SustainedCloudManaged Firewall
OPNsense and pfSense, configured and maintained. Weak firewalls and missed updates are how ransomware gets in. We make sure yours never falls behind.
When you need this
Sound familiar?
- The firewall was set up by someone who left, and nobody has logged into it since.
- Remote access runs over a VPN nobody remembers configuring.
- You could not say when the firewall firmware was last updated.
- New rules get added. None are ever removed.
Why it matters
A firewall you set up once and never patch is one attackers already know how to get through. Missed updates are a leading way ransomware gains its first foothold.
How it works
The service, explained.
Configured to deny by default
We build the ruleset on OPNsense or pfSense so only the traffic you actually need is allowed through, and everything else is dropped. VPN access for remote staff is set up the same way, scoped to exactly what each person should reach.
Kept current, because an old firewall is an open one
Firmware and rules are reviewed and updated every month, and you get alerts on blocked threats and policy changes. Most ransomware walks in through a known flaw that a patch already existed for, so staying current is most of the job.
What you get
What's included
- OPNsense / pfSense configured to least-privilege by default
- Rules, VPNs, and firmware kept current every month
- Alerting on blocked threats and policy changes
- No missed updates. The gap ransomware usually walks through
The process
The flow, end to end.
Pricing
from €129 per firewall / month
plus from €690 one-time setup
Included in Managed IT Premium and up
Net, plus 19% VAT.
FAQ
Common questions.
Can you take over our existing firewall?
Usually, if it runs OPNsense or pfSense or can be migrated to them. We start with an audit of the current rules; anything unclear is verified with you rather than blindly carried over.
Will stricter rules break things our team uses?
The rebuild starts from what your business actually uses, observed rather than assumed. Anything we tighten is announced, and the old rule set is kept, so a legitimate workflow that surfaces later is unblocked in minutes.
Do we need new hardware?
OPNsense and pfSense run well on modest, affordable machines. If your current appliance can host them, we reuse it; if not, the replacement is a small line item, not an enterprise appliance.
What do the monthly updates cover?
Firmware, rule review, VPN access, and a look at what was blocked. The point is that your firewall never becomes the outdated one attackers already know their way through.
Book a free infrastructure assessment.
A no-commitment look at your setup. What's healthy, what's at risk, and what to fix first. Real answers, no pressure.