Firewall design, deployment and hardening for businesses
The firewall is the front door to your business network, and one of the cornerstones of its information security. We make sure it really does its job: a properly segmented network, clear rules, threat protection, and secure access for everyone who works from outside.
Elad personally oversees every project and makes sure it runs at the highest standard, from design to handover.
Why the firewall is at the heart of information security on the network
Everything that enters and leaves your business network passes through the firewall: browsing, email, employees connecting from home, cloud services, cameras, printers and every connected device. A modern firewall is much more than a traffic filter. It detects and stops attack attempts, blocks harmful sites and content, separates parts of the network so a breach on one computer does not spread across the organization, and gives employees safe access from anywhere. Configured properly, it is one of the most significant tools a business has to protect its information: customer data, financial records, internal documents and everything the business cannot afford to lose or expose.
In practice, in many businesses the firewall was installed years ago and never reviewed. The whole network sits in one segment, rules have piled up without order, protection features that were already paid for were never turned on, and nobody is sure anymore what is open and why. We design, deploy and harden the firewall to fit your business as it is today and where it is heading: a network divided into zones, least-privilege rules, active threat protection, secure remote access, and full documentation so anyone who comes after us understands exactly what was set and why.
When should you deal with the firewall?
If one of these sounds familiar, it is time to review your network.
The whole network in one segment
Computers, servers, cameras, guests and printers share the same network. A breach on one device opens the way to all the rest.
Rules nobody understands
There is a firewall, but the rules have piled up over the years, and it is no longer clear what is open, to whom and why.
A home router or old equipment
The business still runs on the internet provider's router, or on a firewall that no longer receives security updates.
Employees at home and in the field
More and more employees connect from outside, and there is no orderly, secure way to do it.
Moving office or opening a branch
A chance to design the network properly from the start, and connect branches securely.
A customer, insurer or standard requires it
A supplier questionnaire, cyber insurance or ISO 27001 requires you to show the network is protected and properly segmented.
A firewall that is planned, hardened and documented
We start by reviewing the current state, and build a plan that fits the business.
Requirements and equipment selection
Choosing a firewall that fits the size of the business, the traffic and the needs, without paying for features you will not use.
Deliverable: reasoned equipment recommendationExisting firewall review and rule cleanup
Reviewing every rule, setting and update on the current equipment, and closing whatever is no longer needed.
Deliverable: findings report and fix planSegmentation and network design
Dividing the network into zones (VLANs): employees, servers, guests, cameras and devices, with clear permissions between them.
Deliverable: updated network diagramLeast-privilege rules
Every service gets only the access it needs, and every rule gets a reason and an owner.
Deliverable: documented rule setThreat protection and content filtering
Turning on the firewall's protection features: intrusion prevention, web filtering and file inspection.
Deliverable: active protection profilesSecure remote access
Encrypted connections for employees at home and in the field, with multi-factor authentication and role-based permissions.
Deliverable: employee VPN configured and documentedBranch connectivity
A permanent encrypted connection between the main office and branches, so everyone works as one protected network.
Deliverable: active site-to-site connectionPart of your information security program
Settings are derived from the sensitive information in the business and its real risks, and support the requirements of ISO 27001, customers and cyber insurance.
Deliverable: a firewall aligned with your security policyUpdates, backup, logs and alerts
Firmware updates, a backup of every setting, event logs kept for investigation and audit, and alerts on important events.
Deliverable: configuration backup and change procedureHow it works
Four stages, with a rollback plan for every change.
1. Introduction and review
We learn how the business works, who connects from outside and which systems run on the network, and review the existing equipment.
2. Design
A network diagram, zones and a rule table, approved with you before anything is touched.
3. Deployment and hardening
We implement in an agreed time window, test every change, and keep a way back.
4. Handover and documentation
You receive all the documentation, and whoever manages the system on your side gets a training session.
What stays with you at the end
Everything belongs to you, written so your IT provider can carry on from the same point.
- An updated network diagram with all zones and the connections between them.
- A documented rule set, with the reason and owner of every rule.
- A full backup of the firewall configuration.
- A change procedure, so every future change is made in an orderly way.
- A short guide for employees on connecting securely from outside.
- A project summary: what was found, what changed, and what is recommended next.
Information security at the highest level, with personal oversight
Elad Elimelech, founder of Marom Cyber, brings 20 years of technology experience, most of them in management roles. In recent years he led technology strategy in information security and management at companies serving hundreds of organizations in high tech, finance and healthcare. He defined information security standards at the highest level and was the go-to authority for the most complex technology challenges across those organizations. When standard solutions were not enough, he led the solution.
Personal oversight until the project succeeds
Elad oversees every stage of the project and is responsible for the result. You have one senior point of contact for every question.
FortiGate specialization
Deep experience designing, deploying and hardening FortiGate in organizations, from a small office to multi-branch networks.
A view of the whole network
The firewall is part of a complete system. We design it together with the network, remote access, Wi-Fi and cloud connections, so everything works as one.
Security that grows with the business
A network designed properly today lets you add a branch, employees or cloud services tomorrow, without rebuilding everything.
Frequently asked questions about business firewalls
If anything is unclear, you can always ask us directly.
Completing the picture
Services and articles that connect to network security.
Risk assessment and gap analysis
Want the full picture, beyond the network? This is what a risk assessment looks like.
Learn more →Firewall, VPN and remote access
An article on the role of the firewall and VPN in business security, and the common mistakes.
Read the article →Physical infrastructure
Structured cabling, network cabinets and Wi-Fi, the foundation the network stands on.
Learn more →Want to know how well your network is protected?
A short call with Elad, and you will know where you stand and what to check first. Free and with no obligation.
Book a call →