Firewall & Network Security
A network you can draw on one page, and a firewall that matches it.
Most small-business networks grew one device at a time: a consumer router, a forwarded port nobody remembers, one Wi-Fi password shared by staff and guests. We draw the network first, configure the firewall to match, and keep both documented and patched.
Schedule 1
What is included
- D-1.1
Firewall setup and hardening
Rules written from what each system actually needs: inbound closed by default, logging on, admin access locked down.
- D-1.2
Secure remote access
Staff and site-to-site VPNs, or zero-trust access, so nothing internal is exposed straight to the internet.
- D-1.3
Segmented networks and Wi-Fi
Separate networks for staff, guests, cameras and point-of-sale, with business-grade Wi-Fi coverage.
- D-1.4
Firmware and rule reviews
Scheduled firmware updates, and a periodic review that removes rules nobody can explain.
- D-1.5
Network documentation
A diagram, an inventory and the admin credentials in your password vault, not in one person’s head.
Schedule 2
Typical projects
- Replacing a consumer router in a growing office
- Opening a second location or a warehouse
- Locking down remote access after a security scare
- Answering a cyber-insurance questionnaire
Materials
- pfSense
- OPNsense
- FortiGate
- Ubiquiti UniFi
- Cisco Meraki
- WireGuard
- Tailscale
Schedule 3
How it runs
- 01
Review · first visit
We look at what is there (network, accounts, devices, servers and backups) and at what is at risk, and you get the findings in writing.
- 02
Plan · in writing
A prioritised list of fixes with a fixed price for the first set, and a monthly plan if you want ongoing care.
- 03
Fix · scheduled
Changes made in agreed maintenance windows, outside your working hours where they could interrupt anyone, with a way back for anything risky.
- 04
Document · handover
Diagrams, an inventory, and admin credentials in your own password manager, so anyone could take over.
- 05
Look after · optional
Monitoring, patching and support on a monthly plan, or nothing: the documentation means you never need us to keep the lights on.
Schedule 4
Common questions
Do you come on-site?
Yes, from Vancouver to Langley, and across most of BC by arrangement. After the install, most configuration and monitoring is done remotely.
Can you work with the firewall we already have?
Usually. We start by reviewing the current setup, and recommend new hardware only when the existing unit is out of support or cannot do the job.