Network security
Network security is architecture before it is products. CNSS designs and implements firewall and segmentation structures that limit what an incident can reach, keeps remote access controlled, and hardens the switches and routers that everything else depends on.
What CNSS delivers
Firewall architecture, segmentation, VPN and secure remote access, web application firewalls, policy design and hardening of the network itself.
Firewall architecture and rule base design, including high-availability pairs
Network segmentation: zones, VLANs and inter-zone policy
Site-to-site and remote-access VPN
Web application firewalls in front of public-facing services
Centralized firewall management, logging and analytics
Hardening of switches, routers and management access
When to call
- A firewall is being replaced, upgraded or migrated to another vendor
- An audit, insurer or parent organization asks for segmentation and policy documentation
- Guest, staff and operational traffic share the same network
- Remote access has grown ad hoc and needs a controlled design
Deliverables
- Security zone model and segmentation plan
- Documented firewall policy with change control
- VPN design and configuration
- Hardening checklist applied to network equipment
Technologies
- FortiGate
- FortiWeb
- FortiManager
- FortiAnalyzer
- Cisco
- IPsec and SSL VPN
Let's talk about your network.
Planning new infrastructure, dealing with a network problem, reviewing security, or looking for an independent second opinion? CNSS can help.