Managed Protect
Managed firewall and network detection
If nobody has reviewed your firewall rules since it was installed, it's probably letting in more than you think. We configure it properly, keep it patched and watch the traffic behind it.
- Platforms
- Multithe major business firewall brands
- Firmware
- Scheduledupgrades tracked against vendor advisories
- External test
- [x]independent perimeter pentest
- Sites
- Multi-siteone policy across every office
01 / The problem
A firewall is only as good as its rules.
Rules pile up
Temporary rules become permanent and broad rules go unreviewed. The firewall slowly lets more through.
Firmware falls behind
Vendors patch serious firewall flaws often. An unpatched firewall is a known hole at the edge of your network.
Nobody watches inside
Once an attacker is past the perimeter, most firewalls don't see them move from machine to machine.
02 / What’s included
From ruleset to network detection.
Design and hardening
Least-privilege rules, with intrusion prevention, application control, encrypted traffic inspection and geo-blocking set up properly.
Ongoing management
Change requests, health monitoring, log review and troubleshooting, handled by our engineers.
Firmware and patching
We track vendor advisories and upgrade firmware on an agreed schedule, sooner for critical flaws.
VPN and site links
Site-to-site tunnels and remote access set up and maintained.
Network detection and response
NDR (network detection and response) watches traffic inside your network for signs of an attacker moving around.
External pentest
An independent test of your perimeter, so you have evidence it's locked down, not just configured.
[Placeholder: offer for this service, written by ITB]
03 / How it works
From audit to assurance.
- Audit We review your current configuration, rules and firmware and list the risks.
- Harden We remove old and overly broad rules and switch on the right protection features.
- Manage and watch Changes, firmware and health checks run on a schedule, with NDR watching inside.
- Test An external pentest checks the perimeter, and we fix what it finds.
Plenty of firewalls are installed. Far fewer are configured.
How ITB manages firewalls
04 / Why ITB
Configured, patched and proven.
Most firewall problems aren't the box. They're rules nobody reviews and firmware nobody updates. We do both, on a schedule.
| What it takes | Do it yourself | With ITB |
|---|---|---|
| Ruleset reviews | When someone remembers | On a schedule |
| Firmware upgrades | After the vendor advisory, eventually | Tracked and planned |
| Platform knowledge | One person, one platform | Engineers across the major platforms |
| Seeing inside the network | Not usually | NDR, feeding our SOC |
| Proof for auditors | Screenshots and hope | Change logs and an external pentest |
· 05 / Questions
Managed firewalls, plainly answered.
Q01 Which firewalls do you support?
The major business firewall platforms. We can take over the firewall you have, or help you choose a new one. The Solutions pages list the vendors we work with.
Q02 Can you manage several sites?
Yes. We manage multi-site set-ups, including hub-and-spoke and SD-WAN, with one consistent policy across every site.
Q03 What is NDR, and do we need it?
NDR (network detection and response) watches traffic inside your network, not just at the edge. It spots attackers moving between machines. It matters most when you have servers or devices that can't run endpoint protection.
Q04 What if we need an urgent change?
Emergency changes are handled as a priority. Every change is logged, so you have an audit trail.
Q05 Can you work with our IT team?
Yes. We offer fully managed, co-managed or support-only, depending on how much your team wants to keep.
Related services
Penetration Testing
Tests the perimeter we manage, and everything behind it.
See the serviceSWG / SSE / ZTNA
Protects people who work outside the office network.
See the serviceManaged SIEM / SOC
Firewall and NDR alerts, watched and acted on.
See the serviceVulnerability & Critical Patch Management
Patching for the rest of the estate.
See the service· [Placeholder]
[Placeholder] [Placeholder]
[Placeholder: written by ITB]