FortiGate policies
Define authorised application traffic and document the purpose, owner and review conditions of firewall rules.
Fortinet
Your Fortinet network, with rules people can understand.
Fortinet FortiGate for SMEs in French-speaking Switzerland: firewall rules, segmentation, site connectivity and documented administration with Sunitech.
SMEsat the heart of what we do
A dedicated contactwho knows your business
A local teamin French-speaking Switzerland
Suitable tools. Local support. A team close to you.
Geneva
Lausanne
Fribourg
Neuchâtel
Valais
Start with the connections your business needs.
A firewall sits between the applications, users and networks that need to communicate. A Fortinet FortiGate project starts by identifying those exchanges and the people who approve them. Sunitech helps SMEs in French-speaking Switzerland document their internet access, sites, remote users and internal services. The selected architecture should explain which flows are authorised, where they pass and how changes are reviewed.
VLAN segmentation
Separate user groups, servers, guest devices and technical equipment according to the exchanges they need.
Site connections
Prepare addressing, routing and supported secure tunnels between business locations with representative connectivity tests.
Staff access
Assess remote access and authentication options against the installed FortiOS version and your working practices.
Security profiles
Select inspection functions with their performance impact, licensing and subscriptions checked against the intended use.
Logs and configuration
Organise useful event records, administrative access and recoverable configuration copies for maintenance and incident review.
How we support you.
From initial scoping to ongoing support, the agreed work and each party’s responsibilities are defined with you before implementation.
Network review and mapping
Identify sites, equipment, traffic and dependencies before defining priorities.
Deployment and configuration
Prepare changes, test configurations and organise commissioning.
Wi-Fi and coverage
Assess usage, coverage areas and mobility needs. The required measurements are agreed during scoping.
Security and segmentation
Separate uses, restrict traffic and define access rules with the people responsible.
Monitoring and maintenance
Agree monitoring checks, updates and incident-handling arrangements.
Support and development
Document the network and plan its next developments with your teams.
Solutions suited to your sector.
We start with your teams’ needs, business applications and organisational constraints.
Professional services
Share client files between colleagues, with appropriate access and documents that are easy to find.
Commerce & retail
Keep tills and connections working, including across multiple shops.
Healthcare & medical
Protect patient records and maintain the tools needed for consultations.
Industry & manufacturing
Connect the office and the workshop, secure equipment and prepare for recovery after an incident.
A well-managed environment.
Tools alone are not enough. Ongoing management, access and documentation need to remain clear over time.
Wi-Fi coverage
Defined areas and needs, with coverage to be checked on site.
Segmented networks
Traffic rules and separate access according to usage.
Visibility and monitoring
Inventoried equipment and checks suited to the required service.
Planned maintenance
Updates and changes prepared with the people involved.
Equipment development
Useful documentation for planning replacements and new requirements.
Understand your options before deciding.
Uses, limitations and frequently asked questions: the points to clarify when preparing your project.
Choose a model around real traffic.
Sizing considers the traffic to inspect, the number of connections and the functions that will be enabled. Interface capacity alone does not establish performance under every inspection profile. We check the current model documentation, licensing and subscription requirements against your workload. An IT audit can bring together the existing topology, service dependencies and constraints before a firewall is replaced.
Translate access needs into controlled rules.
Network segments and firewall policies should reflect your business responsibilities. We identify users, servers, guests and technical equipment, then document the exchanges each group needs. Rules have an owner, a reason and a review process. A pilot checks important applications before a wider change. Cybersecurity support also considers administrative access, privileged accounts and the evidence needed to understand an incident.
Plan site connections and remote access.
Connecting sites or enabling remote work requires more than creating a tunnel. We review addressing, routing, identity checks and the applications that must remain available. The supported VPN methods and authentication options depend on the FortiOS version and deployment. Before switching over, we agree test cases, a maintenance window and conditions for returning to the previous configuration if a critical service does not work.
Maintain visibility and configuration recovery.
Logs need a purpose and someone responsible for reviewing them. We agree useful events, retention requirements and escalation contacts. Configuration copies should be available to authorised people alongside a record of versions and changes. Updates are planned with prerequisites and their possible effect on connectivity. IT support can provide an agreed contact point for incidents and controlled changes throughout the equipment lifecycle.
Questions before a FortiGate project.
Does every FortiGate offer the same functions? No. Hardware, software version, licensing and subscribed services must be checked for the intended design.
Can a firewall replace all other security controls? No. Endpoint protection, identity management, backups and the people responsible for alerts remain part of the wider protection arrangements.
Official Fortinet documentation.
Use the official FortiGate documentation portal and the FortiOS administration guide to check policies, network design and prerequisites. Apply the guidance for the software version installed in your environment.
Why work with Sunitech on your Fortinet project?
Advice and solution selection
Review of your needs, comparison of options and clearly explained priorities.
Deployment and integration
Preparation, configuration, testing and coordination with the relevant providers.
Support and development
Agreed support scope, documentation, licences and next steps.
A project? A question?
Let’s discuss your needs.
An initial conversation to understand your situation and decide on the next steps together.
Contact us
- Review of your environment
- Understanding your business challenges
- Guidance and recommendations
- No obligation