AI-Native Consulting

Infrastructure Solutions

Move, modernize and run

Microsoft Solutions

AWS

Infrastructure Services

Data Center Migration

Business Resilience

Keep the business running

Business Continuity

IT Disaster Recovery

Crisis Management

Cyber Security

Managed Services

Co-managed, not outsourced

Home/Infrastructure Services/Firewalls and Security Appliances

Firewalls and Security Appliances

We're not sure our firewall rules still match how the business works.

For CISO, CIO, network and security teams

Talk to us about thisHow it works
First, you receiveAssessInventory and lifecycle findings · A recommendation · A fixed-scope proposal for the build
Timing and scopeStart with a fixed-fee assessment of the platforms in scope. Durations and methods are confirmed during scoping.
What happens nextA written recommendation. If you proceed, a scoped proposal for the next stage.

Firewall rule sets grow for years without review, and appliances age out of support. Unused and overly broad rules widen the attack surface, and replacing firewalls is risky without a clean, tested policy. We review the rule base, configuration, lifecycle and high availability, then clean up, migrate or consolidate, and, if you want us to, keep firmware current with periodic rule reviews.

How we work

What we do

Open a step to see what happens and what you receive.

Platforms we support
  • Fortinet FortiGate
  • Palo Alto Networks
  • Cisco ASA and Firepower
  • Check Point (Conditional)
  • SonicWall (Conditional)
  • OPNsense (Conditional)

Conditional platforms are supported, subject to a scoping review of version, licensing and vendor support status, confirmed before we commit to the work.

Assess (fixed fee)
  • Rule-base and configuration review
  • Lifecycle and high-availability check

You receive: findings on the platforms in scope, a recommendation and a fixed-scope proposal.

Build (fixed scope)
  • Firewall replacement or consolidation
  • Policy clean-up and migration

You receive: validated platforms, handed over with documentation and runbooks.

Support (optional, ongoing)
  • Firmware updates
  • Periodic rule reviews

Each step stands on its own. Support is not required after a Build.

Typical projects
  • Firewall replacement and policy migration
  • Rule-base clean-up and documentation
  • High-availability design and testing
  • Segmentation for data center and branch networks

Want to know what this would look like for you?About 30 minutes with a practitioner from the practice that does the work. You’ll leave with a clear view of your next step.

Book a 30-minute conversation

Outcomes

What you can expect

Implementation

  • A cleaner, documented rule base
  • Supported, highly available appliances
  • Policy that matches the business today

Is this right for you?

Tick what sounds familiar

Select the needs that apply. We’ll collect them here so you can review the fit.

DeliverablesDeliverables by phase (4)

Assess

  • Inventory and lifecycle findings
  • A recommendation
  • A fixed-scope proposal for the build

Build

  • Documentation and runbooks at handover

Good to know

Questions leaders ask

Do you support our platform?

Standard platforms, yes. Conditional platforms, yes, subject to a scoping review of version, licensing and vendor support status that we confirm before we commit. If a platform is not listed, we will confirm whether we can take it on.

What do we get from the assessment?

Findings on the platforms in scope, a recommendation and a fixed-scope proposal for the build. It is fixed fee and stands on its own.

Can you supply the hardware?

Yes. Kalosys provides hardware, procurement and ongoing maintenance as part of its engagements where needed, confirmed in the proposal.

Is Support required after a Build?

No. Each step stands on its own.

Not ready to talk yet?

Take this with you

Checklist · free

Infrastructure health checklist

A quick look at the capacity, support and lifecycle risks in your estate.

Get the checklist

Related offerings

Often paired with

Security Audit and Readiness Assessment

“Where do we stand against our framework, and what do we fix first?”We assess your controls against the framework your auditor, customer or regulator uses, such as SOC 2, ISO 27001, HIPAA, PCI DSS 4.0, CMMC or NIST CSF, or against good practice if none is formalized yet. Learn more

Penetration Testing

“A customer, auditor or underwriter needs a current, credible test report.”We test the applications, networks or cloud environments you agree in scope, manually as well as with tools, inside written rules of engagement and agreed testing windows around your release cadence. Learn more

Networking

“Our network has grown site by site, and nobody has the full picture.”Campus, branch and data center networks often span several vendors and years of change. Learn more

Talk with our team

Talk to us about Firewalls and Security Appliances

Tell us the decision, deadline or problem in front of you.

  1. A reply from the practice that does the workThe practitioners who would deliver it.
  2. A short conversationWhat needs to happen, and by when.
  3. A written proposalWhat you would receive, how long it takes and the fee, before you commit.

No cost, no obligation.

Loading the form…

Prefer to ask now?