You will get Secure FortiGate VPN & Firewall Setup for Reliable Network Protection
Project details
I design and implement secure FortiGate network environments focused on reliability, performance, and strong security controls. My work includes configuring IPsec and SSL VPNs for secure remote access, building scalable firewall policies based on least-privilege principles, and optimizing traffic flow using SD-WAN for better resilience and routing efficiency.
What sets my approach apart is the combination of security engineering and real operational experience. I don’t just “configure features”, I design architectures that reduce attack surface, improve visibility, and ensure stable connectivity in production environments. I also focus on clean segmentation, proper NAT design, and maintainable rule structures that can scale with business growth.
Each implementation is tested, documented, and aligned with enterprise security best practices to ensure long-term stability and easy management.
What sets my approach apart is the combination of security engineering and real operational experience. I don’t just “configure features”, I design architectures that reduce attack surface, improve visibility, and ensure stable connectivity in production environments. I also focus on clean segmentation, proper NAT design, and maintainable rule structures that can scale with business growth.
Each implementation is tested, documented, and aligned with enterprise security best practices to ensure long-term stability and easy management.
Cybersecurity Expertise
Data Protection, Cyber Threat Intelligence, Gap AnalysisTechnology Type
Firewall, Computer Network, Data Center, Operating SystemCybersecurity Regulation
ISO, NIST Cybersecurity FrameworkWhat's included
| Service Tiers |
Starter
$150
|
Standard
$300
|
Advanced
$1,000
|
|---|---|---|---|
| Delivery Time | 3 days | 5 days | 10 days |
Small Company Size | - | - | - |
Medium Company Size | - | - | - |
Large Company Size | - | - | - |
Frequently asked questions
2 reviews
(2)
(0)
(0)
(0)
(0)
This project doesn't have any reviews.
FP
Francisco P.
Apr 28, 2026
VM — Confirmed Malware Remediation + DocStorage Recovery + Clean Rebuild
Firas was a key technical lead on a complex GCP + FortiGate + Microsoft Entra ID engagement under real-world pressure. He executed cleanly on FortiGate SSL-VPN with Entra SAML SSO + MFA, built office segmentation policies, and kept everything aligned with a CJIS-style least-privilege posture. He also handled troubleshooting fast and logically (VPN stability, certificate handling, routing/policy enforcement, and access issues) and communicated clearly with structured updates.
Where he really stood out was incident response execution: he helped contain and recover compromised Windows VMs using a disciplined “clean rebuild + data-only restore” approach, validated services and connectivity, and supported logging/monitoring integration for audit visibility. He’s sharp, reliable, and operates like someone who has done this in production environments before.
I’d absolutely work with Firas again for FortiGate, Entra SSO/MFA integrations, cloud networking/security hardening, and incident remediation work.
Where he really stood out was incident response execution: he helped contain and recover compromised Windows VMs using a disciplined “clean rebuild + data-only restore” approach, validated services and connectivity, and supported logging/monitoring integration for audit visibility. He’s sharp, reliable, and operates like someone who has done this in production environments before.
I’d absolutely work with Firas again for FortiGate, Entra SSO/MFA integrations, cloud networking/security hardening, and incident remediation work.
PG
Pavlos G.
Mar 18, 2026
Network Security Specialist
About Firas
Network Security & FortiGate Engineer | FCSS | Azure, GCP, SD-WAN
100%
Job Success
Tunis, Tunisia - 9:20 am local time
Most freelancers configure. I troubleshoot, investigate, and build deployments that survive after I leave.
Recent cloud work:
FortiGate HA cluster on Azure with Entra ID SAML, SDN failover, and FIPS-mode compliance for a financial services client. Documented handover, zero post-deployment escalations.
FortiGate deployment on GCP with SAML authentication, Cloud Logging integration, and CJIS-aligned controls. Full SSL-VPN remote access architecture delivered with client handover documentation.
SSL-VPN auth-timeout investigation affecting 200+ remote users. Identified root cause across FortiGate session handling and FortiAuthenticator LDAP query behavior. Resolved in under 6 hours.
GCP VM compromise investigation. Isolated the workload, captured forensic disk snapshot, identified persistence mechanisms, contained the threat without downtime to adjacent services.
FortiGate SD-WAN mesh across 30+ sites with HA clusters, centralized policy, and zero-touch failover.
FortiAuthenticator REST API automation for time-bound contractor access, eliminating manual admin work and aligning with ITSM workflows.
What I can fix for you:
FortiGate Azure or GCP HA that fails over incorrectly or not at all
SD-WAN underlay or overlay instability across sites
SSL-VPN with SAML that breaks intermittently or after Entra ID changes
ZTNA tags that do not apply, EMS invitations that do not deliver
FortiAuthenticator REST API automation for time-bound contractor access
Cloud firewall policies that allow more than they should
FortiGate to Azure NSG or GCP firewall rule conflicts
FortiManager and FortiAnalyzer integration and reporting issues
FortiGate firmware upgrade planning and rollback strategy
Steps for completing your project
After purchasing the project, send requirements so Firas can start the project.
Delivery time starts when Firas receives requirements from you.
Firas works on your project following the steps below.
Revisions may occur after the delivery date.
Step 1: Requirement Collection & Analysis
Review FortiGate environment, understand VPN, SD-WAN, and policy needs.
Step 2: Design & Planning
Define VPN topology, firewall rules, routing, and SD-WAN strategy.