NGFW Engineer case studies
NGFW Engineer · Put your knowledge to work in context.
The NGFW Engineer certification is aimed at network security engineers who install, configure and operate a next-generation firewall estate rather than simply administering a single appliance. Typical candidates work with branch and data-centre firewall deployments, central management servers, routing integration, site-to-site and remote-access VPNs, and clustered high-availability pairs. The NGFW Engineer case studies are 5 cases and about 4,031 words.
1Out-of-Band Management, Proxy-Only Egress and a 48-Hour Cutover
A retail chain is standing up a new 400-user branch on two NGFWs in an active/passive pair. Management is out-of-band on 10.20.5.0/24 with gateway 10.20.5.1; the only internet access from that segment is an authenticated HTTP proxy at 10.20.5.10:8080, and the proxy team has refused new exceptions.
808 words, about 4 min2App-Based Block With Zero Hits on a 3,800-Rule Base
A rule base migrated from a legacy firewall has 3,800 top-down first-match rules. Finance (10.30.0.0/16, 120 users) must be blocked from consumer file-sharing SaaS; engineering may use it.
774 words, about 4 min3MPLS Flap, Backup Tunnel Up, Nobody Online
An HQ site runs an MPLS primary (10 Gbps) and an internet IPsec backup. The MPLS provider runs BGP; HQ advertises an aggregate 10.10.0.0/16 and receives a default.
827 words, about 4 min430 Branches, Two Overlapping Subnets, and Transfers That Stall
Thirty branches terminate route-based IPsec tunnels (IKEv2) at a hub NGFW with a single public IP. Two acquired sites still use 192.168.10.0/24 internally, and HQ uses the same range.
802 words, about 4 min5Nightly Failover, Dropped ERP Sessions, and a Split Brain
An active/passive pair runs HA1 and HA2 over 1 Gbps copper through the same access switch that carries the data VLANs. Heartbeat is 200/600 ms, preempt is off, and path monitoring pings 10.99.0.1 every 3 seconds with a 5-failure threshold; that host sits on a busy server segment that is included in the nightly backup.
820 words, about 4 min