Network firewall
Define required communications in OPNsense using readable rules and justified exceptions, then test authorised services before placing the firewall on an important network path that business users or hosted applications depend on.
OPNsense
OPNsense at your network boundary, with understood and maintained rules.
OPNsense firewalls for SMEs in French-speaking Switzerland: prepare hardware, network rules, VPNs and ongoing maintenance with Sunitech to an agreed scope.
SMEsat the heart of what we do
A dedicated contactwho knows your business
A local teamin French-speaking Switzerland
Suitable tools. Local support. A team close to you.
Geneva
Lausanne
Fribourg
Neuchâtel
Valais
Control communications between networks.
OPNsense is a firewall and routing platform based on FreeBSD. It can organise internet access, separate networks and support private connections. For an SME in French-speaking Switzerland, the project should first describe permitted communications between teams, servers and specialist equipment. We define that scope with your responsible staff. The firewall controls traffic; it does not replace application permissions or computer protection.
Interfaces and routing
Prepare OPNsense interfaces, networks and routes around the existing installation, checking hardware and dependencies so that users reach only the services included in the agreed scope and unintended paths are identified.
Separate network areas
Organise separation between teams, visitors and devices in OPNsense, with explicitly permitted traffic and documentation of the business uses that justify communication between different areas of the network under your control.
Remote connections
Review VPN requirements in OPNsense against compatible functions and extensions, then define users, resources and access removal procedures without treating a remote connection as permission to reach every service on the network.
Configuration recovery
Retain a recoverable OPNsense configuration and the information needed to use it, then prepare a replacement procedure that accounts for interfaces, addressing and the business connections dependent on the firewall being restored.
Versions and monitoring
Organise OPNsense version and extension reviews, useful event monitoring and maintenance windows, with tests that confirm essential communications after each planned change and responsibilities for investigating any unexpected effects on service.
How we support you.
From initial scoping to ongoing support, the agreed work and each party’s responsibilities are defined with you before implementation.
Network review and mapping
Identify sites, equipment, traffic and dependencies before defining priorities.
Deployment and configuration
Prepare changes, test configurations and organise commissioning.
Wi-Fi and coverage
Assess usage, coverage areas and mobility needs. The required measurements are agreed during scoping.
Security and segmentation
Separate uses, restrict traffic and define access rules with the people responsible.
Monitoring and maintenance
Agree monitoring checks, updates and incident-handling arrangements.
Support and development
Document the network and plan its next developments with your teams.
Solutions suited to your sector.
We start with your teams’ needs, business applications and organisational constraints.
Professional services
Share client files between colleagues, with appropriate access and documents that are easy to find.
Commerce & retail
Keep tills and connections working, including across multiple shops.
Healthcare & medical
Protect patient records and maintain the tools needed for consultations.
Industry & manufacturing
Connect the office and the workshop, secure equipment and prepare for recovery after an incident.
A well-managed environment.
Tools alone are not enough. Ongoing management, access and documentation need to remain clear over time.
Wi-Fi coverage
Defined areas and needs, with coverage to be checked on site.
Segmented networks
Traffic rules and separate access according to usage.
Visibility and monitoring
Inventoried equipment and checks suited to the required service.
Planned maintenance
Updates and changes prepared with the people involved.
Equipment development
Useful documentation for planning replacements and new requirements.
Understand your options before deciding.
Uses, limitations and frequently asked questions: the points to clarify when preparing your project.
Size hardware for the enabled features.
Choosing an appliance or virtualised installation depends on interfaces, traffic and availability requirements. VPNs and additional processing have their own demands. We check hardware compatibility, dependencies and the selected edition before deployment. An IT audit helps recover existing rules, networks and services. The plan should also establish how to administer or replace the firewall if its configuration becomes inaccessible.
Prepare rules and rollback arrangements.
We define interfaces, zones, filtering rules, address translation and necessary services. Administrator accounts are identified and configurations backed up. Any WireGuard connections are treated as part of the project, with access restricted to required resources. Before switchover, we prepare tests and recovery of the previous configuration. Checks also verify that unwanted access remains effectively blocked.
Maintain the components.
An open platform remains a system requiring maintenance. Updates, extensions and logs need follow-up within suitable windows. Features supplied by an extension or additional offering must be verified before being promised. Our cybersecurity support can include these arrangements within an agreed scope. Default settings do not represent your company's specific security policy and need examination.
Questions about OPNsense in production.
Is OPNsense only a VPN? No. It is a firewall and routing platform that can integrate different VPN functions. Tunnels and access rules remain two separate configuration concerns.
Are two firewalls enough to guarantee availability? No. Providers, switches, power and failover conditions also need examination. Redundant architecture must be tested with the company's actual applications and connections.
Official OPNsense documentation.
The OPNsense manual covers sizing, rules, updates and VPN guides. Procedures should match the installed edition and version. We use them as a basis for documenting your configuration and the tests needed before it enters service.
Why work with Sunitech on your OPNsense project?
Advice and solution selection
Review of your needs, comparison of options and clearly explained priorities.
Deployment and integration
Preparation, configuration, testing and coordination with the relevant providers.
Support and development
Agreed support scope, documentation, licences and next steps.
A project? A question?
Let’s discuss your needs.
An initial conversation to understand your situation and decide on the next steps together.
Contact us
- Review of your environment
- Understanding your business challenges
- Guidance and recommendations
- No obligation