Corporate networks

# Firewall and networks under control

MikroTik + UniFi engineering with site surveys, SD-WAN, segmentation and documentation ready for audits and expansion.

Best-fit industries

- [Education](<https://assist.com.br/en/industries/education>)

- [Hospitality](<https://assist.com.br/en/industries/hospitality>)

- [Healthcare](<https://assist.com.br/en/industries/healthcare>)

- [Corporate](<https://assist.com.br/en/industries/corporate>)

[Chat on WhatsApp](<https://wa.me/554832118451?text=Hi%21+I+came+from+%2Fen%2Fservices%2Fmanaged-firewall-sdwan+and+would+like+to+schedule+an+IT+assessment+with+ASSIST>) [Request a proposal](<https://assist.com.br/en/contact#fale-conosco>)

Projected availability

99.7%

Redundant links and power supplies configured.

  Carriers on SD-WAN

4

Smart multi-link routing proven in production.

  Perimeter monitoring

24×7

Firewall integrated with the NOC and continuous alerts.

When we're called in

## Signs it's time to revisit your support coverage

These scenarios help us demonstrate the SLA, governance, and user experience gains we deliver.

Recurring issue

### A perimeter that depends on a single link

One carrier outage takes the whole operation down — no failover, no balancing across links.

  Recurring issue

### No secure segmentation

Academic, administrative and guest traffic share the same network, exposing sensitive data.

  Recurring issue

### Rules with no owner and no history

A firewall full of accumulated exceptions nobody reviews, with no record of what changed or why.

Turning strategy into outcomes

## What changes in the first quarter

Governance, metrics, and processes designed so your operation doesn't fall back.

ASSIST delivery

### A redundant edge with SD-WAN

Multiple links with automatic failover and per-application routing, proven in production with up to four carriers.

  ASSIST delivery

### Segmentation and per-profile policies

Separate VLANs, QoS, a captive portal and access controls centralized in the firewall.

  ASSIST delivery

### A perimeter the NOC can see

Firewall integrated with Zabbix + Grafana monitoring, with alerts and traffic history.

Execution

## Deliverables that leave the slide deck

Documentation, spares, integrations, and governance delivered with the project.

### Core deliverables

- 01

Perimeter assessment

An inventory of links, rules and risks, with the proposed edge topology design.

- 02

Configured MikroTik firewalls

An edge with SD-WAN, site-to-site VPN and secure remote access under standardized policies.

- 03

VLAN segmentation

Rules per access profile, bandwidth control and a captive portal when the environment calls for one.

- 04

Rule documentation and handover

A commented rule base, diagrams and a guided handover to the internal team.

### ASSIST differentiators

- MikroTik and UniFi certified engineering

Specialists holding MTCRE, MTCTCE and UEWA certifications working onsite.

- Changes with a record and a rollback path

Rule changes go through controlled windows, with the reason logged and a way back prepared.

- Delivery connected to the NOC

The perimeter leaves deployment already integrated into ASSIST monitoring and ongoing support.

Stages

## Assessment, project, rollout, and continuous support

Every phase is documented, audited, and connected to ASSIST monitoring.

- 1

#### Assessment

An inventory of links, rules and perimeter risks, with a migration plan in safe windows.

- 2

#### Rollout

Firewall and SD-WAN configured alongside the current environment, with a controlled cutover and rollback ready.

- 3

#### Monitored operation

Continuous follow-up by the NOC, rule reviews and traffic reports.

### An edge designed for your operation

We map the contracted links, critical applications and access profiles to design the edge: how many links, which rules and what gets priority. Migration happens in controlled windows, with the old environment kept running until final validation.

### Rule governance and visibility

After the cutover, the firewall joins the NOC routine: alerts, periodic rule reviews and traffic reports that support audits and capacity decisions.

