1. Perimeter
Firewall, opening rules, exposed services. Most incidents we find start with a port opened for a demo two years ago and never closed.
Cybersecurity · Stormshield
Assess. Secure.
Supervise.
A badly configured firewall lets more through than an open door. We design, harden and monitor your network security, with equipment we master and someone on site.
Four layers
What we check, in order
Each layer is verified on site, then monitored. No layer is taken on trust.
2. Segmentation
Guest, business, administration and cameras on separate networks. A compromised camera must not reach the accounting server.
3. Filtering and DNS
Malicious domains blocked at the resolver, not only at the browser. Phishing pages stop resolving before someone clicks.
4. Supervision
Logs collected, alerts qualified, someone to call. An alert nobody reads protects no one.
Equipment we deploy
- Stormshield firewalls: SNS range, configured and documented by us, with the rules explained in plain language.
- Segmented networks on Ubiquiti UniFi and Cisco switching.
- Filtering DNS for guests and staff, category-based.
- Log collection and SIEM for the sites that need evidence, not just alerts.
Hardened, then monitored
| Risk | Our answer |
|---|---|
| Open ports forgotten | Rule audit and cleanup, documented |
| Guest WiFi reaching servers | VLAN separation and firewall rules |
| Phishing by e-mail | DNS filtering, awareness, reporting |
| Nobody reads the alerts | Qualified alerting and a named contact |