Your internet connection is your front door. We lock it properly.
The firewall provided by your internet service provider is not a security control. It is a router that happens to have a box on it. We install and manage next-generation firewalls that inspect traffic, enforce policies and produce a log you can actually read.
If you run two or more sites, an SD-WAN lets you carry internal traffic over the internet rather than over expensive point-to-point circuits. We deploy Fortinet or Meraki SD-WAN fabrics, with automatic failover between your primary NBN and a 4G backup. Cloud applications are routed by link quality, not by default route.
A router moves packets between networks. A next-generation firewall inspects the packet content, identifies the application running over it, and decides whether to allow, block or throttle. That is the difference between a device that lets ransomware call home unchallenged and one that stops the call in under a second.
We identify the applications on your network by their traffic signature, not by port number. Dropbox, YouTube, Spotify and personal VPNs each have a signature. We decide which are allowed during business hours and which are not, and we produce a monthly report showing what was used.
The firewall runs a signature library against every connection and blocks known exploit traffic before it reaches your server. It catches known exploit traffic before a missing update is exploited.
Staff working from home connect to your network through a VPN tunnel with multi-factor authentication. We do not allow direct RDP or SMB exposure to the internet. Every external-facing service is published through a gateway that authenticates the user before the connection reaches the server.
If you run two or more sites on expensive point-to-point circuits, SD-WAN moves that traffic over the internet with encryption, and routes cloud applications directly to the internet rather than backhauling them through head office. The monthly carriage bill usually drops by 30 to 50 percent, and failover between links becomes automatic rather than manual.
We do not leave firewall rules in an undocumented state. Every policy change is logged. We do not use the default admin password on a new firewall. We do not allow outbound unrestricted traffic. Every rule starts with a "deny all" and we add the exceptions you actually need.
We can show you what an SD-WAN would do to your monthly carriage bill.
Talk to us