---
title: "Firewall and network security"
description: "VLAN segmentation, written and documented traffic rules, secure remote access and a separate guest network. TP-Link Omada certified."
url: "https://doctor-pc.ro/en/firewall-si-securizare-retea"
category: "cyber"
language: "en-GB"
publisher: "Doctor PC Digital Solutions SRL"
---

# Firewall and network security

On a flat network, an infected laptop sees everything: servers, cameras, the till, the accountant's computer. Segmentation does not prevent infection, but it drastically limits how far it gets.

## What is included

- **Firewall configured for the need** — Rules written for the company's actual traffic, not the defaults left over from installation.
- **Network segmentation** — Servers, workstations, surveillance equipment and the guest network kept apart. A compromise stays in its segment.
- **Secure remote access** — VPN with two-factor authentication, instead of ports left open to the internet — the most common way in that we find.
- **Guest network** — Visitors and personal phones reach the internet, not the company network.
- **Monitoring** — Alerts on unusual traffic: connections to suspicious destinations, large transfers outside working hours.
- **Documentation** — Network diagram and firewall rules, written down. The next person to open the device understands what they see.

### Open ports

The most common problem we find at a first audit: remote access exposed directly to the internet so somebody can log in from home. Those ports are scanned automatically and continuously, from all over the world.

The answer is not to give up remote access, but to route it through a VPN with two-factor authentication. Same convenience, without the door left open.

### Why segmentation matters

Surveillance cameras, printers and smart devices are rarely updated and often run old software. On a flat network they become the way into everything else.

## Frequently asked questions

### We have a router from our internet provider. Is that enough?

For a home, yes. For a company with servers and client data, no: it has no segmentation, no useful logging, and cannot do VPN with two-factor authentication.

### Does segmentation complicate day-to-day work?

Not if it is designed around who needs to reach what. Users notice nothing; what changes is only what can reach what during an incident.

### What does network segmentation mean?

It means not every device can see every other. Surveillance cameras, staff computers, the guest network and production equipment sit in separate zones, so one infected machine does not reach everything.

### Can we work from home securely?

Yes, through a VPN configured on named accounts with two-factor authentication. Access can be limited to exactly what each person needs, rather than the whole network.

## Let's work out exactly what you need.

We look at the current situation, tell you what is worth changing and what can wait, then you get a quote with clear figures.

## Request a conversation

Write us a few lines about the situation in your company and we will come back with a concrete proposal.

*Form on the page. Alternatively: phone +40 770 767 226 or office@doctor-pc.ro.*

## Other services

We cover the whole chain, from infrastructure down to repairing a single device.