# Routing: Advanced BGP, Advanced OSPF, EIGRP, Policy-Based Routing, Route manipulation, IP SLA, etc. # Switching: Virtual port Channel, Port-Channel, Private Vlan, Vlan-Acl, Mac-Acl, VTP, STP, RSTP, MST, VRRP, HSRP, GLBP, SPAN, RSPAN, CDP, LLDP, Port-Security, Root-Guard, BPDU-Guard, BPDU-Filter, Storm-Control, etc. # Software defined Network: Cisco ACI (Fabric, Multi-Fabric, Multi-POD, Multi-Site architecture, stretch Fabric, VMM Domain Integration, Tenant, Epic Controller, VXLAN, VTEP, Leaf, Spine, Application Profile, EPG, Micro-segmentation, Contract, L3out, Routing Protocol, etc.) # VPN Technology: Site-to-Site VPN, FlexVPN (IKEV2), IPSEC VPN, GRE VPN, Any connect VPN, Client-less VPN, DMVPN, Remote Access VPN SSL/TLS. # Network Firewall: ASA, Zone-Based firewall, NAT, DNAT, PAT, ACL, uRPF, Active-Active, Active-Standby Firewall, AAA (Radius/TACACS+), etc. # IPS/IDS: Cisco FTD (Intrusion Policy, URL Filtering, Application Filtering, Advanced Malware Protection, Access Control Policy, Security Intelligence, DNS Policy, Custom URL/IP/DNS Feeds or List, Cisco TALOS update, Custom Reporting, etc.). Palo Alto Firewall (APP-ID, Content-ID, Virtual Wire, NAT Policy, Security Profile, Security Policies, SSL Decryption, Anti-Spyware, Vulnerability Protection, URL Filtering, Data Protection, File Blocking, DOS Protection, Wildfire Analysis, Global Protect, HA, Reporting/Monitoring, Panorama, etc.), FortiGate Firewall (Application Control, Virtual wire, Policy and Objects, Web Filter, DNS Filter, Antivirus, Intrusion Preventions, SSL/SSH Inspection, SNAT/DNAT, FortiGuard, VPN, FortiClient, HA, Reporting, etc.) # Load Balancing: F5 LTM (Load Balancing Technique, Health Monitor, SNAT, Persistence, iRule for Load Manipulation, SSL Termination/Offloading, Strong TLS Encryption, X-Forward For, etc.) F5 GTM (Listener, Wide IP, DNS Pool, etc.). # Web Application Security: F5 WAF (Security Policy, Traffic analysis, Review, Mitigation, SQL Injection, Directory Traversal, Cross-site scripting, HTTP compilation, Evasion technique, File Type, iRule to bypass policy, Manual traffic learning and setting policy, DDOS Protection, etc. ) # Web Security: Cisco WSA (URL Filtering, Custom URL Filtering, HTTP/HTTPS Proxy, WCCP Redirection, Malware Analysis, Web Reputation, Reporting, etc.) ForcePoint WSG (HTTP/HTTPS Proxy, URL Filtering, Malware Analysis, SSL Decryption) # Identity Services Engine (ISE): Cisco ISE (AAA, Dot1X, MAB, SGT, NAD, BYOD, Guest Access, Profiling, Posture, Network Segmentation, etc.) # IP Telephony: Cisco Unified Call Manager, Voice gateway. # VMware: Data Center Virtualization, vCenter. # Packet Capture and Analysis: TCPDump, Wireshark. # Network Monitoring: SNMPV3, Netflow, Syslog, Cisco StealthWatch. # Network Automation: Python for network automation. # Cryptography: Strong knowledge on Public Key Infrastructure, SSL Certificate, SSL Decryption. # Others: DNS, Linux System, Amazon Web Services, SDWAN.