When does a firewall need an overhaul?
Problems we help solve
A firewall should not be a one-off device that no one returns to. Access rules, VPNs, published services and connections between locations need to be controlled because over time it is easy to leave exceptions that increase risk.
- It is unknown which ports and services are exposed to the outside world.
- VPN works, but users have too much network access.
- The rules have been added over the years and no one knows their current purpose.
- Company branches require a stable and secure connection.
- Logs, alerts and security configuration documentation are missing.
Fit
Who is this service for?
Companies with remote work
We create VPN access with MFA and restrictions tailored to the user's role.
Companies with branches
We configure site-to-site connections and communication rules between locations.
Companies after changes
We organise rules, NAT, redirections and access after migrations or implementations.
Companies requiring inspection
We prepare documentation and configuration review for audit or security purposes.
Service scope
What does firewall and VPN configuration include?
Configuration overview
We check current rules, access and exposure of services.
- ports, NAT and published resources,
- rules for incoming and outgoing traffic,
- old exceptions and unused entries.
Secure VPN
We implement remote access consistent with user roles.
- VPN for employees and administrators,
- MFA and password policies,
- limiting access to specific services.
Network segmentation
We separate areas that should not communicate freely with each other.
- VLAN for guests, office and devices,
- rules between subnets,
- separation of critical systems.
Monitoring and documentation
We determine the method of observing events and describe the configuration.
- security logs and alerts,
- list of rules with justification,
- configuration change procedure.
Outcomes
What will you receive?
- structured firewall rules with a description of their purpose,
- secure VPN access for users and administrators,
- less exposure of company services to the Internet,
- network segmentation limiting the effects of the incident,
- configuration documentation and recommendations for further changes.
The scope may include a one-off inspection, device replacement, VPN configuration or ongoing network security care.
Delivery approach
How is the service delivered?
- Discovery. We determine locations, services and access requirements.
- Audit. We check rules, VPN accounts, logs and published resources.
- Plan. We indicate the rules that need to be sorted out and the risks of changes.
- Configuration. We implement rules, VPN, segmentation and alerts.
- Tests. We confirm user access and block unwanted traffic.
- Documentation. We provide a configuration description and recommendations.
Security standards
How do we lead change?
- Each rule should have an owner and a justification.
- We limit VPN access to the resources needed, not the entire network.
- Before changing the configuration, we determine the return method.
- We do not leave temporary exceptions without a review date.
- We document the settings so that subsequent changes can be controlled.
Cost
What determines the price?
The cost depends on the number of locations, rules, VPN users, device class, MFA requirements, network segmentation, configuration migration, and the expected monitoring scope.
FAQ
Frequently asked questions
Is it possible to tidy up the current firewall without replacing the hardware?
Often yes. First, we check the configuration and capabilities of the device, and only then do we recommend replacement.
Should a VPN have MFA?
Yes, especially with administrative access or remote work to company resources.
Can work block access to the Internet?
We plan changes in stages and test them, but in the case of larger corrections, we set a maintenance window.
Will you prepare rules documentation?
Yes. Documentation of rules and their purpose is one of the most important elements of subsequent maintenance.
Do you deal with connections between branches?
Yes. We can configure site-to-site VPN and communication rules between locations.