Networks and security

🧩 The solution we implemented

Introduction of the NGFW firewall

• Implementing Sophos XGS 118 Advanced Firewall as a central security point

• Monitoring and filtering network traffic at application and user level

• Protect against intrusions, malicious connections and attacks from the internet

• Control access to internet services and external resources

• Secure separation of individual network segments

The solution is tailored to business and production environments where stability and security are key.

Security policies and network segmentation

• Definition of clear and transparent security policies according to roles and systems

• Network segmentation between:

  • administrative users

  • server infrastructure

  • video surveillance system

  • IoT and other connected devices

  • to a hosted network

This design significantly reduces security risks and limits the impact of potential incidents.

Connecting sites with IPSEC VPN

• Establish a secure and encrypted IPSEC VPN connection between sites

• Secure communication and real-time data transfer

• Centralised access to server services

• A single network environment regardless of the physical location of users

The solution enables stable operation even under heavy workloads and company growth.

Server infrastructure

• Setting up a virtualised server infrastructure on the VMware ESXi platform

• Separating individual services into virtual environments

• High availability and better capacity control

• Easy to upgrade and extend your infrastructure

The virtual environment provides a stable base for all business applications.

Backup system

• Centralised backup system

• Using Synology as a local storage environment

• Automated backups using Veeam

• Regular backups of virtual servers

• Rapid recovery in the event of an outage, fault or security incident

• Protection against data loss and ransomware attacks

Project results

By deploying a comprehensive network and security solution, the client gained:

• a secure and segmented network environment

• reliable connectivity between sites

• a high level of protection for business data

• a stable and scalable server infrastructure

• a reliable backup and recovery system

Conclusion

The Network Security and Connectivity project provides a solid basis for a stable and secure IT environment. The combination of an advanced firewall, VPN connections, virtualised server infrastructure and backups enables long-term data protection and supports the company’s continued growth.