The edge works with the rest of the infrastructure: [Zabbix + Grafana monitoring](<https://assist.com.br/en/services/24x7-monitoring>) watches the perimeter and [managed IT support](<https://assist.com.br/en/services/managed-it-support>) handles day-to-day operations. See four-carrier SD-WAN in production in the [SOHO Floripa innovation hub case study](<https://assist.com.br/en/case-studies/soho-floripa>), and how segmentation serves [hospitality](<https://assist.com.br/en/industries/hospitality>) and [high-density school environments](<https://assist.com.br/en/industries/education>).

Quick case

## How SOHO Floripa gained predictability

Three blocks: starting point, what we executed, and the impact recorded.

Education

### SOHO Floripa

 Initial challenge

Delivering a dedicated 1 Gbps per room and network security for more than 300 users across an innovation hub with 34 rooms.

Solution implemented

Smart routing across four carriers, per-room security policies and remote monitoring with proactive support.

Result

More than 4 Gbps available with stable performance and an average response time under 30 minutes.

 [Read the full case study](<https://assist.com.br/en/case-studies/soho-floripa>)

FAQ

## Frequently asked questions

Does ASSIST supply the equipment?+

Yes. We can sell the equipment or provide it under a leasing model, with contingency stock and extended warranty. [Learn about equipment leasing](<https://assist.com.br/en/services/equipment-leasing>)

What if part of the infrastructure already exists?+

We reuse whatever meets standards. Otherwise, we present a technical and financial comparison for the upgrade.

Does the managed firewall cover VPN and remote access?+

Yes. We configure site-to-site VPN between locations and secure, per-profile remote access. For the ongoing protection layer, see [managed security](<https://assist.com.br/en/services/managed-security>)

Combine com

## Outros serviços que se complementam

Frentes que costumam funcionar bem junto deste serviço para resultados consistentes.

Services

### IT Management & Support (Outsourcing)

IT operations with remote and on-site support, preventive routines, and governance to reduce incidents and bring predictability to day-to-day work.

 [Ver serviço](<https://assist.com.br/en/services/managed-it-support>)

Services

### 24×7 Monitoring & NOC

Observability with alerts, dashboards, and operational response to cut downtime and anticipate failures across network and servers.

 [Ver serviço](<https://assist.com.br/en/services/24x7-monitoring>)

Services

### Network Deployment & Corporate Wi-Fi

Design and deployment of wired networks and corporate Wi-Fi with site surveys, documentation, and delivery ready to operate.

 [Ver serviço](<https://assist.com.br/en/services/network-deployment>)

Coverage

## Cities we serve

Local pages with coverage, SLA and city-specific context.

### Santa Catarina

- [Florianópolis](<https://assist.com.br/en/services/managed-firewall-sdwan/florianopolis-sc>)

- [São José](<https://assist.com.br/en/services/managed-firewall-sdwan/sao-jose-sc>)

- [Palhoça](<https://assist.com.br/en/services/managed-firewall-sdwan/palhoca-sc>)

- [Biguaçu](<https://assist.com.br/en/services/managed-firewall-sdwan/biguacu-sc>)

- [Tijucas](<https://assist.com.br/en/services/managed-firewall-sdwan/tijucas-sc>)

- [Joinville](<https://assist.com.br/en/services/managed-firewall-sdwan/joinville-sc>)

- [Blumenau](<https://assist.com.br/en/services/managed-firewall-sdwan/blumenau-sc>)

- [Itajaí](<https://assist.com.br/en/services/managed-firewall-sdwan/itajai-sc>)

- [Chapecó](<https://assist.com.br/en/services/managed-firewall-sdwan/chapeco-sc>)

- [Balneário Camboriú](<https://assist.com.br/en/services/managed-firewall-sdwan/balneario-camboriu-sc>)

- [Criciúma](<https://assist.com.br/en/services/managed-firewall-sdwan/criciuma-sc>)

- [Jaraguá do Sul](<https://assist.com.br/en/services/managed-firewall-sdwan/jaragua-do-sul-sc>)

