What's included
- Network firewalls: edge, between sites and inside the data center; rule clean-ups, intrusion prevention, application control, VPN, high-availability pairs
- Load balancers: traffic spread across servers, health checks, SSL offload, failover between sites
- Web application firewalls: protection of websites and APIs from common attacks, bots and abuse, tuned so real users aren't blocked
- Web proxies: forward proxies for staff browsing with URL filtering and reports; reverse proxy managers that publish internal apps securely with automatic certificates
- Quarterly rule and policy reviews with a written report
Layers in front of an application
Text version of this diagram
- Visitors → Web application firewall
- Web application firewall → Load balancer
- Load balancer → App server 1 and App server 2
- Staff → Web proxy
- Web proxy → Firewall
- Firewall → Internet
Technologies
Cisco · pfSense · OPNsense · F5 BIG-IP · NetScaler · HAProxy · NGINX · Progress Kemp LoadMaster · Cloudflare · ModSecurity · Squid · Nginx Proxy Manager · Traefik · cloud load balancers and WAFs
Who it's for
- Companies with old or unmanaged firewalls
- Public websites and APIs facing attacks
- Offices that need web filtering for staff
What you get
- Design, installation and migration of rules
- WAF and load balancer configuration
- Quarterly rule review report
- 24×7 monitoring and changes on request
Questions
We have hundreds of old firewall rules. Can you clean them up?
Yes: we find unused and overlapping rules and remove them in stages, with your approval.
Will a WAF break our website?
We start in monitor mode, tune the rules, then switch to blocking.
Can you manage a firewall someone else installed?
Yes, after a review of its rules and firmware.