AllTech01
Right-sized gateway
Firewall throughput sized to your actual internet speed, user count, and VPN load, so the hardware isn't the bottleneck on the connection you're paying for.
Firewall & Routing
Your internet goes down.
Your business shouldn't.
The firewall at your edge decides what gets in, what gets out, and what keeps working when a circuit fails. We design, configure, and manage that edge with segmented networks, real rule sets, and automatic failover to a second connection, so an ISP outage is an inconvenience instead of a closed day.
01 · The problem
Most firewalls are doing less than you think.
The box the ISP dropped off is a router with a firewall label on it. It passes traffic, hands out addresses, and blocks unsolicited inbound connections. That's usually all it does.
Everything on the network sits in one flat space: workstations next to the guest Wi-Fi, next to the security cameras, next to the machine on the production floor. One compromised device can reach all of it. Rules get added over the years by whoever was on-site that day, and nobody documents them. When the circuit drops, someone unplugs things until it comes back.
We replace that with a designed edge: documented rules, segmented traffic, a second internet connection that takes over on its own, and an engineer who can tell you why every rule exists.
02 · What you get
A designed edge, not a default configuration.
We specify, deploy, and manage it on UniFi gateways, integrated with Cloudflare where it makes sense.
02
Network segmentation (VLANs)
Staff, guests, cameras, VoIP, and production equipment separated into their own networks with rules controlling what can talk to what. A compromised guest laptop or camera doesn't reach your file server.
03
Multi-WAN failover
A second internet connection configured to take over automatically when the primary fails. It happens without a phone call, a manual switchover, or waiting for someone to drive in.
04
Documented rule sets
Inbound and outbound rules written intentionally, labeled, and documented, so six months from now anyone can tell what a rule does and whether it's still needed.
05
Threat filtering at the edge
Intrusion detection and prevention, country and IP reputation blocking, and DNS filtering, all applied before traffic reaches a workstation.
06
Secure remote access
Site-to-site VPN between locations, and Cloudflare Zero Trust access for staff instead of an open VPN with a shared password.
07
Traffic visibility
Plain-language reporting on what's using the connection, which sites are being blocked, and when failover events happened, so nobody has to dig through raw logs.
08
Firmware & rule maintenance
Gateways get firmware updates, rule reviews, and configuration backups on a schedule, so the edge doesn't drift out of date.
03 · Why segmentation matters
What a flat network lets happen.
Segmentation sounds abstract until you look at what it stops. Real examples from environments we've walked into:
01
A guest on the Wi-Fi able to browse to the accounting server's shared folders
02
Security cameras with default credentials reachable from any desk in the building
03
A vendor's laptop, plugged in for a day, with the same access as a full-time employee
04
Ransomware on one workstation reaching every other device on the same subnet
05
A production machine running unsupported software, exposed to the whole network
06
A smart TV or thermostat sitting on the same network as patient records
07
A printer with an open web interface accessible from the guest network
08
Point-of-sale traffic mixed in with general staff browsing
Each of these only takes a flat network and one device that shouldn't be trusted. No sophisticated attacker is required.
04 · How it works
What happens when your primary circuit drops.
- 01
The gateway notices
The firewall continuously tests the primary connection. When it stops passing traffic, it doesn't wait for a person to notice.
- 02
Traffic moves over
Sessions shift to the secondary connection: a second ISP, fiber-plus-cable, or a cellular backup, depending on what is available at your location.
- 03
Priority traffic keeps working
Backup circuits are usually slower. Rules prioritize what matters: phones, line-of-business applications, and card processing before large downloads.
- 04
We get alerted
The event opens automatically on our side. We start working the ISP problem while your staff keeps working.
- 05
It switches back
When the primary connection is verified stable again, traffic returns to it.
- 06
You get the record
Failover events are logged, which is also what you hand your ISP when you're disputing a service credit.
05 · Who this is for
Built for real environments.
