Network & firewall services in Waukesha County

Firewalls, switches, Wi-Fi and VPNs for offices in Hartland, Lake Country and the Milwaukee area. Designed by an enterprise network engineer, sized for a small business.

  1. 7ApplicationApp control, web filtering
  2. 6PresentationTLS inspection, certificates
  3. 5SessionVPN and remote access
  4. 4TransportFirewall policy, QoS
  5. 3NetworkRouting and segmentation
  6. 2Data linkSwitching, VLANs, Wi-Fi
  7. 1PhysicalCabling, racks, power
Network and security work spans all seven layers.

Problems we fix

If any of these sound familiar, the network is usually the cause.

  • Video calls freeze when the office is busy
  • Wi-Fi is strong in one room and gone in the next
  • Guests, cameras and staff share one network
  • Nobody knows the firewall's admin password
  • The firewall is out of support or out of date
  • Remote staff can't reach files at the office
  • A second location needs to connect to the first
  • An insurer or client is asking about your security

What's included

Every network project follows the same four steps.

  1. Assess

    An on-site walk-through, an inventory of your equipment, and a diagram of how things are connected today.

  2. Design

    Segments for staff, guests, phones and devices, firewall rules between them, and a Wi-Fi plan for your floor layout.

  3. Install

    New equipment is configured ahead of time and cut over after hours, with a tested way back if anything misbehaves.

  4. Document

    Final diagrams, commented configuration backups and admin credentials, handed to you.

What you keep

Configurations come commented, so the next engineer, or you, can read what each rule is for.

  • Network diagram, current and planned
  • Commented configuration backups for every device
  • Admin credentials, handed over securely
  • A one-page summary in plain English
# Guest Wi-Fi can reach the internet and nothing else.
config firewall policy
    edit 12
        set name "Guest-WiFi-to-Internet"
        set srcintf "guest"
        set dstintf "wan1"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "HTTP" "HTTPS" "DNS"
        set utm-status enable
        set nat enable
    next
end

Equipment we work with

Vendor-agnostic on purpose. The right answer is rarely the one on the brochure.

Firewalls

Fortinet FortiGate, Palo Alto Networks, Cisco

Switching

Cisco Catalyst and Nexus, Arista, FortiSwitch

Wireless

FortiAP and other enterprise access points

Routing and WAN

Cisco ISR and Catalyst 8000, Nokia SR OS

Try our free config generator

Setting up a Cisco switch or router yourself? Henderson's Cisco Config Generator builds a clean starting configuration in your browser. Nothing you type is sent anywhere.

Open the generator

Network questions

How long does a firewall replacement take?

For a typical small office, the cut-over itself takes a few hours and is scheduled outside business hours. Planning and pre-staging the new firewall happen beforehand, so the downtime window stays short.

Do I need to buy new equipment?

Not always. We start with what you have. If something needs replacing, you'll get a vendor-neutral recommendation and can buy it directly or through us.

Can you separate guest Wi-Fi from our business network?

Yes. Guest Wi-Fi, cameras, phones, payment terminals and staff devices can each live on their own segment with firewall rules between them.

Do you set up VPNs for remote employees?

Yes. We configure remote access VPNs and site-to-site VPNs between locations, with multi-factor authentication where your equipment supports it.

Which towns do you cover on-site?

In Wisconsin: Hartland, Pewaukee, Delafield, Oconomowoc, Sussex, Merton, Waukesha, Brookfield, Menomonee Falls, New Berlin, Wauwatosa and Milwaukee. In Illinois: Chicago and suburbs including Evanston, Skokie, Arlington Heights, Schaumburg, Oak Brook, Naperville and Lake Forest.

Get a free network review

Tell us how many people and locations you have, and what's frustrating you. We'll suggest next steps, even if that's "leave it alone."

Prefer email? [email protected]

You'll get a reply from Joseph, not a sales team.