Perimetra is an independent networking and cybersecurity service in Barcelona, for small businesses and IT teams that need a specialist without hiring full time.
A single authentication point for your VPN, corporate Wi-Fi and access to your network devices, with a second factor and no server to build or maintain in your office.
In many small businesses the VPN asks only for a username and password, the firewall is managed with a shared account, and the Wi-Fi has had the same key for years. With a central RADIUS, each person signs in with their own identity, and what they do is logged.
The service includes authentication logging and a fallback mode agreed before it goes live, for example an emergency local account on each device.
Projects with a start and an end, or ongoing support. Every job ends with documentation your team can use without depending on anyone.
Review of rules, objects, VPNs, security profiles, versions and logs on Fortinet, Palo Alto, Cisco and Check Point. It looks for rules nobody uses any more, access that is too broad, and settings that were left at their defaults.
Deliverable: a report with findings ranked by risk and a remediation plan.
VLAN segmentation, routing, Wi-Fi, and changes of vendor or carrier. Every change is prepared with an agreed window and a rollback plan.
Deliverable: design, change plan and go-live.
Site-to-site and remote connectivity with SD-WAN, and secure access to applications and the internet from anywhere with SASE. It starts from what you already have before any new product is proposed.
Deliverable: proposed architecture, pilot and phased rollout.
Azure Firewall in production: hub-and-spoke topology, user-defined routes (UDR), DNAT rules, and access control with Entra ID and RBAC.
Deliverable: design, configuration and documentation of the environment.
Diagrams, device inventory, rule matrix and procedures. Useful for an audit, for handing over to a new provider, or so the network does not depend on one person's memory.
Deliverable: documentation in editable formats.
Diagnosis of outages, slowness and VPN drops, and extra hands for IT teams that are stretched thin. One-off or recurring.
Deliverable: root cause identified, fix applied and a note of what was changed.
More than 15 years with multi-vendor networking and security, at carriers, software companies and managed service providers, with projects in several countries.
In practice, that means you will usually find a device you already know, or one very much like it. Typical work includes:
We go over what you have, what is failing and what you want to achieve.
Scope, timeline and a fixed price agreed before starting.
Changes with an agreed window and a rollback plan. Named, temporary access.
Diagrams, configurations and procedures delivered at the end.
Cisco, Fortinet, Palo Alto, Check Point, Juniper, Extreme, Aruba, Meraki, Huawei, SonicWall, WatchGuard and others, plus Azure Firewall. If you use another brand, it gets assessed before anything is committed.
It depends on the scope. The proposal includes a fixed price before work begins, so there are no surprises along the way.
Almost everything is done remotely. If an intervention needs someone in Barcelona, it is agreed in the proposal.
Access is agreed in writing, named accounts are used, and everything is revoked when the work ends.
Before the service goes live, a fallback mode is defined with each client, usually an emergency local account on critical devices.
Know which devices you want to protect, which directory you use and who connects. With that, a small pilot can be prepared.
A few lines are enough: what equipment you use, what problem you have and when you need it.
You can also write directly to contacto.perimetra@protonmail.com.