Secure · Cybersecurity
Firewall and network security for Indian enterprises: next-generation firewall design and deployment, managed firewall, rule-base reviews and AMC on Fortinet, Palo Alto Networks and Sophos. NetScale designs the perimeter and segmentation with the network, runs it and keeps the rule base and the support contract current under one owner.
Firewall and Network Security
Firewall and network security covers the perimeter and the segments inside the network: next-generation firewalls, their rule base and the support contracts behind them.
A next-generation firewall (NGFW) filters traffic by application and user as well as by address and port. NetScale designs it with the network, reviews the rule base on a schedule and keeps the AMC and OEM renewals under one owner.
Web, browser and SaaS controls for every user sit under Secure access.
Firewall rules were added for every project, and few were ever removed. Which ones are still needed?
Our answer: Managed firewall and rule reviews
Each site runs a single firewall with no standby. What happens when it fails?
Our answer: NGFW design and deployment
Support contracts renew on different dates with different vendors. Which one lapses next?
Our answer: Firewall AMC and OEM support
Firewall logs are kept until the disk fills. How far back can you look?
Our answer: Firewall log retention
Next-generation firewall architecture, high availability, segmentation and policy design, deployed in phases with testing at each stage.
Monitoring in the support window agreed in writing, change management, periodic rule-base health checks and clean-up of unused and over-permissive rules.
Firewall logs kept in a central store in India for 180 days, with clocks synchronised to NIC or NPL.
Annual maintenance and OEM renewals, firmware and signature updates, configuration backup and direct escalation into the vendor’s support organisation, under one owner, with the support window and response times in writing.
Each phase adds a layer to the same three sites.
You can stop at any phase boundary. The assessment is free, and each phase is priced in writing before it starts.How we engage
Under the Directions of April 2022, firewall logs are kept for 180 days within India, with clocks synchronised to NIC or NPL. The incident path is documented, so the 6-hour reporting duty can be met.
Perimeter and segmentation controls form part of the reasonable security safeguards the DPDP Rules require. Legal interpretation stays with your counsel.
Source: Digital Personal Data Protection Rules, 2025 (external site)
The AMC scope of work is written in plain terms, with HSN and SAC codes supplied for purchase orders.
Throughput, site count and whether high availability is required at each site.
Subscription bundles (threat prevention, URL filtering, sandboxing) and their terms.
Managed firewall scope: monitoring only, or monitoring with change management and rule reviews.
AMC level and whether spares or an on-site engineer are included.
The most relevant engagement, with its numbers. Client names and the full write-up are shared in conversation.
Industrial manufacturing · Nine plants, seven cities
How a multi-site industrial company scoped a security programme across its network, devices, user access and sites.
Firewalls and secure networking
Next-generation firewalls and cloud security
Endpoint, firewall and managed detection
Email protection and backupOur own information security and privacy management systems, run under both standards.
Certifications and technologySix things: the support window and response times in writing, OEM renewal management, firmware and signature updates, periodic rule-base review, configuration backup and the escalation path into the OEM. We write the scope so procurement can compare it line by line, with HSN and SAC codes for the purchase order.
Mostly by model and throughput, the OEM subscription bundle, the number of sites and the support level. The free health check gives you one written view of what you have and what each renewal costs, before you commit to anything.
Yes. We review the rule base and support status first and keep what is sound. Replacements are planned only where the hardware is past support or the design cannot deliver segmentation. Existing equipment stays where it meets the design; you are not asked to replace everything.
It costs nothing and commits you to nothing. You get a written list of where your IT environment is exposed, and your team can act on it with or without us.
