Network and security

The network nobody has to think about

A good network is one nobody mentions. We design, upgrade and secure campus and wide-area networks, data center networks, and the connections between your sites and the cloud, with particular care for the real-time traffic that shows every flaw.

Talk to an engineer

You might be here because

A firewall or WAN change is planned and you cannot afford for voice and video to suffer.
The firewall rule base has grown for years and nobody is sure what half of it is for.
You need to segment the network and are not sure what will break.
Sites complain about performance and the monitoring shows nothing wrong.

What the work includes

Campus and branch networks: Switching, routing and wireless for offices and campuses: new designs, hardware refreshes, and the upgrades in between.
Wide-area networks: The links between your sites and to the internet and cloud, including software-defined WAN. Designed for the applications that depend on them, and for lower carrier cost where that is possible.
Firewalls and remote access: New firewall deployments and replacements, remote-access VPN, and site-to-site tunnels. Migrations are rehearsed and rule sets are translated deliberately, not copied blindly.
Segmentation: Separating users, servers, phones, and devices that cannot protect themselves, with rules written from what each group actually needs to reach.
Rule and policy review: A firewall rule base read line by line: what is unused, what is too broad, what overlaps, and what nobody can explain.
Quality of service: Making sure voice and video are identified, marked and protected across every hop, including the hops that cross a firewall or a carrier.
Data center and cloud: Data center networking, and private connectivity from your network to cloud platforms, so applications are reachable from where people work.

Example scenario: a multi-site business

The new firewall that broke the phones every afternoon

The firewall project had gone well by every security measure. Two weeks later the help desk was taking daily complaints about call quality from the branches. The security team saw no blocked traffic. The voice team saw nothing wrong with the phone system.

Read what we did

What you get

Network diagrams that match what is installed
A change plan with a rollback step for every change
A rule-by-rule firewall record with the reason for each rule
Test results before and after each change

Technology we work on

Cisco routing, switching, wireless and firewalls, and Palo Alto Networks firewalls and remote access.

Questions we are asked

Can you replace a firewall without an outage?

We plan for a short, scheduled change window and rehearse the migration beforehand. Every step has a documented rollback, and we test the applications that matter, including voice, before the window closes.

Why involve voice engineers in a security project?

Because real-time traffic is the first thing a security change breaks and the hardest to diagnose afterward. Having both skills in one team removes the handoff where those problems hide.

Will you work with the equipment we already own?

Yes. Most engagements improve what is installed. We recommend replacing hardware only when it is the actual constraint.

Do you provide ongoing monitoring?

Our work is project-based: design, change, review and troubleshooting. We set up monitoring and hand it to your team or your managed service provider.

All articles

Network and security