lensblog

My first month at ISA (Information Security Architects) draws to a close soon, and looking back at the past few weeks, I’m surprised at how the time has flown. Not that I’ve been so hectically busy that I never noticed the time, but rather that I’ve been engaged at a level that I haven’t experienced in a very long time.

Initially I was just supposed to get up to speed with F-Secure, their AV product range, and refresh my knowledge of Trend Micro as well, but seeing as we haven’t received many tickets for either set of products, I’ve kept myself occupied by jumping in the deep end with Checkpoint firewall support.

Well, not so much the support side of things just yet. Changes, I leave to those a little more qualified than I am, for the moment. No, my major task these past two weeks has been firewall log forensics. Breaking down thousands upon thousands of lines of logged events to spot trends, looking for attacks, potential network issues, etc.

I found it funny that I ended up using some of my old development tools in order to do so. SQL queries are amazing at breaking things down into manageable chunks of data…

I must admit, though, that I feel really stupid sometimes, having to ask my colleagues for advice all the time, but considering I haven’t yet gone on training for the product, I think I’m doing the best I can under the circumstances.

My other project has been building a MS ISA server for testing purposes, collecting browsing data for our Dev Team. And learning Websense again.

All in all, feeling a little overloaded, information-wise, but still enjoying it. The people at work are great, the environment is pleasant and I hardly notice the time there, in fact, I leave most evenings well after my finishing times. Mostly to miss traffic, but it’s also great to sit and chat with fellow geeks, play some pool, etc until such time as we all head our different ways.

For the first time in a long time, I feel at home in the IT industry again.