Services
Seven ways CNSS helps organizations get business-critical network infrastructure designed right, secured right and supported locally, and helps their teams understand it. Delivered from Bonaire, and available for organizations and projects across Curaçao and Aruba.
Network design & architecture
A network that has grown one switch at a time usually works until the day it does not. CNSS designs infrastructure with a documented architecture: clear layers, deliberate segmentation, redundancy where it matters and room to grow without a rebuild. For larger environments that includes modern fabrics such as VXLAN EVPN.
When to call
- The network has grown organically and nobody has a current diagram
- A new building, office move or expansion is planned
- Outages or slowdowns cannot be traced to a single cause
- Switches or routers are reaching end of life and the replacement should fix the design too
Capabilities
- Campus and branch LAN architecture: core, distribution and access layers
- WAN, internet and multi-site routing design
- VLAN architecture, IP addressing and network segmentation
- High availability and redundancy: link aggregation, first-hop redundancy, dual-homed uplinks, controller HA
- Enterprise wireless integrated with the wired design
- Network modernization and infrastructure lifecycle planning
- Enterprise fabrics such as VXLAN EVPN, including multi-site designs
- Documentation: topology diagrams, configuration standards and change records
Deliverables
- Architecture document with topology, addressing and segmentation plan
- Bill of materials and phased implementation plan
- Configuration standards for switches and routers
- As-built documentation after implementation
Technologies
- Cisco Catalyst
- Arista
- Juniper
- HPE Aruba Networking
- Ubiquiti
- Netgear
- VXLAN EVPN
- BGP, OSPF, EIGRP, IS-IS
Network security
Network security is architecture before it is products. CNSS designs and implements firewall and segmentation structures that limit what an incident can reach, keeps remote access controlled, and hardens the switches and routers that everything else depends on.
When to call
- A firewall is being replaced, upgraded or migrated to another vendor
- An audit, insurer or parent organization asks for segmentation and policy documentation
- Guest, staff and operational traffic share the same network
- Remote access has grown ad hoc and needs a controlled design
Capabilities
- Firewall architecture and rule base design, including high-availability pairs
- Network segmentation: zones, VLANs and inter-zone policy
- Site-to-site and remote-access VPN
- Web application firewalls in front of public-facing services
- Centralized firewall management, logging and analytics
- Hardening of switches, routers and management access
Deliverables
- Security zone model and segmentation plan
- Documented firewall policy with change control
- VPN design and configuration
- Hardening checklist applied to network equipment
Technologies
- FortiGate
- FortiWeb
- FortiManager
- FortiAnalyzer
- Cisco
- IPsec and SSL VPN
Enterprise Wi-Fi
Wireless problems are rarely solved by adding another access point. CNSS designs wireless networks from coverage and capacity requirements, separates guest and corporate traffic properly, builds in controller redundancy where availability matters, and resolves roaming and performance issues with measurement rather than guesswork.
When to call
- Guests or staff complain about coverage or dropped connections
- A property refresh or new building needs a wireless design
- Roaming between access points is unreliable
- Guest Wi-Fi shares the network with business systems
Capabilities
- Coverage and capacity design for offices, hotels, resorts, schools and healthcare sites
- Guest, staff and device network separation with the right authentication
- Wireless LAN controllers with high availability
- Roaming, channel and power optimization
- Troubleshooting of drop-outs, slow performance and interference
- Integration with the wired network: PoE budgets, VLANs and uplinks
Deliverables
- Wireless design with access point placement and channel plan
- Configured controller or cloud management platform
- Validation report after deployment
- Recommendations for wired-side changes where needed
Technologies
- Cisco Catalyst 9800 controllers
- HPE Aruba Networking
- Ubiquiti
- 802.1X and captive portal authentication
Network assessment
An independent, senior-level review of the network as it is today: configuration, security, resilience, lifecycle and documentation. The result is a clear picture of the risks and a practical roadmap.