01
A manufacturer with a production floor
Machines and controls that need network access but shouldn't share a subnet with office workstations, plus a line that can't stop just because the internet did.
02
A clinic handling patient records
Segmentation between clinical systems, guest Wi-Fi, and connected devices, with the documentation an auditor or insurer will ask for.
03
A multi-site business
Site-to-site connectivity between locations with the same rule standard at each one, including the sites without IT staff.
04
A law firm or title company
Wire fraud and client confidentiality make the edge a real exposure. Filtering, segmentation, and controlled remote access matter more than raw throughput.
05
A business on one internet circuit
If a single ISP outage stops invoicing, phones, and card processing, a second connection costs less than the downtime it prevents.
06
An office with cameras and door access
UniFi Protect and Access devices belong on their own segments, away from workstations and financial data.
07
A growing team outgrowing consumer gear
The point where the ISP router can't handle the user count, VPN load, or guest traffic anymore. Most people notice it as "the internet is slow."
08
An organization facing a cyber insurance renewal
Carriers ask about segmentation, firewall management, and remote access controls. We give you answers you can document.
06 · Honest expectations
What a firewall won't do.
A firewall doesn't stop an employee from entering credentials on a convincing phishing page, and it doesn't help much once an attacker is already using a valid login.
Multi-WAN failover has limits too. If both circuits run down the same pole and a backhoe finds that pole, you're down. That's why we look at physical path diversity and, where it makes sense, cellular backup instead of a second wired ISP.
The edge is one layer. It works alongsideendpoint monitoring,email security, identity protections like MFA, andtested backups. We'd rather tell you where the limits are than sell you a box and imply it covers everything.
07 · Related services
The edge is one layer
01
Switching & Gateways
Segmentation only works if the switches enforce it.
02
Wi-Fi Design
Guest and staff SSIDs mapped to the right VLANs, with coverage that holds.
03
Network & Infrastructure
Site-to-site links, structured cabling, and the rest of the physical layer.
04
Cloudflare Zero Trust
Identity-aware access that reduces what has to be exposed at the edge at all.
05
Network Detection (NDR)
Anomaly detection for traffic that already made it inside.
Questions about network firewall security in Utah
Do you set up business firewalls in northern Utah?
Yes. AllTech designs and manages the edge firewall for businesses in its northern Utah and southern Idaho service area. The work covers rule sets, VLAN segmentation, multi-WAN failover, and Cloudflare Zero Trust for remote access, using UniFi and Cloudflare. The gateway is sized to the circuit, the user count, and the remote-access load.
What does a firewall deployment include?
A right-sized gateway, separate networks for staff, guests, cameras, voice, and production gear, and documented inbound and outbound rules. A second internet circuit can take over when the primary fails. Firmware, rule review, and configuration backups stay on a schedule so the edge does not drift. Reporting shows what the connection is doing in plain language.
Will a firewall stop a phishing attack?
No. A firewall does not stop someone from typing credentials into a convincing phishing page, and it does little once an attacker is using a valid login. It is one layer, next to endpoint monitoring, email security, multi-factor authentication, and tested backups. Multi-WAN failover also fails if both circuits share the same physical path.
Insights
Related reading.
01
Ransomware Gangs Exploit PAN-OS GlobalProtect Flaw
Qilin and Inc operators are attempting CVE-2026-0257 against Palo Alto GlobalProtect VPNs. Who is affected, fixed versions, and what to check first.
02
The Business Case for Replacing Your VPN
New research shows most organizations are already moving off VPNs for Zero Trust access. The data on why, and what it takes to get leadership buy-in.
03
Retiring the Corporate VPN: A Phased Rollout
How AllTech retires a corporate VPN in phases with Cloudflare Zero Trust, from app discovery and Access/Tunnel rollout to safe decommissioning.
Start with a conversation
Find out what your firewall is actually doing.
We'll review your gateway, rules, VLANs, and internet circuits, show you where a single device could reach more than it should, and tell you what to fix first.
