Back to case studies
  • Retail group
  • Infrastructure

Network and security across six sites

Rebuilding a six-site network and the security around it, without closing a single branch for a day.

scott rodgerson PSpf XgOM5w unsplash

The challenge

Every device at every branch sat on one flat network, remote access was a shared password, firewall rules had grown by accident over years, and backups ran to a disk nobody had ever restored from. An insurance audit failed, which is how the conversation started.

What we built

We redesigned the network with segmentation per function, resilient links between sites and secure remote access behind MFA. Servers were consolidated onto managed virtualisation with patching and immutable, tested backups.

Monitoring and alerting now cover every site, and the estate is documented with runbooks the client's own IT staff use. We handed over training and a rehearsed incident plan, and continue to manage patching and monitoring.

Unplanned site outages
0
Since the new network went live.
Tested restores
Monthly
Backups are verified by restoring, not by a green tick.
Remote access behind MFA
100%
Shared credentials removed entirely.

What it runs on

  • VLAN segmentation
  • Site-to-site VPN
  • MFA / SSO
  • Proxmox
  • Immutable backups
  • Zabbix

Start a project

Have a similar problem?

We will tell you what we would do for your constraints, on a 30-minute call.

Free 30-minute call. NDA on request.