Work / Network Security

Enterprise IDS/IPS & Firewall Lab

A segmented enterprise network with a firewall, Suricata IDS/IPS and Wazuh SIEM, hardened and tuned to cut false positives by an estimated 50%.

Category
Network Security
Stack
Suricata · Wazuh · Firewall

A segmented lab network built to design, deploy and tune network security controls the way an enterprise would.

  • Deployed a firewall, Suricata IDS/IPS, and Wazuh SIEM across a segmented network, implementing and configuring network security controls across zones.
  • Ran vulnerability scans and endpoint monitoring across VLAN-segmented zones, analyzing risk and remediating findings against MITRE ATT&CK scenarios.
  • Documented architecture and hardening standards as reproducible references, reducing false positives by an estimated 50% through tuning.