Engineering write-ups on firewalls, cloud networking, edge security, and Zero Trust. Each cites vendor documentation and shows when it was checked. https://sabersecurity.cloud/insights/feed.xml 2026-10-04T00:00:00Z https://sabersecurity.cloud/icon-192.png © Saber Security https://sabersecurity.cloud/insights/aws-transit-gateway-centralized-inspection 2026-10-04T00:00:00Z 2026-10-04T00:00:00Z Eduard Agopyan https://sabersecurity.cloud/about/eduard-agopyan

Three ways to inspect traffic centrally on Transit Gateway: an inspection VPC, the Network Firewall attachment, or Gateway Load Balancer, with failure modes.

https://sabersecurity.cloud/insights/azure-hub-spoke-vs-virtual-wan 2026-10-04T00:00:00Z 2026-10-04T00:00:00Z Eduard Agopyan https://sabersecurity.cloud/about/eduard-agopyan

When to choose Azure hub-and-spoke or Virtual WAN, and how to connect either to AWS Transit Gateway over IPsec VPN with BGP: a decision table and checklist.

https://sabersecurity.cloud/insights/cloudflare-account-audit-checklist 2026-10-04T00:00:00Z 2026-10-04T00:00:00Z Eduard Agopyan https://sabersecurity.cloud/about/eduard-agopyan

A Cloudflare account audit checklist across six areas, with a severity and effort model that ranks findings so the cheap, high-impact fixes ship first.

https://sabersecurity.cloud/insights/cloudflare-one-zero-trust-warp-names 2026-10-04T00:00:00Z 2026-10-04T00:00:00Z Eduard Agopyan https://sabersecurity.cloud/about/eduard-agopyan

What Cloudflare One, Zero Trust, the Cloudflare One Client (formerly WARP), Mesh and Cloudflare WAN (formerly Magic WAN) mean in 2026, with a name map.

https://sabersecurity.cloud/insights/cloudflare-terraform-baseline 2026-10-04T00:00:00Z 2026-10-04T00:00:00Z Eduard Agopyan https://sabersecurity.cloud/about/eduard-agopyan

Generate Terraform configuration and import blocks from a live Cloudflare account with cf-terraforming, then review, pin the provider, and apply a baseline.

https://sabersecurity.cloud/insights/cloudflare-waf-bot-rules-observe-first 2026-10-04T00:00:00Z 2026-10-04T00:00:00Z Eduard Agopyan https://sabersecurity.cloud/about/eduard-agopyan

Deploy Cloudflare WAF and bot rules in observe, challenge, then block order: which actions each plan has, how to write exceptions, and how to roll back.

https://sabersecurity.cloud/insights/firewall-migration-checklist 2026-10-04T00:00:00Z 2026-10-04T00:00:00Z Eduard Agopyan https://sabersecurity.cloud/about/eduard-agopyan

A vendor-neutral firewall migration checklist: audit rules by hit count, map features, check which conversion tools are still supported, test flows, cut over.

https://sabersecurity.cloud/insights/migrate-domains-to-cloudflare-without-downtime 2026-10-04T00:00:00Z 2026-10-04T00:00:00Z Eduard Agopyan https://sabersecurity.cloud/about/eduard-agopyan

Move DNS first and proxy second: the wave model, a cutover checklist, DNSSEC and certificate gates, and a per-hostname rollback, checked against the docs.

https://sabersecurity.cloud/insights/protect-origin-behind-cloudflare 2026-10-04T00:00:00Z 2026-10-04T00:00:00Z Eduard Agopyan https://sabersecurity.cloud/about/eduard-agopyan

Allow-list, Authenticated Origin Pulls, or Cloudflare Tunnel: what each proves and costs, plus the nginx settings and rollout order to check first.

https://sabersecurity.cloud/insights/replace-vpn-with-cloudflare-zero-trust 2026-10-04T00:00:00Z 2026-10-04T00:00:00Z Eduard Agopyan https://sabersecurity.cloud/about/eduard-agopyan

A phased plan to replace a remote-access VPN with Cloudflare Zero Trust: inventory, Tunnel, Access and Gateway policies, client rollout, and a pilot ladder.

https://sabersecurity.cloud/insights/zero-trust-and-nis2 2026-10-04T00:00:00Z 2026-10-04T00:00:00Z Eduard Agopyan https://sabersecurity.cloud/about/eduard-agopyan

NIS2 does not name Zero Trust in its Articles. What recital 89 and Article 21(2) say, where the 2024 implementing rules go further, and Bulgaria's status.

https://sabersecurity.cloud/insights/ztna-vs-vpn 2026-10-04T00:00:00Z 2026-10-04T00:00:00Z Eduard Agopyan https://sabersecurity.cloud/about/eduard-agopyan

ZTNA grants access to named applications after identity and device checks; a VPN extends a network. Definitions from NIST SP 800-207 and a decision table.