Managed Firewall Services

We can take over your existing firewall infrastructure or design and deploy a new network from the ground up, supported by our responsive service.

How we work

Detailed discovery:

We don’t just install or swap ‘boxes’. Our engineers audit your current network layout and configurations to understand exactly how your business operates and what is required to secure it properly.

Audit & improve:

By using the latest devices from vendors like Sophos and Cisco, we ensure your security setup is robust and meets the needs of your business.

For example, Where uptime is critical, we recommend High Availability designs. This involves deploying two firewalls in a redundant pair so that if one fails, the other takes over immediately. This reduces downtime and keeps your network stable. The High Availability design also means we can deploy critical software updates without delay, via change control, without affecting your business.

Migration without disruption:

We manage the process to maintain your BAU (Business As Usual). We adapt the new technology to fit your established workflows, ensuring a transition that is invisible to your staff but invaluable to your security.

Ongoing support

Once your firewall is in place, we continue to manage and maintain the hardware and software. This ensures your perimeter remains secure and up to date without your team needing to worry about the underlying infrastructure.

Asset 9

Same day change request assessment

At Beaming, we understand that if you need a new firewall rule or a security policy updated, you need it now, not next week. We aim to assess and respond to change requests on the same day.

Asset 16

Expert policy coordination

For larger customers with more complex VPN requirements, we routinely liaise with the remote Firewall maintainer ensuring the policies deployed conform accurately match your business needs whilst strictly maintaining the Least Privilege by Default principle.

Asset 17

Direct access to your named engineers

You speak directly to the engineers who manage your kit. This allows the right changes to be made quickly and avoids bottlenecks.

Asset 44

Fibre Optic Leased Lines

A dedicated fibre optic Ethernet connection that’s just for you. Consistently speedy data transmission, easy scalability and symmetric upload & download speeds come as standard with a fibre optic leased line.
‘Beaming are efficient, helpful and friendly, I’m really happy with everything they have done.’
Georgia Robertson, The Coval.
‘Beaming...provided the most credible plan for transitioning to our new network with minimal business disruption.’
David Butler, Group IT Manager at Iliffe Media.

Get in touch

Find out more about our managed firewall services. Call us on 0800 082 2868, or fill in the form below. Beaming has a no robots policy, so expect a friendly human to be in touch within one working day.

What subscriptions do I need for Sophos NGFW?

The Sophos XGS includes the Standard Protection bundle and a few extra a-la-carte modules. Based on the business’ needs, please see the breakdown below:

The Base Firewall license include:

  • Networking & SD-WAN: Basic routing, traffic shaping, and application-aware routing.
  • VPN: Unlimited Site-to-Site and Remote Access VPN (IPsec and SSL).
  • Wireless: Management for Sophos wireless access points.
  • Xstream Architecture: Hardware acceleration for trusted traffic to improve performance

Optional subscriptions:

  • Network Protection: Provides Intrusion Prevention (IPS) to block hacks, Sophos X-Ops for real-time threat intelligence, and SD-RED management for connecting remote branch offices securely.
  • Web Protection: Inspects web traffic for malware, provides Application Control (e.g., blocking specific apps like BitTorrent), and allows you to enforce web filtering policies based on categories or keywords.
  • Enhanced Plus Support: This is a step up from Standard support. It includes 24/7 phone/email support, firmware updates, and an advanced hardware replacement warranty.

A la carte modules:

  • Zero-Day Protection (Formerly Sandstorm): Uses AI and cloud-based sandboxing to execute and analyze unknown files before they enter your network. Protects against brand-new malware and ransomware that haven’t been seen by standard antivirus databases yet.
  • Email Protection: Provides Anti-spam, Antivirus, and Data Loss Prevention (DLP) specifically for your mail traffic. Essential if you host an on-premise email server (like Exchange) to block malicious attachments and spam at the gateway.
  • Web Server Protection (WAF): Acts as a Web Application Firewall to protect web servers hosted behind your firewall. If you have public-facing websites or portals, it protects them from SQL injection, cross-site scripting, and other common hacks.
  • Central Orchestration: Enables advanced cloud-based management features, including SD-WAN VPN Orchestration. Allows you to create complex VPN mesh networks with a few clicks and provides 30 days of advanced cloud reporting.
  • NDR Essentials for Firewall: Uses cloud-hosted machine learning to analyse network patterns and identify Indicators of Compromise (IoCs) like lateral movement. Helps detect attackers who are already inside the network and communicating with “command and control” servers.
  • Enhanced Plus Support: An upgrade from your standard “Enhanced Support”. Includes VIP support with higher priority, consultative setup assistance, and an advanced hardware replacement warranty for your XGS.