The Network Assessment is CNSS's starting point for most engagements: an independent review with a prioritized roadmap.
What the assessment coversImplementation & migration
Implementation is where designs succeed or fail. CNSS plans migrations in stages, prepares configurations in advance, tests before cut-over and documents the result, so the change happens with as little disruption as the environment allows.
When to call
- Equipment is being replaced and the change should be planned, not improvised
- A firewall migration needs to happen without breaking existing access
- A move or expansion has a fixed date
Capabilities
- Switch, router and firewall refreshes
- Firewall migrations, including vendor changes
- Office moves and new site openings
- Staged cut-overs with rollback plans
- Infrastructure monitoring, configuration backups and lifecycle management
- Knowledge transfer to the internal team or IT provider
Deliverables
- Migration plan with stages, test criteria and rollback
- Prepared and reviewed configurations
- Cut-over support and post-migration checks
- As-built documentation and handover
Technologies
- Cisco
- Fortinet
- HPE Aruba Networking
- Ubiquiti
- ManageEngine OpManager
Senior network consulting
Some problems need a senior engineer for a day, not a new contract. CNSS provides Tier 3 troubleshooting, architecture reviews, second opinions on proposals and on-call specialist support that complements an internal ICT team or an existing IT provider, across whichever vendors the environment runs on.
When to call
- A persistent network problem has resisted the usual fixes
- A proposal or design needs an independent review before it is signed
- The internal team needs senior backup for a project or a period
Capabilities
- Tier 3 escalation for complex or persistent network problems
- Architecture and design reviews
- Independent second opinion on vendor proposals and quotes
- Specialist support for IT providers and MSPs serving customers on Bonaire
- Knowledge transfer and mentoring for internal ICT staff
- Documentation of existing environments
Deliverables
- Root-cause analysis with a written summary
- Review notes with clear recommendations
- Agreed support arrangement for ongoing escalation
Technologies
- Cisco
- Fortinet
- Arista
- Juniper
- HPE Aruba Networking
- Ubiquiti
- Netgear
Network & cybersecurity training
Practical technical training built on more than 25 years of real-world IT and network engineering experience. CNSS provides customized networking and cybersecurity training for organizations that want to strengthen the technical knowledge of their ICT teams and employees. Topics reach approximately CCNA level and are adapted to the organization's environment and learning objectives.
When to call
- The ICT team supports a network it did not design and wants to understand it properly
- Helpdesk or junior staff need a solid networking foundation
- The organization wants practical cybersecurity awareness for technical staff
Capabilities
- Networking fundamentals: TCP/IP, IPv4 and IPv6, addressing
- Switching, VLANs and segmentation
- Routing fundamentals and network paths
- Wireless networking concepts and troubleshooting
- Network security fundamentals: firewalls, segmentation, VPN concepts
- Cybersecurity awareness and secure network design principles
- Structured network troubleshooting
Deliverables
- On-site workshops
- Small-group training
- Technical knowledge sessions
- Customized company training
Documented by default.
Every implementation ends with a technical handover document, so the organization owns its network knowledge and the next engineer can take over without guesswork.
Documentation is written in Dutch, the working language of most organizations on Bonaire, or in English. The outline shown is the real chapter structure of a web application firewall handover document delivered to a government customer.
Handover document · example outline
- 01Version control and scope
- 02Platform overview
- 03Network topology and traffic flows
- 04Interfaces, VLANs and routing
- 05Firewall integration
- 06High availability and its verification
- 07Virtual servers, pools and policies
- 08SSL/TLS and certificate management
- 09Protection profiles and OWASP Top 10 coverage
- 10Bot mitigation, DoS and Geo-IP controls
- 11Logging and monitoring with FortiAnalyzer
- 12Support, licences and firmware
Let's talk about your network.
Planning new infrastructure, dealing with a network problem, reviewing security, or looking for an independent second opinion? CNSS can help.