NGFW deployment and management (Fortinet, Palo Alto, Sophos). EDR — CrowdStrike, SentinelOne, Microsoft Defender. Network segmentation. Zero Trust architecture. Email security (DMARC, anti-phishing).