Is your firewall actually protecting the business?

Run this Fortinet firewall health check

A firewall that was set up correctly two years ago is not automatically doing its job today. Rules drift, firmware ages and logging gets ignored. This guide is a plain-English health check for a business firewall, including Fortinet, covering rules, firmware, logging and segmentation.

The checklist

How to sanity-check your firewall is doing its job.

Work through these on any business firewall. They are good practice regardless of vendor, and a starting point for a deeper review.

  • Review the rule base

    Check firewall rules against what the business actually needs today. Remove rules for systems, sites and staff that are no longer there.

  • Remove broad allow rules

    Wide any-to-any rules quietly undo the point of a firewall. Tighten them to specific sources, destinations and ports.

  • Keep firmware current and supported

    Confirm the firewall is running a current, supported firmware version and that security updates are being applied on a schedule.

  • Check logging is on and retained

    Confirm the firewall is logging traffic and events, and that logs are kept long enough to investigate an incident after the fact.

  • Confirm someone reviews the logs

    Logging only helps if alerts are seen and acted on. Confirm who watches them, how, and how quickly they respond.

  • Segment the network

    Separate guest Wi-Fi, payment systems, CCTV and general staff traffic so a problem in one area cannot spread across everything.

  • Lock down remote access

    Review VPN and any remote administration access, enforce strong authentication, and remove accounts that are no longer used.

  • Confirm backup and support

    Make sure the firewall configuration is backed up and you know who supports it and how to reach them during an incident.

Relevant services

Services that keep a firewall healthy.

If the health check raises questions, these are the services that usually answer them.

Security

Managed Firewall

We keep firewall rules, firmware and monitoring current across every site, so it stays effective.

Learn more
Security

Managed Security

A wider layer of protection and monitoring around your network and connectivity.

Learn more
Networking

Managed Wi-Fi

Segmented, controlled wireless so guest and staff traffic stay properly separated.

Learn more
Security

NIS2-Aligned Network Improvement

Practical network-security work that helps you work toward NIS2 readiness.

Learn more

Talk to us

Want us to run the health check for you?

Talk to Regional Broadband and we will review your firewall, tighten the rules, sort out firmware and logging, and keep it managed so it stays effective.