Firewall management
Configuration, firmware, licensing, and rule review on a schedule.
Network Security in Omaha
The Firewall Nobody Has Logged Into Since Install
ECS designs, configures, and maintains business networks for Omaha companies: Fortinet firewalls, segmented wireless, and remote access that does not rely on an open port and hope.
Spend Time on What Matters.
Why Omaha businesses choose ECS
- 20+Years supporting Omaha-area businesses
- 300+Small and mid-sized businesses supported
- 4.9★Google rating, 200+ reviews
- 5 yearsBest of B2B — IT Services, B2B Omaha Magazine
Best of B2B (IT Services), from B2B Omaha Magazine, and Best of Omaha (Computer Repair), from Omaha Magazine, are community-voted awards won 5 consecutive years, 2022–2026. See our awards and story
Why It Matters
A firewall is a subscription, not an appliance
Firewalls need firmware updates, licence renewals, and rule reviews. The common failure is not a device that was never bought; it is one bought five years ago, configured once, and never touched since, with expired security services and rules that nobody can explain.
The other recurring problem is flatness. Guest wifi, the point-of-sale system, the security cameras, and the accounting workstation all sitting on one network means anything that compromises the weakest device can reach the most important one.
What Is Covered
From the internet connection inward
Network segmentation
Guests, staff, servers, and devices separated so one does not reach another.
Wireless design
Coverage that works in your actual building, with separate guest access.
Secure remote access
VPN or equivalent tied to your identity provider, with MFA.
Monitoring
Device health and availability watched, rather than discovered during an outage.
Documentation
What is connected, how, and why, so the next change does not start with archaeology.
What Runs It
The platforms behind the service
Firewalls
Fortinet
ECS is a Fortinet authorized reseller, so sizing, licensing, and configuration come from the same team that maintains it.
Device monitoring
N-able
Availability and health monitoring across network equipment.
Identity for remote access
Microsoft Entra ID
Remote access tied to the same accounts and MFA as everything else.
When did anyone last read your firewall rules?
An audit usually finds expired licensing and rules left over from a project that ended years ago.
Start the ConversationHow It Works
From audit to a network you can reason about
Audit
What is installed, what is licensed, what is expired, and what rules exist that nobody can justify.
Design
A segmentation plan that fits how your business actually operates, not a textbook diagram.
Implement
Staged changes with a rollback path, scheduled around your operating hours.
Maintain
Firmware, licence renewals, and periodic rule review, so it does not drift back.
What You Get
What changes once this is running
A compromise stays contained
Segmentation is what stops one infected device becoming an infected company.
No surprise expirations
Licences and firmware tracked, so protection does not lapse unnoticed.
Changes stop being risky
Documented networks can be changed confidently.
Frequently Asked Questions
The router from your provider handles connectivity, not security policy. It generally cannot segment networks, enforce rules per group, or report what it blocked. For a business with employees and data worth protecting, that gap matters.
It puts devices in separate zones that cannot freely reach each other. Guest wifi cannot see your servers; a compromised camera cannot reach accounting. It is one of the few controls that limits damage after something has already gone wrong.
Not automatically. The questions are whether it still receives firmware updates, whether its security subscriptions are current, and whether it can handle your bandwidth. We will tell you if it is fine, which it sometimes is.
Usually. We would rather configure what you own properly than sell a replacement for its own sake. Where something genuinely cannot do the job, we will explain specifically what it cannot do.
Through access tied to your identity provider with MFA, rather than an open port or a shared password. Increasingly the better answer is to secure the Microsoft 365 data directly and avoid the VPN entirely, which depends on where your applications live.
Get Started
Start with an honest look at your network.
We will tell you what is solid, what is expired, and what should be segmented.
Spend Time on What Matters.