Network services
We design and build wired, wireless, and wide-area networks with a security mindset, from the physical cabling to the links between your sites.
What we do
Ten network services
For each service, we describe the work we do and what you get at the end.
Network security
4 services
-
Firewall and VPN
We design, install, and configure next-generation firewalls, together with VPN for site-to-site links and remote access.
What you get Solution design, rule set, VPN with multi-factor authentication, 30 days of tuning, and handover to your administrators.
-
Network access control (NAC)
Only known, compliant devices can connect to the network. Unknown devices are placed in an isolated zone.
What you get An inventory and profile of every connecting device, and access rules by device type.
-
Network segmentation
We split a flat corporate network into zones, so that one infected device cannot reach the entire network.
What you get Documentation of the current network, a zone model with rules between zones, and a final test.
-
SD-WAN
We connect multiple sites with a network that manages several internet links intelligently and gives priority to critical applications.
What you get Network analysis and design, rollout at every site with central management, and rules for traffic prioritization and failover.
Infrastructure
4 services
-
Switching and routing
We design and build the switching and routing infrastructure of your local network, with redundancy.
What you get Topology design and VLAN structure, equipment supply, configuration and installation, and documentation.
-
Data center and backbone network
We design and build high-bandwidth data center and campus backbone networks with segmentation built in.
What you get Architecture design, equipment supply, installation and configuration, and handover documentation.
-
Fiber backbone and cabling
We design and build the physical network layer, inside buildings and between them.
What you get Cabling design, installation and test measurements, and documentation and labeling of existing cable routes.
-
Wi-Fi network with on-site survey
We build enterprise wireless networks based on an on-site survey carried out with our own measurement equipment, with separate networks for guests, staff, and devices.
What you get Coverage map, installation with central management, and documentation.
Special requirements and operations
2 services
-
Broadcast and event networks
We build networks for live broadcasts of concerts, performances, and university events, in up to 4K resolution.
What you get Assessment of requirements and venues, separation and prioritization of broadcast traffic, and a test broadcast.
-
Network maintenance
We keep your network and security devices up to date under a custom agreement.
What you get Firmware and software updates, configuration backups, and a change log.
Security mindset
Protection is part of the network
We used the approaches below in the networks of the Hungarian Dance University and the Municipality of Gödöllő.
Segmented network
Critical systems and web servers go into separate VLANs with strict firewall rules. On the wired and the Wi-Fi network alike, every group, building, and function that can be separated gets its own VLAN.
Filtering between VLANs
A VLAN is only a logical separation: if routing between segments is unfiltered, they can reach each other freely. That is why the firewall routes the traffic between VLANs and inspects it with antivirus scanning, IPS, and file filtering.
Protected wireless traffic
Wi-Fi traffic is protected by web filtering, antivirus scanning, DNS filtering, file filtering, application control, and SSL/SSH inspection. IPS and WIDS profiles monitor connections to SSIDs that are visible from outside the building.
Central visibility
Logs from the network and security devices are collected in one place, so faults can be traced back. You see in real time when a switch or access point loses its connection or a physical port fails.
References
Two networks we rebuilt
ARLITECH is Hungary’s first and longest-standing Fortinet partner, and we have been selling the vendor’s products since 2007. Both networks were built on Fortinet devices.
-
Hungarian Dance University
We rebuilt the shared network of the university, the secondary school, the dormitory, and the studio, moving it from 1 Gbps to a 10 Gbps star-topology fiber backbone, and brought the internet lines of several providers into a single SD-WAN zone. Traffic is managed with dynamically changing priorities, so online broadcasts always get the bandwidth they need.
Result The earlier dropouts and outages have stopped, and the network can be operated from a single interface.
-
Municipality of Gödöllő
We deployed a redundant firewall system and replaced every switch with one managed from the firewall, so nothing has to be configured locally. The firewalls of the external institutions, kindergartens, and nurseries were also brought under central management, and the phone system got its own VLAN with guaranteed bandwidth.
Result Network bandwidth grew by an order of magnitude, and response times for reaching the servers and the internet went down.
Frequently asked questions
The questions we hear most
Do we have to shut the network down during the changeover?
We roll out segmentation on a schedule and in a way that does not disrupt operations. Access control starts in monitor mode and is enforced gradually. When we replace a firewall, we cut over in stages, with a rollback plan for every step. The first steps of segmentation are covered in our article on segmenting the internal network.
Why does Wi-Fi need an on-site survey?
How a wireless signal travels depends on walls, floor slabs, metal surfaces, and neighboring networks, so it cannot be designed reliably from a floor plan. The survey shows where access points are needed, and the capacity plan shows how many devices have to be served at the same time. After installation, we check the coverage with a final measurement. Protecting the wireless network is covered in our article on Wi-Fi security in the enterprise.
Which vendors do you work with?
Our designs are vendor-neutral: we choose the solution to fit the environment and the equipment you already have. For firewalls, we install Fortinet FortiGate, Check Point, and SonicWall devices. For switching, routing, and data center networks, we also work with Arista equipment. In the reference projects, the switches and Wi-Fi access points were Fortinet devices as well (FortiSwitch, FortiAP).
Do you also maintain networks?
Yes. We always take on operations work within a scope agreed with the client. Maintenance can also include periodic rule set reviews and handling vendor support cases. If someone else built the network, we take on its maintenance after an assessment.
