Services
We design, build and migrate secure networks. Our work spans firewalls, WAN, LAN and the cloud, and we stay with a project from the first design to the hand-over.
Network security architecture
A secure network starts on paper: where the zones are, what may cross between them and why. We design that structure first, then build it.
DetailsFirewall implementation and migration
Putting a firewall in is the easy part. Getting every rule, route and exception across to a new platform without surprises is the work.
DetailsSD-WAN, VPN and WAN design
A site that cannot reach the rest of the network is a site that is not working. We design WANs that keep running when a link does not.
DetailsCloud network security
The cloud does not remove the network; it moves it. The same questions apply: what is allowed to talk to what, and who is checking.
DetailsAssessments, audits and proofs of concept
Before you change a network, or buy something for it, it helps to know what you have and what a product really does in your environment.
DetailsRouting and switching
Behind every secure network is a plain, well-built LAN. We build those too.
DetailsAutomation and operations
What is done by hand once is a task. What is done by hand ten times is a script waiting to be written.
DetailsDelivery, support and training
A good design still has to be delivered, and the people who run it have to understand it.
DetailsThe kind of work we take on
Typical engagements, described by type. They show the range of what we do; they are not a client list.
New network build and migration
A new network built to replace an existing firewall and LAN, with a complete redesign and security hardening.
- Palo Alto Networks
- Aruba
Multi-site Fortinet deployment
A multi-site rollout with an ADVPN solution, remote access and FortiAuthenticator-based authentication.
- Fortinet
- ADVPN
Redundant WAN
A fully redundant network connecting remote sites with certificate-based IPsec VPNs, dynamic routing, User-ID, SSL decryption and DUO multi-factor authentication.
- IPsec
- BGP
- OSPF
Firewall migration
Architecture and migration from Cisco ASA to Fortinet, with new services implemented.
- Cisco ASA
- Fortinet
Proof of concept
Testing URL filtering, threat prevention, WildFire and SSL decryption on a Palo Alto Networks platform before a purchase decision.
- Palo Alto Networks
- WildFire
Segmentation programme
A segmentation programme replacing existing Layer 3 switches with Extreme Networks VSP appliances.
- Extreme Networks
SD-WAN
SD-WAN design and configuration: a Cisco (Viptela) proof of concept and a programme replacing security appliances with Cisco Meraki.
- Cisco Viptela
- Cisco Meraki
New network build
A new network built with Cisco ISR, ASA and Catalyst equipment, from setup to configuration.
- Cisco
Platforms and technologies
Firewalls and security
- Palo Alto Networks
- Fortinet
- Cisco ASA
- Check Point
- Cisco Meraki
- Juniper
- HP / Aruba
Routing and WAN
- BGP
- OSPF
- EIGRP
- RIP
- Static routing
- IPsec
- SD-WAN
- VRF
- VRRP
- IPv4 / IPv6
Switching and LAN
- VLANs
- STP (RSTP, PVST+, MSTP)
- EtherChannel
- Cisco Catalyst
- Cisco ISR
- Extreme Networks VSP
- VoIP / SIP
Cloud and platforms
- Azure
- AWS
- GCP
- VMware vSphere
- Proxmox
- Citrix XenServer
- Docker
- LXC
Automation and systems
- Ansible
- Linux (Debian, Ubuntu)
- Windows
- macOS
Tools
- FireMon
- Tufin
- Visio
- MS Project
Product and company names are the trademarks of their owners and are named here only to say what we work with. OslonIT is an independent company and is not a reseller or partner of these vendors.
Tell us about your network
Describe what you need in a few lines. We answer by e-mail, and by phone if you prefer.