DataRoad - IT Services and Consulting

Managed Firewalls and Secure Remote Access in Portugal: Perimeter Security Operated by a Premium MSP

Managed Fortinet and Sophos firewalls, VPN with MFA and segmentation, with alerts handled as incidents. Perimeter security from a premium MSP in Portugal.

More than 10 workstations · support contract · remote, on-site and phone support

11years in business
232active clients
1321network devices managed
Top 5%SME · scoring.pt
At a glance

For decision-makers short on time.

  • 01Managed firewall: rules, updates and alerts operated continuously by the DataRoad team.
  • 02Certified Fortinet and Sophos partners; per-user VPN with MFA and a segmented network.
  • 03Included in IT Unlimited Premium and Premium 365; contracted separately on Essential.
  • 04In 11 years, DataRoad has never suffered a security incident.

A managed firewall reduces the risk of downtime and data leaks because someone is accountable for it every day: rules, updates and alerts are operated continuously by a technical team. DataRoad - IT Services and Consulting, a premium IT partner and MSP in Portugal headquartered in Alfragide (Lisbon), designs, installs and operates certified firewalls, VPN with multi-factor authentication and network segmentation for companies with more than 10 workstations, including international companies with offices in Portugal and multi-site operations across Europe. The cost is monthly and predictable. In 11 years, DataRoad has never suffered a security incident.

Why the firewall you already have may not protect you

A badly configured firewall gives the same feeling of security as a well configured one, until the day of the incident. The difference lies in who reviews the rules, updates the signatures and reads the alerts.

  • It is not the carrier's router It is a dedicated system that inspects traffic and logs everything.
  • Rules with an owner Without review, ports stay open that nobody remembers opening. We write the rules for the company's operations and review them when operations change.
  • Named remote access VPN with MFA and per-person permissions, never a shared password.
  • Alerts that are read An alert nobody reads might as well not exist.

What the firewall does for your operations

FunctionBusiness outcome
Traffic inspectionAnalyses the actual content of what flows through, not just source and destination.
SegmentationGuests, operations and servers kept apart: whoever gets into one zone cannot reach the others.
Content filteringMalicious destinations and categories agreed with the company are blocked.
Logging and auditA history of access attempts, the basis of any investigation.
Site-to-site VPNOffices and shops connected as a single local network.
Internet redundancyA second connection takes over automatically when the main one fails.

Who accesses what, and until when

Remote access is now the most exploited entry point in attacks. We configure per-user VPN, with MFA, permissions limited to what is needed and session logging. When someone leaves the company, their access ends the same day — and that can be verified.

Who handles the alerts

Our team. A firewall generates events all the time; separating noise from what matters and acting on it is what distinguishes a protected network from a network with protective equipment. Under IT Unlimited contracts, alerts go into the NOC and monitoring (24/7 on Premium 365) and are handled as incidents, under the contract's SLA.

DataRoad IT Unlimited

Talk to DataRoad. We assess your operation and propose the right plan.

Request a proposal →

How it fits with the rest of cybersecurity

  • Protected workstations Centrally managed antivirus, with alerts that reach us first.
  • One policy Email, workstations and firewall monitored together, with retained logs and a written incident response. See managed cybersecurity for businesses.
  • Last line of defence Against ransomware, managed backups with tested restores.
  • NIS2 A review of what the directive requires, a remediation plan with deadlines and an incident log ready to hand over: NIS2 readiness.

Frequently asked questions

Is the carrier's router not enough?

No. It routes traffic, but it does not inspect content, does not segment and does not keep useful logs after an incident.

Which manufacturers do you use?

Fortinet and Sophos, of which we are certified partners. We also manage equipment the company already has, if it allows management and updates.

Is the firewall included in the contract?

Yes, on the IT Unlimited Premium and Premium 365 plans. On Essential it is contracted separately.

Who handles the alerts?

The DataRoad team. They go into monitoring and are handled as incidents, with a contracted response time.

Is it related to NIS2?

Yes. Segmentation, access logging and control of remote access are direct requirements of the directive.

Guides to go further

Managed services that complete the firewall

Next step: a no-commitment security assessment

We assess the firewall, remote access and segmentation and deliver a remediation plan. Service provided exclusively under an IT Unlimited contract, with no one-off interventions or standalone equipment sales. More than 10 workstations · support contract · remote, on-site and phone support.

Request a security assessment · +351 211 459 950* · sales@dataroad.pt

*Call to a Portuguese landline.

DataRoad · IT Services and Consulting

One StepAhead of IT.

Portugal’s premium IT brand for international companies: one partner, one contract and one security standard for every office, in Portugal, Europe and the US.

  • 232clients in Portugal and abroad
  • PT · EU · USremote and on-site support
  • 5,052 Google reviews

We do IT right.

Trust
5,0★★★★★52 Google reviews
Contact

Let’s talk about your operation.

We work directly with the end client, under contract, with companies of 10 or more workstations.

Phone+351 211 459 950**Call to a Portuguese landline
HeadquartersAvenida dos Moinhos 12 B, 2610-119 Alfragide, Portugal

More than 10 workstations · support contract · remote, on-site and phone support

Your details are used only to reply to your request.