IDS/IPS inline si de monitorizare, reguli Emerging Threats + Talos
- CrowdSec — detectie comportamentala + blocare pe reputatie comunitara, liste actualizate zilnic
- Wazuh SIEM / XDR — implementat la beneficiari: colectare loguri firewall/servere/statii, corelare, detectie anomalii, retentie lunga
- Monitorizare — platforma Checkmk operata de noi, plus Nagios/Zabbix la beneficiari; Grafana/Prometheus/Loki; alertare + SOC 24/7 cu matrice de escaladare
- Evaluare vulnerabilitati — Nessus, OpenVAS, Rapid7 + teste de penetrare, cu raport si plan de remediere
Virtualizare
- VMware — vCenter, ESXi, vSAN, NSX-T (microsegmentare + firewall distribuit), HA/DRS/vMotion
- Hyper-V — Failover Cluster, Storage Spaces Direct, Hyper-V Replica, migrari P2V
- Proxmox VE — clustere hiperconvergente cu Ceph, Proxmox Backup Server, migrari VMware -> Proxmox
- KVM — consolidarea aplicatiilor pe Debian, izolate si securizate
Backup si continuitate
- Veeam B&R — pt VMware si Hyper-V, cu hardened repository imutabil, rezistent la ransomware
- Strategia 3-2-1-1-0 — trei copii, doua medii, o copie externa, una imutabila, zero erori la test de restaurare (automatizat periodic)
- Disaster recovery — replicare intre locatii prin IPsec/WireGuard, RTO/RPO documentate, runbook-uri
- Backup baze de date — PostgreSQL, MySQL, MSSQL, MongoDB
Proiecte reprezentative
- Server Linux fortificat — Debian hardened CIS, nftables cu GeoIP, Suricata IPS inline, CrowdSec, monitorizare Wazuh, virtualizare KVM
- Retea redundanta pe doua locatii — dual-ISP cu failover, Suricata + CrowdSec + ipset + GeoIP, server de backup care preia serviciile in 15 minute
- Backup ransomware-proof — Veeam B&R cu repository imutabil + replicare intre locatii, test de restaurare lunar automatizat
- Controale NIS2 / ISO 27001 — hardening CIS, SIEM Wazuh + Suricata IDS/IPS, retentie loguri 2 ani, proceduri de raspuns la incidente, documentatie de audit
SOC 24/7 si contact
Monitorizare SOC 24/7 cu timp de reactie la incident sub 15 minute, call center (telefon + e-mail + ticketing) si contract de mentenanta cu SLA. office@cymmunity.ro · +40 742 170 290.