Connect. Secure. Manage.
Cisco Secure Firewall
Design, configure and maintain Cisco Secure Firewall around application access, inspection needs and manageable policy rather than appliance specifications.
Devices supported
across the UK
Client locations
supported
Traffic handled
at peak time
Average
response time
Average response is not a resolution time or a contractual guarantee. Support scope and response commitments are agreed for each engagement.
Cisco Secure Firewall services apply rules to the traffic your business needs. We design, install and support firewalls at internet edges, between sites and inside networks. The scope covers rule owners, management access and tests of real app paths. Your team should understand how the control works before a fault forces an urgent change.
Defined trust
Make access boundaries explicit rather than relying on an assumed internal network.
Controlled access
Connect identity, policy and network enforcement to the services people actually use.
Evidence for change
Test the intended security outcome and retain useful operational records.
Begin with the traffic and trust boundaries
We find the networks being separated, the apps crossing the boundary and the people authorised to approve access. An internet-facing service, a partner interconnect and an internal app tier have different risks. The design should explain why each connection is permitted and where inspection or other controls belong.
Existing traffic is useful evidence. But it is not automatically a permission specification. An inherited rule set may contain temporary exceptions, unused objects or access that no longer has an owner. We distinguish observed behaviour from approved needs before translating the estate into a new policy. That avoids preserving every historical shortcut simply because it appears in the setup.
Standards & partnerships
Confidence in the team behind your network.
Cisco Partner
Cisco Meraki
Cyber Essentials
Cyber Essentials PlusMCI Network Services is operated by Proxar Ltd. Certifications apply to the certified legal entity and the scope of its certificates. View accreditation information
Select the platform and management model
We review the required throughput, enabled inspection functions, interfaces, resilience and support duties. Headline performance figures are not treated as a guarantee for a different traffic mix or feature combination. The chosen appliance or virtual platform must be assessed against the actual workload and supported software.
Management is part of the design. We consider the appropriate supported Firewall Management Center, cloud-managed or other available operating model and identify where setup authority resides. A service that depends on a management platform needs a plan for admin access, backups, updates and loss of network access to that platform.
A useful starting point
Not sure where to start?
Bring the requirement. We will help you define the engineering work.
Align routing, NAT and security policy
A firewall decision does not exist in isolation from the route and address translation applied to a packet. We map the intended traffic path in both directions, including external addresses, internal destinations and any stateful dependencies. A rule that appears correct can still fail when traffic returns through another device or is translated differently from the design.
We also examine the behaviour of backup paths. A new circuit, VPN or cloud connection can alter which firewall sees a session. The policy and routing design must agree on that change. We document the boundaries between carrier repair, routing setup and firewall operation so that an incident can be assigned and escalated using evidence.
Different environments. The same care.
Built around the work
your network supports.
Finance, banking and the wider private sector. We start with the systems and people that depend on your connections.
Finance & banking
Market-data paths, routing and provider coordination on clients’ behalf.
Financial-market services ↗Offices & multi-site teams
Reliable access between people, workplaces and business applications.
Office network design ↗Data centres & cloud
Network boundaries, workload connections and operational ownership.
Data centre networks ↗Apply inspection with a defined purpose
Intrusion prevention, app controls and TLS inspection need a reasoned scope. We find the assets being protected, the traffic that can be inspected and the operational or privacy constraints. Enabling every feature without assessing its effect can introduce avoidable app failures or resource pressure.
Exceptions are documented with an owner and review point. A service that cannot be decrypted or inspected in the intended way may require an alternative control, not an unrecorded permanent bypass. We make those limits visible in the design and test the resulting policy against representative app behaviour.
Plan implementation and migration safely
The change plan includes current-state evidence, setup preparation, dependencies and rollback criteria. We stage the work where practical and compare intended policy with the actual setup before sending production traffic through it. Management recovery access is preserved so that an unexpected forwarding problem does not prevent correction.
For a current estate, Cisco ASA migration or a platform refresh may require policy translation rather than a direct copy. We review object handling, NAT order, VPN dependencies and unsupported features before the cutover. The customer receives a clear account of what is preserved, what changes and which apps need clear validation.
Operate the control after deployment
A firewall needs ongoing rule review, software maintenance and useful monitoring. We agree who approves access, who implements it and what evidence is retained. A request to allow a service should include its source, destination, purpose and expected lifetime rather than an instruction to open everything until the app works.
Logs are tuned to support investigation without treating unlimited collection as an aim. We consider retention, access and integration with the customer's operational or security systems. Monitoring should identify lost resilience, failed updates and inspection issues and complete device outages, with an owner for each actionable condition.
Define the engagement you need
MCI can provide a new rollout, an independent setup review, a controlled upgrade or ongoing firewall engineering. Our Cisco and Meraki network services are available across the UK, with particular focus on London, Kent, Sussex, Essex and Berkshire. The proposal separates rollout, vendor entitlement and continuing support, and does not imply that installing a firewall alone establishes compliance or prevents every security incident.
Technical references
- Secure Firewall deployment overview — Cisco / Cisco Meraki
- Secure Firewall Management Center system configuration — Cisco / Cisco Meraki
Talk to a specialist
What does your network need next?
Tell us what you are planning, changing or trying to improve. We will help define a practical next step and the engineering scope.
+44 203 196 6566Choose option 1
sales@proxar.co.ukUK-wide service.
Most of our engineers are based in Kent, with a focus on London, Sussex, Essex and Berkshire.
Existing customers should use their agreed support and escalation channels. This form is for service enquiries, not a monitored emergency ticket.
Tell us what you need.
A short outline is enough. Please do not include passwords or sensitive network details.
Thank you. Your enquiry has been submitted.
Please check your name, email and message, then try again.
Your form session expired. Please try again.
Please wait a minute before sending another enquiry.
We could not submit your enquiry. Please call or email us instead.