Managing network and firewall migration across many sites
Standardise firewalls and segmentation across many sites, in plannable phases with a rollback plan for each phase.
- Logistics
- Industry
A network and firewall migration across many sites succeeds with a site standard and a phased migration. Sites are grouped by type, segmentation and security rules are defined consistently, and each phase is delivered with quality assurance, a rollback plan and the local IT teams. FlixConsulting plans and leads such migrations, for example to Palo Alto Networks.
Where organisations stand
- The site network has grown over the years. Firewall rules and segments differ from site to site.
- The migration to a standard platform has been decided. What is missing is a reliable phase plan and a standard approach.
- Local IT teams are set up differently. Even so, ISO 27001 requirements are to apply equally at every site.
How we work
- 01
Analysis
We record sites, network design and rule sets, group comparable sites into types and assess the risks for each type.
- 02
Target architecture
We define a site design with segmentation, security requirements and an operating concept for the target platform, for example Palo Alto Networks.
- 03
Delivery
We plan and lead the migration phases with fixed change windows, rollback plans, quality assurance and ongoing risk management.
- 04
Handover to operations
We train the local IT teams and hand over standards, documentation and the operating concept to business-as-usual operations.
What changes afterwards
- All sites follow a single, documented firewall and segmentation standard.
- The migration phases can be planned, and risks are managed phase by phase.
- The local IT teams operate the new platform according to fixed standards.
Logistics: planning and management of a large-scale network migration focused on Palo Alto Networks, including segmentation and training of local IT teams.
Questions about this use case
How can the risk of outages during the migration be limited?
With site types, fixed change windows and a rollback plan for each phase. The first sites serve as a pilot. Their lessons feed into the standard approach for all further sites.
Do all sites have to be built identically?
No. There is one standard per site type. Deviations are possible, but they are justified and documented. This keeps the rule sets comparable and auditable.
Let us talk about your project.
No obligation, confidential and with a concrete next step.