Firewall and network security management
We offer a comprehensive managed firewall, router and VPN solution that ensures the security of the client's internal network, controlled access to external networks, secure remote work capability and modern network management (DHCP, DNS, VLAN). The service focuses on proactive security management and continuous network reliability.
Service packages
Prices exclude VAT. Price applies per device.
Business hours Mon–Fri 08:00–18:00. 24/7 SLA available as an additional service.
- MonitoringAvailability
- Response timeNext business day
- Network servicesDHCP + DNS
- VPN solution—
- IDS / IPS protection—
- Log managementLocal
- UpdatesRegular
- MonitoringAvailability + Load
- Response time4 hours (business hours)
- Network servicesDHCP + DNS
- VPN solutionVPN + MFA
- IDS / IPS protection—
- Log managementCentral (3 months)
- UpdatesRegular
- MonitoringOS + Applications + IDS/IPS
- Response time2 hours (business hours)
- Network servicesDHCP + DNS + VLAN
- VPN solutionVPN + MFA
- IDS / IPS protectionYes
- Log managementCentral (12 months)
- UpdatesRegular
Technical scope
Security
Network traffic management
Creating firewall rules, port forwarding and traffic filtering according to the client's needs and security requirements.
Intrusion detection and prevention (IDS/IPS)
In the Premium package, we deploy IDS/IPS solutions that analyse network traffic in real time, identify malicious patterns and block potential attacks.
Remote work
Secure remote work (VPN)
Creating and managing encrypted VPN connections that allow employees to securely access company internal network resources.
Multi-factor authentication (MFA)
Additional protection for VPN connections that helps prevent unauthorised access even if a password is leaked. We support both DUO and standard TOTP applications such as Google Authenticator and Microsoft Authenticator.
Branch office connectivity
Setting up and managing Site-to-Site VPN tunnels between different locations, enabling branch offices to be securely connected into a unified network infrastructure.
Network
DHCP management
Dynamic IP address allocation within the internal network and static IP reservation management for devices such as printers, servers, security cameras and other network devices.
DNS management
Managing the local name resolution service to simplify internal network service use, improve query speed and, where needed, block malicious domains.
Network segmentation (VLAN)
Creating and managing virtual isolated networks to separate critical systems — such as servers, cameras and IoT devices — from regular users and guest networks.
Configuration management and backup
Unlike conventional data backup, network device management focuses primarily on the integrity, traceability and recoverability of configurations.
Central version control
For all service packages, device configurations are backed up to Spin TEK's central version control system.
Recoverability
The history of configuration changes is retained, enabling the device to be restored to a previous working state in the event of a failure or human error.
Automatic backup
A copy of the device configuration is made after every change.
Auditability
The change history allows tracking of when, what and why configuration changes were made, supporting transparency, troubleshooting and future auditing.
Responsibilities
Unlike NAS and VPS services, the firewall hardware belongs to Spin TEK — the client does not need to purchase, replace or manage the device lifecycle.
| Task | Spin TEK | You |
|---|---|---|
| Hardware procurement and ownership | ✓ | |
| Software configuration and updates | ✓ | |
| Firewall rule management | ✓ | |
| Monitoring and fault notification | ✓ | |
| Replacement device on failure | ✓ | |
| Lifecycle upgrade (EOL) | ✓ | |
| Rule changes and user management | hourly rate | |
| DUO licence fees (if chosen) | ✓ |
Additional services
All work outside regular maintenance and the selected package scope is carried out at the hourly rate. Prices exclude VAT.
Examples of additional work
Interested? Describe your needs and request a quote.
Request a quote