Business networking

What breaks networks in companies

The most common problems don’t come from a lack of hardware, but from choosing it at random. A network expanded “along the way” by successive technicians looks like this after a few years: switches from three vendors, access points placed wherever there was a socket, no segmentation, and a router whose firmware hasn’t been updated since it was bought.

The consequences are predictable and costly: an unpatched router is today one of the most commonly used ways into a company network. A publicly available exploit and a scanner are enough - no advanced attack required.

What we do differently

• an audit before buying anything - we replace what’s a bottleneck, not everything
• a single vendor where possible, because a mix makes diagnostics harder
• segmentation, so a failure or infection in one place doesn’t take down the whole company
• topology documentation that stays with us and with you

What network administration covers

• wired and Wi-Fi network configuration to requirements and good practice
• migration to a Mikrotik router - carried out as part of the rollout
• remote access for employees and contractors via VPN with MFA
• link sizing matched to the number of workstations and how the company works
• server room monitoring - temperature, humidity, power
• device oversight with alerts, before an outage reaches users

Requirements

Cabled network on the Ethernet standard, preferably Tp-Link switches. Wi-Fi on Ubiquiti or Mikrotik hardware. A Mikrotik router is required - we handle the migration. We monitor server rooms on Vutlan devices.

This list is closed on purpose: we support hardware we know inside out, instead of promising support for everything and learning on your network.

A typical case: Wi-Fi “slows down in the afternoon”

The ticket sounds like a link problem, and almost never is. In practice it’s access points set to the same channel, no separation of guest and company traffic, or devices that stick to a weaker signal instead of switching to a closer transmitter.

We start diagnosis with a measurement, not a hardware swap. A spectrum scan shows how many networks are competing in the same band - in an office building there can be dozens. Only with that data does it make sense to talk about transmitter placement and channel assignment.

Segmentation: what gets separated from what

An unsegmented network means the till, the camera, the printer and the accountant’s computer are all in one bucket. One device with an unpatched vulnerability - and cameras and printers get updates least often - is enough for an attacker to reach everything that network can see.

We split traffic into zones: workstations, servers, production and automation equipment, guest hardware. The rules between zones are explicit and documented, so during an incident it’s clear what could have been reached from an infected machine, and what couldn’t. Every auditor asks this question after an incident, and without segmentation there’s no good answer.

A guest on the company Wi-Fi is a separate network with no access to resources. It costs one setting and eliminates a whole class of problems.

Who this works for

Companies from a single office with 5 workstations to several locations. The more work depends on access to data - accounting firms, production with automation, trading companies with an ERP system - the bigger the difference between a designed network and one that “sort of works”.

Frequently asked questions about networking