Network security · Australia

Firewall configuration and management

A firewall is only as good as its rules. We design, review and manage firewalls, VPNs, network segmentation and Wi-Fi for Australian businesses, as a project or as part of managed IT.
Talk to us Firewall vendor guides

The problem

Why firewall configuration matters more than the brand

Most firewalls we review are capable devices running weak configurations. Rules added years ago for a project nobody remembers, remote access ports open to the internet, admin pages reachable from anywhere, firmware several versions behind and no record of why anything was set up the way it was.

The vendor matters less than how the firewall is designed and maintained. If you are new to the topic, start with what a firewall does for an Australian business and stateful vs stateless firewalls.

What we do

Firewall design

Zones, interfaces, routing and policy designed around how your business actually uses the network, for a new site, a replacement or a redesign.

Rules review

Every rule checked for purpose, scope and use. Unused and overly broad rules removed, the rest documented with an owner and a reason.

VPN and remote access

Remote access for staff with MFA, site-to-site VPNs between offices and cloud, and exposed services closed or put behind secure access.

Network segmentation

Staff, servers, guests, printers, cameras and other devices separated so a problem in one part of the network cannot easily reach the rest.

Wi-Fi

Business and guest Wi-Fi separated, access points placed and configured for coverage, and authentication tied to staff accounts where it makes sense.

Ongoing management

Firmware updates, configuration backups, change records, log review and regular rule reviews, as part of managed IT or as a standalone service.
Read more

How a firewall project runs

  1. 01

    Review

    Export and review the current configuration, network layout and remote access, and talk to the people who use it.
  2. 02

    Design

    Agree the target design: zones, segmentation, rules, VPN and Wi-Fi, written down before anything changes.
  3. 03

    Change

    Implement in planned change windows, with configuration backed up first and a rollback plan for each step.
  4. 04

    Document and hand over

    Updated network diagram, rule documentation and admin access recorded for your business.
  5. 05

    Manage

    Optional ongoing management: firmware, rule reviews, log review and changes as the business changes.

Vendors we configure

We work across the common next-generation firewall platforms used in Australia. For help choosing, read our NGFW buyer's guide for Australia.

Palo Alto

Palo Alto firewall configuration and ongoing management as part of managed IT security.
Read more

FortiGate

FortiGate firewall configuration and ongoing management for Australian small and mid-sized businesses.
Read more

Sophos

Sophos Firewall configuration and ongoing management for Australian small and mid-sized businesses.
Read more

Azure Firewall

Azure Firewall configuration and management for Australian businesses running workloads in Azure.
Read more

AWS Network Firewall

AWS Network Firewall configuration and management for Australian businesses running workloads in AWS.
Read more

UniFi

UniFi zone-based firewall configuration on Dream Machine and UniFi gateway platforms.
Read more

Signs your firewall needs attention

  • Nobody can explain what half the rules are for
  • Remote desktop or admin ports are open to the internet
  • Firmware has not been updated in months
  • Guests and staff share the same Wi-Fi network
  • The firewall was set up by someone who has since left
  • There is no configuration backup or network diagram
  • Staff connect to the office through an old VPN without MFA
  • Your insurer or a client has asked about network security

FAQ

Firewall configuration: common questions

Can you review our existing firewall without replacing it?

Yes. Most of the time a rules review and configuration clean-up is the right first step. We only recommend replacing hardware when it is out of support or cannot do what the business needs.

Which firewall brands do you work with?

We work with Palo Alto, FortiGate, Sophos, UniFi and cloud firewalls in Azure and AWS. If you use another platform, tell us and we will be clear about whether we can help.

Is firewall management included in managed IT?

Yes. Ongoing firewall, VPN and Wi-Fi management is part of our managed IT service. Larger projects such as a redesign or a new site are scoped separately.

Will changes cause downtime?

Changes are planned for agreed windows, with the configuration backed up first and a rollback plan for each step. Some changes cause a brief interruption, and we tell you in advance when they will.

Do we need a next-generation firewall?

Most businesses benefit from application awareness, threat prevention and secure remote access, which are standard on current business firewalls. The right model depends on users, sites, internet speed and remote access needs.

Related

Not sure what your firewall is doing?

Send us a note about your setup. We will tell you what a review would cover and what we would look at first.

Start a conversation How pricing works