Firewall Policy Audit
$1,500 fixed
- Shadowed, redundant and any-any rules
- Unused objects and stale NAT
- Threat and decryption profile coverage
- Cleanup plan with rule-by-rule changes
CCIE-led network consulting · Remote, US-wide
Networks that hold under load.
Covenant Networks designs, audits and automates enterprise networks across cloud, data center, security and SASE. Twenty-five years of production experience, delivered as fixed-scope engagements with a written report you can act on.
Hover a node to inspect · tap to send traffic
Technology coverage
Every layer, from optics to API.
Current platforms across the eight domains where most enterprise network work happens. Filter by domain.
Emerging or recently adopted technology
Data center & AI fabrics
Built rack by rack, documented line by line.
From brownfield three-tier migrations to greenfield spine-leaf and GPU back-end fabrics. Every design ships with an elevation, a cabling plan and the configs to match.
- FabricSpine-leaf, EVPN-VXLAN, multi-site DCI, Cisco ACI and NX-OS, Arista EOS, Juniper Apstra
- AI / GPULossless Ethernet with RoCEv2, PFC and ECN tuning, rail-optimized topologies, 400G/800G optics
- ServicesFirewall and ADC insertion, micro-segmentation, east-west inspection
- OperationsStreaming telemetry over gNMI, NetBox as source of truth, change validation with Batfish and pyATS
DC1 · ROW C · RACK 0742U · A+B feeds
Fixed-scope engagements
Send the configs. Get a report you can act on.
Each engagement runs asynchronously with a fixed price and a defined deliverable. Findings are ranked by risk and paired with remediation config.
SASE & Zero Trust Readiness
$3,500 fixed
- Current-state VPN and egress review
- ZTNA app segmentation map
- SWG, CASB and DLP policy baseline
- Phased migration plan with pilot groups
Load Balancer / ADC Review
$2,000 fixed
- Virtual server, pool and monitor hygiene
- TLS ciphers, certificates and profiles
- iRule and WAF policy review
- HA, sync and upgrade-path check
Cloud Network Architecture Review
$3,000 fixed
- VPC/VNet topology and hub design
- Hybrid connectivity and routing
- Egress, inspection and segmentation
- Cost and resiliency findings
Routing & Switching Health Assessment
$1,800 fixed
- BGP, OSPF and IS-IS design review
- STP, MLAG and first-hop redundancy
- Software versions and known defects
- Hardening against current benchmarks
Advisory & Implementation
$150 / hour
- Design reviews and second opinions
- Migration and cutover planning
- Automation pipelines and tooling
- Escalation support for hard problems
How an engagement runs
Four steps, no standing meetings.
Scope
A short written intake confirms environment, goals and the package that fits.
Collect
You share sanitized configs, exports or read-only access through a secure channel.
Analyze
Configs are parsed and modeled, then reviewed by hand against vendor and industry baselines.
Deliver
A prioritized report with remediation config, plus a recorded walkthrough or optional readout.
Principal
Freddy Delgado, CCIE
Freddy has spent 25 years building and operating enterprise networks, for organizations including American Express, Visa, IBM, CDW, World Wide Technology, TransUnion, Dell EMC, World Fuel Services and government agencies. His current focus is SASE rollouts, secure remote access and automating the operational work that keeps large networks stable.
25years in enterprise networking
6active vendor certifications
CCIECisco Certified Internetwork Expert
AWSAdvanced Networking
AWSSecurity
Palo AltoNetwork Security
F5Application Delivery
CloudflareZero Trust & SASE
Contact
Tell us what's breaking.
Describe the environment and the problem. You'll get a reply with a recommended package and fixed price within one business day.