Palo Alto, FortiGate, Check Point, and Zscaler policy. VMware NSX-T. Cisco and Arista fabrics. DNS. Designed by hand, then automated so changes are reviewed, repeatable, and fast. Twenty-plus years of enterprise network security, available to your team.
Start a conversation See servicesEngagements range from a focused design review to a multi-month build. Every one ends with documentation your team can operate from.
Design, deployment, upgrades, and policy cleanup for Palo Alto (Panorama, GlobalProtect, User-ID, HSM), FortiGate/FortiManager, Check Point, Zscaler, and Cisco ASA.
Request and approval portals that turn firewall changes into reviewed, repeatable pushes. React and Python/FastAPI front to back, PostgreSQL, pan-os-python, CI/CD, Kubernetes.
VMware NSX-T distributed firewall and segmentation delivered through code: policy as data, API-driven changes, Layer 3 route advertisement with BGP, and migration from perimeter-only designs.
Cisco and Arista configuration generated, validated, and pushed with Ansible, Netmiko, and Paramiko: port security, ACLs, routing changes, and refreshes at hundreds of sites.
Self-service DNS record requests with approval, backed by Infoblox or Bluecat APIs, so record changes stop being tickets and start being audited pushes.
AlgoSec Firewall Analyzer and FireFlow deployment and tuning at enterprise scale, Firemon, rule risk review, and change workflow design.
BGP and OSPF design, MPLS and VPN failover, DMZ and segmentation, Cisco Nexus and Arista fabrics, disaster recovery sites, and firewall test labs that mirror production.
AWS and Azure network design, VPN and routing between cloud and corporate, firewall placement, and OpenStack or VMware private infrastructure.
Migrating legacy LDAP and token schemes to OAuth2/OIDC, PingFederate, Duo multi-factor, and captive portal and User-ID integration with firewalls.
No black boxes. The goal is that your team owns the result.
NetDevSecurity LLC (doing business as NDS Solutions) is a Texas network security consultancy founded by Michael J. Ferguson, a firewall and network automation engineer with experience at banks, airlines, financial services, retail, healthcare, and research firms, currently leading NSX-T automation and Palo Alto policy for a major bank. Certifications include Cisco CCNP, Palo Alto ACE, and AlgoSec Firewall Analyzer and FireFlow Expert.
Email is the fastest way to reach us. Expect a reply within one business day.
Email: mike@netdevsecurity.com
Location: Denton, Texas. Remote and on-site engagements across the US.
NetDevSecurity