Network security architecture
A secure network starts on paper: where the zones are, what may cross between them and why. We design that structure first, then build it.
We design IP networks together with the security that protects them, not as a layer added afterwards. That covers the internet edge, the internal zones, remote sites and the paths between them.
Where a network already exists, we can leave its structure alone and harden it, or redesign it completely. Either way you get a design you can read, review with your own people and keep.
What this covers
- Network and security design for IP networks: zones, segmentation, internet edge, remote sites
- Security policy development: rule sets, threat prevention, decryption and access policy
- Complete redesign and security hardening of an existing network
- Segmentation programmes, including replacing legacy Layer 3 switching with a segmented design
- Redundant designs with dual paths, first-hop redundancy (VRRP) and dynamic routing
- Design documents and design reviews with your team
Other services
Firewall implementation and migration
New firewalls and moves between vendors, on Palo Alto Networks, Fortinet, Cisco and Check Point.
Read moreSD-WAN, VPN and WAN design
Multi-site networks with redundant links, dynamic routing, IPsec and SD-WAN.
Read moreCloud network security
Network security for Azure, AWS and GCP, including software firewalls and SASE.
Read moreTell us about your network
Describe what you need in a few lines. We answer by e-mail, and by phone if you prefer.