SCROLL
NETWORKS AND FIREWALLS

Business networks and firewalls: your office network designed and protected

A configured firewall, a separate guest Wi-Fi, VPN access from home and updates handled. We tidy up the network and document it, so you know what is there and who can get in.

Reply within one working day Free initial review Data in EU data centres
150
Projects in our portfolio
9 years
In business, since 2017
1 day
Reply (working day)
IN SHORT

Business network security in short

UreTech designs, installs and manages networks and firewalls for SMEs and professional firms: next-generation firewalls, VPN for remote staff, separate business and guest Wi-Fi, network segmentation and device updates. At the end you get the network diagram and the list of measures in place, useful for customers’ NIS2 questionnaires too.

We start with a free review of your current network and reply to requests within one working day.

What many office networks look like

And why they are a risk.

One network for everything

PCs, servers, printers, cameras and guests’ phones on the same network. One infected device can see all the others.

The ISP router as firewall

Ports opened years ago for an outside technician and never closed.

Improvised remote access

Remote desktop exposed to the internet or remote-control tools with shared passwords.

No documentation

Nobody knows which devices are there, with which passwords and which firmware.

What we do

From network map to ongoing management.

Network review

Inventory of devices, open ports, Wi-Fi and remote access.

Firewall

Next-generation firewall with filtering, documented rules and logs.

Segmentation

Separate networks (VLANs) for servers, offices, guests, printers and cameras.

Business Wi-Fi

Planned coverage, isolated guest network, access with personal credentials.

VPN and remote access

VPN with two-factor authentication instead of open ports.

Updates and monitoring

Up-to-date firmware and alerts on important events.

FIREWALL

Which firewall an office needs

The right firewall depends on how many people there are, how much bandwidth you use and what it has to control. We work with the firewalls most used by SMEs and with open-source options such as OPNsense, and we choose on your case, not on the brand.

OfficeWhat it usually needs
Up to 10 peopleCompact firewall with VPN and content filtering, Wi-Fi with a separate guest network
Around 20 peopleFirewall with traffic inspection and active security licences, VLANs for servers and printers, managed switches
Several sitesA firewall at each site linked by VPN, the same rules everywhere, central management
Servers exposed to the internetA separate zone (DMZ) or, better, services moved to a managed server in a data centre

Basic measures, in order of priority

  • Close open ports that are not needed and replace exposed remote desktop with a VPN.
  • Separate the guest network and device network (printers, cameras) from PCs and servers.
  • Turn on two-factor authentication for VPN and admin panels.
  • Update firewall, switch and access point firmware on a schedule.
  • Keep logs and an up-to-date device inventory.

Networks and NIS2

NIS2 applies in Italy through Legislative Decree 138/2024, in force since 16 October 2024 (Gazzetta Ufficiale, checked on 9/11/2026). It mainly covers medium and large companies in specific sectors, but many SMEs receive questionnaires from customers about firewalls, access and updates. Network measures are part of our IT support contracts.

WI-FI AND HANDOVER

Business Wi-Fi and network documentation

Wi-Fi is the part of the network people complain about most and the one designed worst. We start from the office floor plan and where people work, then place the access points and configure separate networks: one for staff, with personal credentials, one for guests, isolated from everything else, and one for devices such as printers and cameras.

What we hand over at the end

  • The network diagram with firewall, switches, access points and separate networks.
  • The device inventory, with model, location and firmware version.
  • The list of firewall rules, with the reason for each one.
  • Admin credentials in an encrypted vault that you can access too.
  • The list of measures in place, ready to attach to customers’ security questionnaires.

With this documentation another technician can pick up the work without starting from scratch. If you want us to look after the network, it goes into the IT support contract with scheduled updates and checks.

How we work

Without stopping the office.

1

Free review

Network map, open ports, Wi-Fi and outside access.

2

Design

Firewall, switches, access points, separate networks and rules, with costs listed separately.

3

Preparation

We configure devices in advance, so the office switch-over is short.

4

Installation

Switch-over in an agreed window, evening or weekend.

5

Documentation and management

Diagram, rules and credentials handed over; updates and checks over time.

PRICING

Pricing, timing and evidence

The quote separates devices, firewall security licences (usually yearly), installation and management fee. The initial review is free and we reply to requests within one working day. In the Bologna area we install on site (IT support in Bologna); elsewhere we prepare the devices and schedule the visit.

On request we hand over a list of the measures in place, ready to attach to customers’ security questionnaires. For servers and backups on the network, see also server configuration and hardening.

WHO IT SUITS

Who it is for

The service is for offices of 5 to 100 people, professional firms and companies with several sites or staff working from home. It often starts with a concrete problem: Wi-Fi that does not cover the office, a security questionnaire from a customer, an intrusion attempt, or an outside technician who has gone and left a network with no documentation.

If you already have a firewall, we start by reviewing its rules and updates: sometimes fixing what is there is enough.

Business network and firewall FAQ

Usually a next-generation firewall with active security licences, two-factor VPN and separate networks for servers, offices and guests. We pick the model on bandwidth and services to protect.
For a home yes, for a business no. It does not separate networks, does not log what happens and often has forgotten open ports. We keep it as a modem and put the firewall behind it.
Splitting the network into separate parts, for example servers, offices, guests and cameras. If one device is infected, it cannot reach everything else.
With a VPN and two-factor authentication, instead of remote desktop exposed to the internet. Everyone has personal credentials, disabled when they leave the company.
If you fall under NIS2, directly. If you supply a company that does, the customer will ask for evidence on firewalls, access and updates. Either way you need documented measures.
Yes: we plan Wi-Fi coverage, install access points and managed switches and keep them updated along with the firewall.
It depends on people, sites and devices to replace. After the free review you get a quote with devices, licences, installation and management listed separately.
Firmware is checked every month and installed in an agreed window, starting with updates that fix known security flaws. We record the version and date of every update in the inventory.
A firewall chosen on real bandwidth does not. It slows things down when it is undersized for the line and the inspections turned on: that is why we measure traffic before choosing the model.

Let’s tidy up your network

Tell us how many people and sites you have and how you connect from outside. We reply within one working day.

  1. Leave your emailEverything else is pre-filled: just tap the areas you care about.
  2. We call you back within one working dayWe book a 30-minute video call, no commitment.
  3. You get a written noteWhat to do, in which order and the likely cost range.

All we need is your email

We write the message from the areas you tap. A person on our team replies.

Check the address: the @ or the domain is missing.

What should we review? Tap one or more areas (optional).

Free and with no commitment. We use your data only to reply: privacy notice.

Thank you , we have received your request.

We will email you within one working day to book the 30 minutes. If it is urgent, message us on WhatsApp.

Prefer to talk right away?

Mon–Fri 9:00–12:30 and 14:00–20:00 (CET).

A process to improve? Free feasibility review.

Request