Firewall & VPN a firewall is only as good as its upkeep.
A firewall whose rules nobody has cleaned up in years is more risk than protection. We set up the perimeter and secure remote access on Fortinet FortiGate properly, maintain the rule base and monitor it, instead of just installing the box and forgetting about it.
Rule bases that grew over time protect mainly one thing: no one.
A firewall lives on upkeep, not on the purchase.
Perimeter and remote access: set up, maintained, monitored.
Managed firewall
Setup, ongoing rule care and updates on Fortinet FortiGate, instead of install once and forget.
IPS & deep inspection
Intrusion prevention and TLS/SSL inspection catch attacks right in the data stream, not only at the endpoint.
Secure remote access
IPSec VPN for employees and site-to-site links, cleanly segmented and with multi-factor authentication.
Rule-base cleanup
We declutter rule sets that grew over time, document every rule and remove dead and overly broad entries.
Zero-trust segmentation
Access on a least-privilege basis, separated by role, site and system instead of one flat network.
24/7 monitoring
FortiGate alerts are monitored automatically around the clock, and we handle anomalies per SLA.
We rely on FortiGate, from the small office to multi-site operations.
Fortinet is one of the world's leading network firewall vendors. The FortiGate appliances combine firewall, VPN and threat defence in one system, with their own hardware acceleration for performance that holds up even with deep inspection switched on.
- FortiGate as a proven flagship, from the small office model to large setups.
- Firewall, IPSec VPN and security functions from one source, centrally managed.
- IPS, deep inspection, virus filtering and botnet detection right at the perimeter.
- We work with FortiGate every day, setup and care included.
Sized to fit, from the small office upwards.
| Home office / micro business | FortiGate 40 series |
| 5 to 40 employees | FortiGate 60 / 80 series |
| 40 to 500 employees | FortiGate 100 / 200 / 300 series |
| 500+ employees | FortiGate 1000 series and higher |
| Sizing | individual, we recommend to match load and features |
| Firewall & VPN | stateful firewall plus IPSec VPN for sites and employees |
| IPS & deep inspection | intrusion prevention and TLS/SSL inspection in the data stream |
| Threat defence | virus filtering, botnet detection and web filtering at the perimeter |
| Management | central management, firmware and signatures kept current |
Managed Firewall Service, the way it fits you.
Firewall subscription
Firewall as a Service, without a large upfront cost.
- Always current FortiGate hardware
- Setup & configuration included
- Rule care & updates
- 24/7 monitoring, response per SLA
Purchase & setup
Your own firewall, set up properly.
- Consulting & right sizing
- Security configuration
- Installation on-site or remote
- Optionally maintained with an SLA
Firewall SLA
Care for your existing firewall.
- Rule-base care & cleanup
- Firmware & signature updates
- 24/7 monitoring
- Response per SLA
What clients ask about the Managed Firewall Service.
Not necessarily. We take current FortiGate devices into care. Only if the hardware is at end of support or no longer powerful enough do we recommend a replacement, with reasons and not by default.
Over the years rules pile up that nobody can place anymore: dead entries, overly broad permissions, shadow rules. We document every rule, remove what is superfluous and make the rule base understandable again.
For secure remote access and site-to-site links we rely on IPSec, broadly interoperable and proven. Combined with multi-factor authentication and access only to the systems a role really needs.
Instead of "inside the VPN equals trusted", we check every access individually and grant only the minimum necessary path. Firewall and VPN enforce this segmentation, combined with multi-factor authentication.
The FortiGate alerts are monitored automatically around the clock. We assess and handle anomalies within the agreed SLA times, so an alert does not sit unnoticed.
Both are possible. The subscription (Firewall as a Service) keeps upfront costs low and the hardware always current. Buying makes sense if you prefer to invest and own. In both cases we handle setup, care and monitoring.
When did someone last clean up your firewall rule base?
We review your perimeter and remote access and tell you where it is stuck, with concrete recommendations and a fixed price for the cleanup.