I secure the identities, networks and systems attackers go after first: privileged access, firewalls and VPNs, Active Directory, and the forensics that explain what happened.
- Identity
- a.neupane
- Role
- Cybersecurity Analyst · PAM Specialist
- Domains
- PAMNetwork securityIdentityForensics
- Credentials
- PAM-DEFPCNSAAZ-900FCA
- Last change
- May 18, 2024, new write-up
- Telemetry
- Logged, recorded and audited
Writing
Step-by-step notes from real security work: privileged access, firewalls and VPNs, Active Directory and PKI.
LDAP Authentication on SSL VPN with FortiGate
Back FortiGate SSL VPN logins with Active Directory: add the LDAP server, import users, map a group to a portal and write the firewall policy.
Read the write-up- Network
Palo Alto Site-to-Site VPNs
How PAN-OS builds route-based IPsec tunnels: IKE Phase 1 and 2, proxy IDs, tunnel interfaces and the three objects every site-to-site VPN needs.
- CyberArk
Edge Browser Integration on CyberArk PSM
Switching PSM web connections from Chrome to Microsoft Edge: the driver, the Web App Dispatcher, AppLocker and a new connection component.
- Windows Server
What is OCSP and Why Does It Matter?
Certificate revocation lists don't scale. How CRLs work, where they fall short, and how the Online Certificate Status Protocol gives clients a real-time answer.
- Windows Server
Domain Controller Migration from Windows Server 2012 R2 to Windows Server 2019
Windows Server 2012 R2 is out of support. A step-by-step walkthrough of raising the schema with Adprep, promoting a 2019 DC, verifying replication and transferring all five FSMO roles.
What I work on
Privileged access management
Hands-on across CyberArk Vault, CPM, PSM and PTA: onboarding accounts, rotating credentials, and building custom AutoIt PSM connectors so admin sessions stay isolated and recorded.
Network & identity security
Site-to-site VPNs on Palo Alto, LDAP-backed SSL VPN on FortiGate, Active Directory migrations and PKI, all documented in my write-ups.
Forensics & incident response
Tracing what happened after the fact: log analysis, digital forensics and following privileged activity back to its source.
Tools I use
About
I'm a cybersecurity analyst specializing in Privileged Access Management at one of Canada's Big Five banks, working hands-on across the CyberArk stack (Vault, CPM, PSM and PTA) and building custom PSM connectors with AutoIt. My background spans network security and forensic investigation: firewalls, VPNs, Active Directory, PKI, and working out what happened after the fact. That mix shapes how I approach security: what's exposed, who touched it, and what the logs show afterward. I hold a Bachelor of Computer Science and a Cybersecurity Graduate Certificate from Georgian College (Dean's List). I write here about the things I've configured, broken and fixed.
- Based in
- Barrie, ON
Certifications
- CyberArk Defender – PAMCyberArkPAM-DEF
- Network Security AdministratorPalo Alto NetworksPCNSA
- Azure FundamentalsMicrosoftAZ-900
- Certified Associate in CybersecurityFortinetFCA
Request access.
Questions about a write-up, a security project or an opportunity? I read every message.