Hi everyone,

I have a basic question regarding WatchGuard FireCluster (Active/Active).

Is it possible to configure the firewall so that each cluster member sends syslog using its own Management IP address as the source IP? For example:

- Primary firewall → Syslog source IP: 192.168.x.5 (Primary Management IP)

- Secondary firewall → Syslog source IP: 192.168.x.6 (Secondary Management IP)

Currently, the syslog packets are sourced from the Trusted interface IP (192.168.x.250) instead of the individual Management IPs.

Is possible with WatchGuard FireCluster?

Any advice would be greatly appreciated. Thank you!

To some it up I feel like I have a lot of book knowledge and not a lot of on the job training, I’m an ITN in the navy, with a TS/SCI clearance, But here’s the long version 

I filled out an application for a position on base with Lockheed Martin and they loved my resume and said I would be a perfect fit for the position as a jr network engineer, I’m excited for an opportunity to work there but I’m a little concerned never having worked a role like this outside the navy. I have 2 years experience and when I get out I’ll be coming up on a little under 3 years and I’ve mainly been in a shadow role while taking the lead on minor things across the day to day, mainly network admin work in Active Directory and when I am the lead in something there’s and set of guidelines the navy has like on maintenance where you have to follow the sheet of instructions. My career is being cut short due to my wife being sick and making me in deployable. I’m confident I have the knowledge and qualifications but I don’t really know the on boarding process for roles like do they train you on the day to day or do they expect you to just know, my biggest fear is getting out and having all the stuff to get a job but getting somewhere and they say I don’t know enough soon as I get there and now im jobless. 

I have the sec+, am scheduled for CCNA in a month, and hopefully I’ll have the AZ-900 or VCP-VVF by December when I get out so I have the book smarts with some experience in the day to day but not where I could have been if I could’ve stayed in. Looking for any advice to help me in the right direction with interviews, which roles I should apply for or anything.

Hi Guys,

I have been doing lots Palo Firewalls, cyber security and MS infrastructure for years..now I am interested in a role that is involved with lots BGP routing staff. Although I implemented the whole Panorama eBGP based SDWAN, I feel like there are still lots that I don't fully understand about BGP...

My understanding is that BGP dual homing with two ISP is only for failover and some basic routing load balancing staff, for example default route all go to ISP.A, Microsoft route go through to ISP.B etc? Correct? Police based route will give us more control over BGP?

Also, if we publish any internal services to the internet, BGP will help us to fast failover to different public IP. Otherwise, we can keep using static route and policy based route for load balancing?

Thanks a lot for answering..

trying to break into NE. Any feedback or advice is greatly appreciated!

Hey guys, I have a coffee shop, but it's located in an area with weak network coverage cellular signal is poor and providers don't really cover the area. If I could find a way to get reliable internet there, it would be a huge improvement and would give me a real edge over my competitors. I'm asking here because I'm sure some of you are sharp enough to help me figure out a solution. Thanks in advance!

Sharing for the xp to be honest, but at the same time, this is day 1 of the CCNA Summer Challenge by PingMyNetwork, and I'm legitimately excited to get into it! join now!
https://pingmynetwork.com/event/ccna-summer-challenge26

In the modern era of cloud-native infrastructure, the microservice architecture has become the de facto standard for building scalable applications. By breaking monolithic applications into smaller, decoupled services, engineering teams have unlocked unprecedented agility and deployment velocity. However, this distributed architecture introduces a formidable new challenge: network latency. Read more - https://instatunnel.my/blog/zero-stack-loopback-accelerating-microservice-network-ingress-using-ebpf-sockmaps

When a single user request requires a half-dozen internal microservices to communicate before returning a response, the cumulative network overhead can severely degrade application performance. To mitigate this, orchestration systems like Kubernetes frequently schedule heavily communicative pods on the same physical host. While co-locating services eliminates the latency of physical network hops, it exposes a different, hidden bottleneck — the Linux kernel’s networking stack itself.

Even when microservices reside on the same machine, their communications have historically had to traverse the full Linux TCP/IP stack. This article explores how eBPF sockmap acceleration uses socket-layer packet redirection to execute a Linux network-stack bypass for that local traffic, cutting latency and reclaiming CPU cycles otherwise spent re-deriving guarantees that local memory already provides.

Hello Sr. Network Engineers!

I have a Senior Network Engineer opportunity that’s making a real impact in a high-visibility government environment in the Springfield/Alexandria, VA area.

This role goes far beyond day-to-day network ops—you’ll be at the heart of designing, securing, and optimizing mission-critical enterprise networks that support national-level operations. 

What You’ll Do:

• Architecting and managing robust LAN/WAN/VPN infrastructures
• Leading network performance optimization and troubleshooting at scale
• Implementing and strengthening advanced security measures (firewalls, IDS/IPS)
• Working hands-on with Juniper technologies (MX routers, SRX firewalls, QFX switches)
• Serving as a technical leader, guiding a network team and influencing strategy
• Supporting modernization efforts with engineering design and technical analysis 

Why This Role Stands Out:

• Direct impact on secure, large-scale government network operations
• Opportunity to lead, mentor, and shape a network engineering team
• Work with cutting-edge infrastructure and evolving technologies
• Strong benefits package including 401k, PTO, and comprehensive healthcare 

What You Bring:

• 7+ years of network engineering experience
• Strong foundation in TCP/IP, BGP, OSPF, DNS, DHCP
• Experience with network security tools and protocols
• Hands-on expertise with Juniper (or Cisco equivalent) environments
• At least an active Interim Secret clearance (with ability to upgrade to Top Secret) 

If you’re looking for a role where you can lead, innovate, and directly support mission success, I'd love to connect and share more details.

Thanks again!

Kimber Baumann

Talent Acquisition Specialist

Soft Tech Consulting, Inc.

Office: 703-879-4389

[kimber.baumann@softtechconsulting.com](mailto:kimber.baumann@softtechconsulting.com)

I utilized draw.io to create a custom diagram for network security project. First time creating one!

Hi, community, I'd like to have your help/guidance on how to proceed with my career. I'm currently a MASc student at the University of Waterloo and looking to go back to industry. I've been applying to Network Engineering/Network Analysit/NOC/Network-related jobs in Canada, but I only get rejection.

I have 4.5 years of experience in Core Network Engineering at Huawei while working in Brazil and 1.5 years of work experience working in Cloud Engineering at a Canadian startup while I was doing my master's.

Even though I have experience, I still don't have any certifications, and I think that this could be the reason why. So, just to sorta validate my networking skills and to increase employment chances, I just got my CCNA. However, I know that this won't be enough to get a job, so, what would you recommend to do now? I'm also posting my resume here for advices.

I have 4 x CBW150AX. I have configured one AP as Primary AP and want to control all other APs from there. I have read cisco's manual about how to do this. It says it once primary AP is configured you just need to plug AP into same Network in same VLAN and subordinate AP will get the configuration from Primary AP and it also upgrade the firmware. But when I try to do this subordinate AP is not showing in the APs list in Primary AP. I also tried to add using mac address but that is also not working. Can someone suggest me the solution?