Services

Firewall

The firewall is where you decide what may enter the network and what your network may leave. VYN IT sets it up so office, guests, VPN and the few services that must be reachable from outside stay apart.

The firewall is where you decide what may enter the network and what your network may leave. VYN IT sets it up so office, guests, VPN and the few services that must be reachable from outside stay apart.

An appliance that was only powered on filters little. Rules need a purpose, VPN needs a second factor, and the logs need a person who reads them on business days. The device records continuously. That is not a staffed night shift.

What we do

  • Rules with a purpose

    Every allow rule gets a name and a reason. “Any to any” and leftovers from an old move are removed or replaced.

  • Separate networks

    Office, guests, the till, servers and building systems sit in their own segments, even behind one internet line.

  • VPN for remote work

    Access for named people, with multi-factor where the device supports it, and only to the applications that must be reached from outside.

  • Sites and providers

    When a second line or another site is added, it stays clear which path carries the business software.

  • Replacing the firewall

    Swapping an end-of-life box is a window with a fallback, not an evening without a note of which rule the business application needs.

Technologies and solutions

  • Stateful firewall

    Sessions and explicit allows instead of port ranges nobody has needed for years.

  • VLAN and Wi-Fi

    Separate wireless networks for guests and the business, with the same boundaries on the switch.

  • VPN

    Site-to-site or remote access, depending on whether you connect a branch or individual people.

  • DNS and outbound traffic

    What workstations resolve and where they may connect is part of the rule set, not an accident of the router.

  • Logging

    The firewall records continuously. Someone reviews it on business days, not on an unstaffed night shift.

What you gain

  • Fewer open doors

    What is reachable from outside has a reason. The rest is closed.

  • Guests stay guests

    An open Wi-Fi cannot reach file shares and the till.

  • Rules can be explained

    At the next replacement or outage, nobody has to guess which line allows the application.

  • VPN is not standing admin

    Home office sees the systems it needs, not the whole network with every right.

Typical problems

  • The box from years ago

    Firmware is old, and the admin password belongs to someone who no longer works there.

  • Every exception stays

    A temporary allow for a supplier became permanent.

  • One Wi-Fi for everything

    Guests, scanners and the office share a name and a password on the fridge.

  • Logs nobody reads

    Attacks or a full disk on the appliance show up only when VPN stops.

How we work

  1. 1

    Advice

    We record which services are reachable from outside, which sites exist and who uses VPN.

  2. 2

    Planning

    The target separates networks and names the rules that must stay because an application needs them.

  3. 3

    Implementation

    The change happens in a window, with a way back to the old box until the new one carries the load.

  4. 4

    Optimization

    Exceptions without an owner are removed. Firmware and admin accounts are brought up to date.

  5. 5

    Ongoing care

    Further changes go through a request, not another any-to-any on a Friday afternoon.

Frequently asked questions

Is the provider’s router enough?

Often for a household. For an office, VPN, separate guests and an application that needs specific paths, usually not. We say so from what you run, not as a blanket rule.

Can you keep the current firewall?

Yes, if it still receives updates and can do the networks and VPN types you need. A replacement follows when firmware ends or the rule set no longer holds.

Does continuous logging mean a night shift?

No. The firewall records continuously. Unusual events are read and handled Monday to Friday. Call +43 1 996 96 33 during those hours.

Who owns the admin account?

Your company. At least two people must be able to administer the device, so an absence or a change of partner does not depend on a private login.

What if a rule blocks the business software?

We return to the last working configuration and find the one allow that is missing. An open any-rule is not the repair.

Contact and advice

Call us or send an inquiry. We reply on business days and say whether and how we can help.

+43 1 996 96 33