Gracias! Yo sé alemán un poco también pero español es más divertido.

I’ve used VMware and Cisco products before, and you’re heading down the right path. I used the Cisco WAP at this one startup and those WAP’s were the best I’ve ever used, it’s been awhile though so it could’ve changed.

If you’re looking at Networking type of protections I’d focus on understand network traffic and how it flows in and out of internal systems. I currently use Akamai as our CDN but I’m not sure if they offer a free or community version. Wireshark is a good open source tool with plenty of docs and step by step guidance for analyzing traffic (it’s a bitch to learn up front but you’ll be good for like 90% of traffic tools).

That said, what we’re talking about is very different from the GRC stuff you had initially mentioned. What I’m getting at is you probably don’t have to focus on networking things if you’re dealing with compliance and regulatory GRC things.