IT security · LANCOM / R&S · Fortinet
Manage firewalls, VPNs and access.
A firewall needs to fit your organisation’s services, networks and access requirements. LANCOM/R&S and Fortinet are our partners for networking and security. The systems we use depend on the existing environment, requirements and agreed support.
Firewall & VPN
Make access deliberate. Keep it maintained.
These situations guide the firewall and VPN configuration. The selected equipment follows the access requirements.
Two partners for firewall and VPN
LANCOM/R&S Unified Firewalls and Fortinet FortiGate provide firewall and VPN capabilities. We assess suitable models and supported functions for the actual environment; using both manufacturers together is not required.
Available functions depend on model, software and licences. Firewall rules are one part of security planning; backup, endpoint administration and the network also need attention.
Understand which connections are needed
Which applications need internet access? Which networks may reach servers? Who requires remote access? We assess these needs and relate them to the existing network areas and responsibilities.
This provides a clear basis for rules governing permitted communication. Existing access is reviewed in relation to its purpose. Changes to services or devices may also require firewall changes.
Set up and configure firewalls
We plan and install the firewall, configure interfaces, network connections and required rules, and check the intended connections. A replacement is prepared with existing access, operating hours and possible interruptions in mind.
Additional security functions are selected according to need. Available inspection functions and services depend on factors including the model, firmware and licensing. These requirements are checked against your environment before setup.
Connect sites and remote users through VPN
A VPN can connect sites or give authorised people access to the resources they need. We help configure suitable connections, such as IPsec, and agree which networks and services should be reachable through them.
Users, endpoints, authentication and the remote system need to be compatible. Before setup or a firmware change, we check supported methods and dependencies. The connection is configured for the devices in use and the access required.
Keep changes and maintenance under review
Firewall rules and access arrangements need ongoing attention. New services are added, responsibilities change and connections that are no longer required need reviewing. We provide agreed administration, monitoring and maintenance, and record relevant changes.
For updates, we consider the supported software version, configuration backups and an agreed maintenance window. Checking required connections after a change is part of the technical work, alongside making the change itself.
Investigate faults across the environment
When a service is unreachable, its cause may lie elsewhere in the environment. We examine the connections, rules and system messages involved, and include network and server services in the investigation.
Backups and recovery complement access protection. It is therefore important to establish which configurations and systems are backed up and how operations can resume after a disruption.
Questions about firewalls and VPNs
Can you maintain an existing LANCOM/R&S or Fortinet firewall?
We establish its model, software version, licence and support status, along with existing documentation and responsibilities. We then agree how to take over its administration and identify any necessary changes.
Are all security functions included automatically?
No. Available functions depend on the device, software and subscribed services. We check what the intended tasks require and what is available.
How are changes to an operational system planned?
We agree the impact, required access and a suitable maintenance window with you. After implementation, the agreed connections are checked and significant changes are documented.
Which access and connections need protection?
Tell us about your firewall, sites and remote access. We can discuss configuration, changes and ongoing support.