Office network, firewall and VPN
A flat network where every device can reach every other one, and remote access through a shared password, are common and risky. We design and set up segmented networks, firewall policies and VPN access per person, and document the result.
When this helps
- Guests, staff, servers and cameras share one network.
- The firewall is slow or overloaded and nobody knows why.
- Remote staff connect with a shared account or through an open port.
- There is no current diagram of the network.
How we do it
- 1
Measure first
Traffic analysis on the firewall shows what is actually using the network.
- 2
Segment
Separate VLANs for staff, guests, servers and devices, with rules between them.
- 3
Remote access per person
VPN with individual accounts, OpenVPN or WireGuard-based, that can be revoked in one place.
- 4
Document
A current network diagram, the firewall rules and why each one exists.
What you get
- Network and VLAN design
- Firewall policies
- VPN with individual access
- Network diagram and documentation
Questions
Which firewalls do you work with?
Our production experience is with SonicWall NSA (Gen7). The same principles apply to other business firewalls; we check your model before quoting.
OpenVPN or WireGuard?
Both work well. WireGuard is faster and simpler to run; OpenVPN is supported by more devices. We choose based on your firewall and devices.
Can you fix a slow network?
Often, yes. We start by finding which traffic causes the load; that is how we traced a firewall running close to 100%.