WireGuard
WireGuard VPN for SMEs in French-speaking Switzerland: plan site links or remote connections, keys, access rules and ongoing management with Sunitech.
Suitable tools. Local support. A team close to you.
Geneva
Lausanne
Fribourg
Neuchâtel
Valais
WireGuard is a VPN technology that encrypts traffic between peers identified by keys. It can form part of site-to-site links or remote access to specific resources. For an SME in French-speaking Switzerland, we start with applications to reach, the people concerned and authorised devices. A tunnel should serve a defined purpose; it should not automatically grant access to the entire company network.
Prepare a WireGuard tunnel between the relevant networks, defining required addresses and communications, then verify routing and application behaviour before the business starts depending on that connection for access to shared services.
Define the resources available through WireGuard for each remote working use, then prepare devices and support procedures while restricting communications to what is necessary for the work the person is authorised to perform.
Organise WireGuard keys with clear ownership for devices or connections, protect private material and prepare replacement when equipment changes owner, goes missing or must be removed from the set of authorised peers.
Check the prefixes configured for each WireGuard peer and the associated network rules to distinguish reachable destinations from the access actually authorised by the wider architecture in which the tunnel operates.
Test name resolution, application access and connectivity through WireGuard from the networks your teams actually use, because an established tunnel alone does not confirm that the intended business service is working correctly.
Document WireGuard access removal, configuration reviews and maintenance responsibilities, with a procedure suited to employee departures and replacement of the devices hosting connections so that obsolete access does not remain in service.
From initial scoping to ongoing support, the agreed work and each party’s responsibilities are defined with you before implementation.
Identify sites, equipment, traffic and dependencies before defining priorities.
Prepare changes, test configurations and organise commissioning.
Assess usage, coverage areas and mobility needs. The required measurements are agreed during scoping.
Separate uses, restrict traffic and define access rules with the people responsible.
Agree monitoring checks, updates and incident-handling arrangements.
Document the network and plan its next developments with your teams.
We start with your teams’ needs, business applications and organisational constraints.
Share client files between colleagues, with appropriate access and documents that are easy to find.
Keep tills and connections working, including across multiple shops.
Protect patient records and maintain the tools needed for consultations.
Connect the office and the workshop, secure equipment and prepare for recovery after an incident.
Tools alone are not enough. Ongoing management, access and documentation need to remain clear over time.
Defined areas and needs, with coverage to be checked on site.
Traffic rules and separate access according to usage.
Inventoried equipment and checks suited to the required service.
Updates and changes prepared with the people involved.
Useful documentation for planning replacements and new requirements.
Uses, limitations and frequently asked questions: the points to clarify when preparing your project.
Addressing, internet connectivity and devices hosting the tunnel need examination. WireGuard associates peer keys with allowed addresses; its role is distinct from a business directory. We plan access creation, distribution and removal, alongside additional authentication requirements. An IT audit helps check existing networks and avoid address overlaps between offices and remote working locations.
The project defines peers, reachable networks, name resolution and traffic filtering rules. On a platform such as OPNsense, tunnels and firewall rules must be consistent. We test accessible services, expected refusals and behaviour when connections change. Private keys remain protected; distribution should not rely on an uncontrolled document shared among several users.
Transport encryption does not guarantee that a connected computer is healthy or that application permissions are appropriate. Cybersecurity also concerns updates, accounts and authorised devices. WireGuard alone does not provide a complete employee joining and leaving process. We therefore document responsibilities, peer revocation and conditions for renewing access when a device is replaced or lost.
Must all internet traffic pass through the VPN? No. Routing can be defined around requirements, but each option involves different checks. We verify expected destinations and name resolution.
Can several people share one configuration? That complicates identification and revocation. Separate peers allow one connection to be withdrawn without changing access for the entire team. Key management should follow devices and actual responsibilities.
The WireGuard overview explains keys and their association with allowed addresses. The quick start guide describes configuration basics. These technical elements need completing with your access rules, device management and tests on the network concerned.
Review of your needs, comparison of options and clearly explained priorities.
Preparation, configuration, testing and coordination with the relevant providers.
Agreed support scope, documentation, licences and next steps.
A project? A question?
An initial conversation to understand your situation and decide on the next steps together.
Contact us
