IT for operating businesses
Multi-Site Firewall Deployment
Security policies do not bend the further you get from HQ. How we standardized firewalls across a 50-site network.
Defining the Standard
Security cannot be maintained in an IT environment where every branch makes its own decisions. The endpoint at the checkout line must be subject to the rules in the central rack.
Configuration and Auditing
New devices are imaged at HQ before heading out to the field. This eliminates surprises during installation. Below is a typical branch rule set example:
# Branch default policy
iptables -P INPUT DROP
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
Continuous Operations
The job doesn’t end when hardware is delivered. The monthly retainer is billed upfront, and signed callouts run as needed.
