Networks · Quebec and Ontario
Network security: firewalls, IDS and IPS for business networks
Protection for the network itself. Firewalls, intrusion detection and prevention, and segmentation that keeps cameras, guests and business systems apart.
What a network security project covers
This is network cybersecurity, not the physical alarm. An intrusion detection system (IDS) watches network traffic for signs of an attack. An intrusion prevention system (IPS) goes one step further and blocks it. Both normally run on the firewall at the edge of your network and between its internal segments.
We design the segmentation, install and configure the firewalls, switch on and tune the IDS/IPS so that it reports real problems rather than noise, and set up secure access for remote staff and other sites.
Cameras, door controllers, intercoms and building equipment are computers on your network, and they are rarely updated as often as a laptop. Because we install those systems, we know what they need to reach and what they do not, and we write the firewall rules accordingly.
- FirewallsNext-generation firewalls sized for your connection and number of users, installed and configured.
- IDS and IPSIntrusion detection and prevention enabled, tuned and kept up to date.
- SegmentationSeparate network zones for business systems, cameras and door controllers, guests and building equipment.
- Secure remote accessVPN access for staff and encrypted links between sites.
- Review and reportingA review of an existing network's exposure, with findings in plain language.
Where network security is put in place
- Head offices and branch sites
- Buildings with cameras and access control on the network
- Guest Wi-Fi in hotels and retail
- Multi-site operations
Typical situations
- The firewall has reached the end of its support and no longer receives updates
- The whole building shares one flat network: computers, cameras, guests and printers
- An insurer's questionnaire or a client's audit asks how the network is protected
- Staff work remotely and connect in ways nobody designed
- A new site has to be linked to head office securely
- After an incident, management wants to know what is exposed
Often installed together with
Industries we install it for
- General contractors
- Offices
- Retail
- Hotels and restaurants
- Manufacturing
- Clinics and care facilities
- Schools and daycare centres
- Municipalities and public buildings
- All industries
Replacing a firewall is a job in itself. When we also build the network, the segmentation is planned from the first drawing rather than added afterwards.
How a network security project runs
A network in service is changed in steps, each with a way back.
- Review of the existing network
We record what is connected, how traffic flows between systems, what can be reached from the Internet and how remote users get in. The configuration of the existing firewall is read rule by rule.
- Design and quote
You receive a proposed segmentation, the rules between segments in plain language, the firewall model sized for your connection and your users, the remote access method, and a quote.
- Installation and changeover
The firewall is configured and tested before it is put in line. The changeover is scheduled outside your business hours, and the previous configuration is kept ready to be restored.
- Tuning and handover
Intrusion detection and prevention start in observation mode; blocking is switched on once normal traffic is known. Rules, accounts and alerts are documented, then handed over.
What you receive with the configuration
A firewall nobody understands is a risk in itself. The configuration is handed over with its explanations.
- Network diagramThe segments, what each one contains and how they connect to the Internet and to other sites.
- Rule summaryWhat is allowed between segments and from outside, written so that a manager can read it.
- Administrator accessAdministrator accounts in the owner's name and a backup copy of the configuration.
- AlertingWho is notified of what, and the first thing to do for each kind of alert.
Questions about business network security
What is the difference between IDS and IPS?
An IDS detects suspicious network activity and raises an alert. An IPS detects it and blocks it automatically. Most business firewalls can do both, and we configure which traffic is only reported and which is stopped.
Which firewalls do you install?
We work with several manufacturers of business firewalls and recommend a model according to the size and needs of your network. The manufacturers we install are listed on our Brands page.
Will segmentation or IPS slow the network down?
Not if the firewall is sized for it. Inspection takes processing power, so the model is chosen for the speed of your connection with the security functions switched on, not for the speed printed on the box with everything off.
Do you monitor the network after installation?
The firewall sends its alerts to the people you designate, and we handle changes, updates and service on request. We tell you plainly what the system watches by itself and what needs a person to look at it.
Can you work with our IT department or our IT provider?
Yes. Often they keep the servers and workstations while we handle the firewall, the segmentation and the building systems on the network. Responsibilities are written down at the start, so that nothing falls between two teams.
Will this make us compliant with a security standard?
A firewall and segmentation are part of what most standards and insurers' questionnaires ask for, but only a part. We document what we put in place so that you can answer those questions accurately; we do not issue a certification.
A firewall to replace or a network to segment? Tell us about it.
Describe the site and what you need. We reply in English or French.