Firewall basics for small and medium organisations

Many organisations rely on the basic router their internet provider installed. A properly configured business firewall is one of the most effective security investments you can make.

Block inbound by default

Nothing on the internet should be able to start a connection to your internal network unless you deliberately allow it. If a service must be reachable — a mail server or remote access — allow only that service, and preferably only from known addresses.

Control outbound traffic

Restricting which internal devices can reach which external services limits what malware can do. At minimum, block outbound traffic from devices that never need the internet, such as cameras and building controllers.

Segment the internal network

Use the firewall between VLANs so guests, cameras and staff devices cannot reach servers they have no reason to use.

Avoid risky shortcuts

• Do not forward ports to expose remote desktop or camera recorders to the internet.
• Change default administrator passwords and restrict management access.
• Remove rules that are no longer needed.

Keep it updated and watched

Apply firmware updates, back up the configuration, and review logs or alerts regularly.

See our network security services.