- [Brusque](<https://assist.com.br/en/services/managed-firewall-sdwan/brusque-sc>)

- [Lages](<https://assist.com.br/en/services/managed-firewall-sdwan/lages-sc>)

- [Itapema](<https://assist.com.br/en/services/managed-firewall-sdwan/itapema-sc>)

- [Camboriú](<https://assist.com.br/en/services/managed-firewall-sdwan/camboriu-sc>)

- [Tubarão](<https://assist.com.br/en/services/managed-firewall-sdwan/tubarao-sc>)

### Rio Grande do Sul

- [Porto Alegre](<https://assist.com.br/en/services/managed-firewall-sdwan/porto-alegre-rs>)

- [Canoas](<https://assist.com.br/en/services/managed-firewall-sdwan/canoas-rs>)

- [Gravataí](<https://assist.com.br/en/services/managed-firewall-sdwan/gravatai-rs>)

- [Novo Hamburgo](<https://assist.com.br/en/services/managed-firewall-sdwan/novo-hamburgo-rs>)

- [São Leopoldo](<https://assist.com.br/en/services/managed-firewall-sdwan/sao-leopoldo-rs>)

- [Cachoeirinha](<https://assist.com.br/en/services/managed-firewall-sdwan/cachoeirinha-rs>)

- [Esteio](<https://assist.com.br/en/services/managed-firewall-sdwan/esteio-rs>)

- [Sapucaia do Sul](<https://assist.com.br/en/services/managed-firewall-sdwan/sapucaia-do-sul-rs>)

- [Alvorada](<https://assist.com.br/en/services/managed-firewall-sdwan/alvorada-rs>)

- [Viamão](<https://assist.com.br/en/services/managed-firewall-sdwan/viamao-rs>)

- [Guaíba](<https://assist.com.br/en/services/managed-firewall-sdwan/guaiba-rs>)

- [Campo Bom](<https://assist.com.br/en/services/managed-firewall-sdwan/campo-bom-rs>)

- [Estância Velha](<https://assist.com.br/en/services/managed-firewall-sdwan/estancia-velha-rs>)

- [Sapiranga](<https://assist.com.br/en/services/managed-firewall-sdwan/sapiranga-rs>)

### Paraná

- [Curitiba](<https://assist.com.br/en/services/managed-firewall-sdwan/curitiba-pr>)

- [São José dos Pinhais](<https://assist.com.br/en/services/managed-firewall-sdwan/sao-jose-dos-pinhais-pr>)

- [Colombo](<https://assist.com.br/en/services/managed-firewall-sdwan/colombo-pr>)

- [Pinhais](<https://assist.com.br/en/services/managed-firewall-sdwan/pinhais-pr>)

- [Araucária](<https://assist.com.br/en/services/managed-firewall-sdwan/araucaria-pr>)

- [Campo Largo](<https://assist.com.br/en/services/managed-firewall-sdwan/campo-largo-pr>)

- [Almirante Tamandaré](<https://assist.com.br/en/services/managed-firewall-sdwan/almirante-tamandare-pr>)

- [Fazenda Rio Grande](<https://assist.com.br/en/services/managed-firewall-sdwan/fazenda-rio-grande-pr>)

- [Piraquara](<https://assist.com.br/en/services/managed-firewall-sdwan/piraquara-pr>)

- [Quatro Barras](<https://assist.com.br/en/services/managed-firewall-sdwan/quatro-barras-pr>)

Next step

## Let's design the network for your operation

We align coverage, segmentation and redundancy in a NOC-led assessment.

Send a short briefing and get the next steps within 48 business hours.

[Chat on WhatsApp](<https://wa.me/554832118451?text=Hi%21+I+came+from+%2Fen%2Fservices%2Fmanaged-firewall-sdwan+and+would+like+to+schedule+an+IT+assessment+with+ASSIST>) [Request a proposal](<https://assist.com.br/en/contact#fale-conosco>)
