A managed firewall reduces the risk of downtime and data leaks because someone is accountable for it every day: rules, updates and alerts are operated continuously by a technical team. DataRoad - IT Services and Consulting, a premium IT partner and MSP in Portugal headquartered in Alfragide (Lisbon), designs, installs and operates certified firewalls, VPN with multi-factor authentication and network segmentation for companies with more than 10 workstations, including international companies with offices in Portugal and multi-site operations across Europe. The cost is monthly and predictable. In 11 years, DataRoad has never suffered a security incident.
Why the firewall you already have may not protect you
A badly configured firewall gives the same feeling of security as a well configured one, until the day of the incident. The difference lies in who reviews the rules, updates the signatures and reads the alerts.
- It is not the carrier's router It is a dedicated system that inspects traffic and logs everything.
- Rules with an owner Without review, ports stay open that nobody remembers opening. We write the rules for the company's operations and review them when operations change.
- Named remote access VPN with MFA and per-person permissions, never a shared password.
- Alerts that are read An alert nobody reads might as well not exist.
What the firewall does for your operations
| Function | Business outcome |
|---|
| Traffic inspection | Analyses the actual content of what flows through, not just source and destination. |
| Segmentation | Guests, operations and servers kept apart: whoever gets into one zone cannot reach the others. |
| Content filtering | Malicious destinations and categories agreed with the company are blocked. |
| Logging and audit | A history of access attempts, the basis of any investigation. |
| Site-to-site VPN | Offices and shops connected as a single local network. |
| Internet redundancy | A second connection takes over automatically when the main one fails. |
Who accesses what, and until when
Remote access is now the most exploited entry point in attacks. We configure per-user VPN, with MFA, permissions limited to what is needed and session logging. When someone leaves the company, their access ends the same day — and that can be verified.
Who handles the alerts
Our team. A firewall generates events all the time; separating noise from what matters and acting on it is what distinguishes a protected network from a network with protective equipment. Under IT Unlimited contracts, alerts go into the NOC and monitoring (24/7 on Premium 365) and are handled as incidents, under the contract's SLA.
DataRoad IT Unlimited
Talk to DataRoad. We assess your operation and propose the right plan.
Request a proposal →How it fits with the rest of cybersecurity
- Protected workstations Centrally managed antivirus, with alerts that reach us first.
- One policy Email, workstations and firewall monitored together, with retained logs and a written incident response. See managed cybersecurity for businesses.
- Last line of defence Against ransomware, managed backups with tested restores.
- NIS2 A review of what the directive requires, a remediation plan with deadlines and an incident log ready to hand over: NIS2 readiness.
Frequently asked questions
Is the carrier's router not enough?
No. It routes traffic, but it does not inspect content, does not segment and does not keep useful logs after an incident.
Which manufacturers do you use?
Fortinet and Sophos, of which we are certified partners. We also manage equipment the company already has, if it allows management and updates.
Is the firewall included in the contract?
Yes, on the IT Unlimited Premium and Premium 365 plans. On Essential it is contracted separately.
Who handles the alerts?
The DataRoad team. They go into monitoring and are handled as incidents, with a contracted response time.
Is it related to NIS2?
Yes. Segmentation, access logging and control of remote access are direct requirements of the directive.
Managed services that complete the firewall
Next step: a no-commitment security assessment
We assess the firewall, remote access and segmentation and deliver a remediation plan. Service provided exclusively under an IT Unlimited contract, with no one-off interventions or standalone equipment sales. More than 10 workstations · support contract · remote, on-site and phone support.
Request a security assessment · +351 211 459 950* · sales@dataroad.pt
*Call to a Portuguese landline.