← Selected workProject 01 of 05
01 / Diskominfo Trenggalek
A firewall migration done as data engineering
Security · MigrationSecurity · Migration
Replacing a FortiGate 301E with a Cybrey RG-CF30XS for a regency government — years of accumulated rules serving dozens of agencies and around 130 public services, with no official cross-vendor converter.
ConstraintHundreds of rules, two vendors, no conversion tool, no room for outage.
ApproachExtract config to structured data, transform to the NTOS import format, validate, then re-verify from the running config.
Result132 DNAT · 134 SNAT · 154 policies · 319 objects. 34/34 acceptance tests.
# 10 days post-migration, 6–15 Aug 2026
security events logged 250,635
events blocked 135,107 (53.90%)
compromised internal hosts surfaced 13
security events logged 250,635
events blocked 135,107 (53.90%)
compromised internal hosts surfaced 13