Flexible work is the trend, but every insecure way of connecting remotely is an open door for attackers. A good solution is convenient for staff and still keeps risk under control.
Are you facing any of these?
Insecure remote access
Opening ports directly to the Internet or using a single password.
Data scattered across personal computers
Losing a laptop or a failed drive means losing data.
Unstable office Wi-Fi
Choppy online meetings hurt productivity.
Main scope
And more besides, depending on what fits your situation.
Multi-factor VPN
Staff connect securely without any need to open ports directly.
Role-based permissions
Each person accesses only what they need.
Protecting employee computers
Centrally managed protection software and a consistent policy.
Centralized backup
Important data has an off-site copy.
Office Wi-Fi
Surveyed and placed in the right spots, with a separate guest network.
Remote support
A point of contact for incidents, including for staff working outside the office.
How the system is usually organized
- Multi-factor VPN for staff outside the office
- A firewall at the edge with clear policies
- Centrally managed Wi-Fi, with a separate guest network
- Off-site backup with restore tests
The specific architecture is set after the survey, depending on your size and current setup.
4 clear steps from the start
- ReviewSee how people currently access the system.
- DesignA secure access model that is easy to use.
- DeploymentConfiguration and guidance for staff.
- SupportA contact point for handling issues and periodic reports.
Frequently asked questions
Will a VPN annoy employees?
A well-configured VPN needs very few steps. We balance security and convenience, with short guidance for staff.
My company uses cloud software. Do we need a VPN?
It depends on the system. For cloud software, the focus is multi-factor authentication and protecting employee computers. A VPN is used when internal resources need to be reached.
What about staff using personal devices?
There should be a clear policy: the types of access allowed and the minimum protection required. We help build a policy that fits your company's size.
At what headcount should we start?
There is no fixed threshold. As soon as you have important data and people accessing it remotely, basic measures should be in place.
Reference vendors and product codes for this solution
By specific need and size. Codes are for reference; COREIT fixes the model and successor versions after the survey, and can use equivalent equipment from other vendors to suit the budget.
| Need | Smaller sites | Medium and large sites |
|---|---|---|
| VPN and ZTNA for remote work | FortiGate 70G with FortiClient | FortiGate 120G + FortiClient ZTNA or Palo Alto PA-1400 + GlobalProtect |
| Office Wi-Fi | HPE Aruba AP-635 | Aruba AP-735, managed with Aruba Central |
| Identity and multi-factor authentication | Microsoft Entra ID with MFA | Entra ID with RADIUS 802.1X (Aruba ClearPass or Windows NPS) |
| Endpoint protection | Bitdefender GravityZone, Basic level | Bitdefender GravityZone Advanced level (EDR) |
| Microsoft 365 and file backup | Synology Active Backup for Business | Veeam Backup for Microsoft 365 and Veeam Backup & Replication |
| Power | APC SMT1500RMI2UC or Eaton 5P | APC SRT3000RMXLI or Eaton 9PX |
Xem quy trình dịch vụ kỹ thuật → · Need help configuring or tuning equipment you already own? See device support →
Want to know where to start?
Take the 2-minute quick assessment, or leave your details and an engineer will call you back with free advice.
IT infrastructure assessment (2 min) Get advice