Projects
A defined scope, such as a deployment or migration, with an agreed plan, timeline and deliverables.
Services
Network security work, done by specialists
Our core is firewalls, firewall migrations and VPN, with a particular focus on Palo Alto Networks. Around that, we cover Microsoft 365, security reviews and general infrastructure.
Core specialty
Palo Alto Networks firewalls
Palo Alto Networks next-generation firewalls are our main focus. We design and deploy them from scratch, take over and tidy up existing estates, and keep them current and properly hardened.
We work across hardware appliances and VM-Series, managed locally, through Panorama, or through Strata Cloud Manager.
What's included
- Architecture and design: zones, segmentation, high availability
- New deployments and initial configuration
- Panorama and Strata Cloud Manager design: device groups, templates, template stacks
- Security profiles, App-ID, User-ID and URL filtering
- SSL/TLS decryption planning and rollout
- Best-practice hardening and rulebase cleanup
- PAN-OS upgrade planning and execution
- Troubleshooting and escalation support
Core specialty
Firewall migrations
Moving firewall vendors is one of the riskiest changes a network goes through. We plan it carefully, translate the policy rather than copy it blindly, and cut over in stages with a tested way back.
A migration is also the best chance you will get to remove years of unused and overly broad rules, so we treat cleanup as part of the job.
What's included
- Migrations to Palo Alto from FortiGate, Cisco ASA / Firepower, Check Point, SonicWall and others
- Discovery of the existing configuration, NAT, VPNs and dependencies
- Policy translation, consolidation and optimization
- Move from port-based to application-based (App-ID) rules
- Cutover planning, maintenance-window execution and rollback plans
- Post-migration tuning and hypercare
Core specialty
VPN & secure remote access
Remote access has to work every day for every user, and still keep the wrong people out. We build VPN and SASE setups that are dependable, well-documented and easy to support.
What's included
- GlobalProtect design, deployment and troubleshooting
- Prisma Access (SASE): mobile users, remote networks, cloud-first and hybrid designs
- Site-to-site IPsec VPNs, including to Azure, AWS and third parties
- Multi-factor authentication with SAML / Entra ID
- Host information profile (HIP) and device posture checks
- Split tunneling and performance tuning
Microsoft 365
Setup, migration and security for Microsoft 365, sized for small and mid-sized organizations that want it done right without a large IT department.
What's included
- Tenant setup, domains and licensing
- Exchange Online and email migrations
- Entra ID: users, groups, conditional access and MFA
- Intune device management
- SharePoint, OneDrive and Teams configuration
- Security baseline review and hardening
Security assessments & advisory
An independent look at how your network security is actually configured, with findings ranked by risk and a practical list of what to do about them.
What's included
- Firewall configuration and rulebase reviews
- Traffic and log analysis
- Remote-access and VPN reviews
- Microsoft 365 security reviews
- Recurring security advisory reports
Network & infrastructure
General IT infrastructure work, on-premises or in Azure, for organizations that need a capable pair of hands for a project or ongoing support.
What's included
- LAN, switching and wireless design
- Domain controller and file server replacement
- Azure infrastructure and hybrid connectivity
- Backup and recovery planning
- Documentation and network diagrams
- Ongoing IT support by arrangement
Ways to work together
Engagements that fit the job
Ongoing support
A regular block of time for changes, upgrades, monitoring and questions, so you always have someone who knows your setup.
Ad hoc advisory
A second opinion, a design review or help with a stubborn issue, without a long commitment.
Have a project in mind?
Send a short description of your environment and what you need. We will get back to you with next steps.