Network Security
Implementing AgenticOps Safely: Human Approval, Audit Trails, and Rollback
Agentic network operations need guardrails: approved action classes, human review, role limits, dry runs, rollback plans, and audit trails before any production change.
Campus Segmentation Design: From VLANs to Unified Fabric
Campus segmentation should evolve from VLAN sprawl toward a hierarchy of VRFs, virtual networks, SGTs, and group-based policy that operations teams can actually manage.
Post-Quantum Networking: What Cisco’s Quantum-Ready Push Means
Post-quantum networking is about inventory, crypto-agility, long-lived data risk, secure boot, VPNs, certificates, and refresh planning before the emergency arrives.
Designing Networks With DoD IL5 in Mind: Campus, Data Center, IT, and OT Security
How to design campus, data-center, IT, and OT networks that can support DoD IL5 mission systems without pretending a network alone is compliant.
Live Protect and Runtime Vulnerability Shielding for Network Infrastructure
Live Protect is Cisco’s runtime shielding approach for reducing exposure while teams plan upgrades. It should complement patching, segmentation, and lifecycle management, not replace them.
WireGuard Home VPN: Secure Remote Access for Your Homelab
A practical WireGuard home VPN guide for secure homelab access, including routing design, firewall rules, DNS, validation, and gear recommendations.
Cisco Multicloud Fabric: The Network-as-a-Service Push
Cisco Multicloud Fabric aims to simplify site-to-cloud and cloud-to-cloud networking with a Cisco-operated fabric, zero-trust routing, firewall chaining, and ThousandEyes visibility.
Catalyst Campus Fabric: eBGP, EVPN, VXLAN, and the Path to Macro and Microsegmentation
A design-focused look at Catalyst campus fabric, eBGP/EVPN/VXLAN, VRF macrosegmentation, TrustSec SGT microsegmentation, and how campus fabrics mature toward zero-trust segmentation.
Cisco Secure Access: Where SSE, ZTNA, SD-WAN, and AI Security Meet
A practical look at Cisco Secure Access, SSE, ZTNA, Meraki SD-WAN integration, AI application control, and how to design a migration away from legacy VPN assumptions.
Network Security Field Notes: Start Here
A practical network security starting point covering asset inventory, segmentation, identity, firewall policy, logging, patching, backups, and incident response.