Firewall & network security · Edmonton
Business firewalls, secure remote access and network segmentation, installed by Cisco-certified engineers and monitored 24/7, so your office network isn’t the easy way in.
Network security status
● Monitored 24/7
Firewall
Inspecting
Remote access + MFA
Enforced
Network segments
Separated
Firmware
Current
Endpoints (EDR)
Protected
24/7 monitoring
Firewall and endpoint alerts
Certified engineers
Cisco CCNA & CCNP Switch
Multi-vendor
Fortinet, Sophos, Meraki, UniFi
On-site in Edmonton
4144A 97 St NW & surrounding area
Why firewalls matter more now
Canada’s Cyber Centre warns that threat actors are exploiting the security devices at the edge of your network: routers, firewalls and VPNs. These devices are attractive targets because defenders often have limited ability to see malicious activity on them.
In April 2025, the Cyber Centre reported that attackers had compromised vulnerable Fortinet devices and kept access even after patches were applied. Firewalls and VPN appliances from Fortinet, SonicWall and Cisco all appear on CISA’s catalogue of actively exploited vulnerabilities. A firewall only protects you if it’s patched, configured and watched.
Sources: Cyber Centre NCTA 2025-2026, Cyber Centre alert AL25-005, CISA KEV catalogue.
26%
average year-over-year growth in ransomware incidents in Canada since 2021.
Source: Cyber Centre, NCTA 2025-2026
16%
of Canadian businesses were impacted by cyber security incidents in 2023.
Source: Statistics Canada, 2024
13%
of impacted businesses reported ransomware attacks in 2023, up from 11% in 2021.
Source: Statistics Canada, 2024
Firewall end-of-life & changes
Several popular firewalls have reached end of life or changed how remote access works in 2026. If one of these is protecting your office, it’s time to plan the replacement or reconfiguration.
End of life June 30, 2026
Protection features stop when licences expire, and Sophos offers no support for any customer after December 31, 2026.
End of support Aug 1, 2026
These Gen 6 models are past end of support. Replacement is the safe path.
Tunnel mode removed in FortiOS 7.6.3+
Remote-access VPNs must be moved to IPsec before upgrading, or users lose their VPN after the update.
Not a business firewall
Consumer gateways lack the inspection, segmentation, logging and VPN controls a business network needs.
Common security gaps
Cybersecurity isn’t one product. It depends on how your firewall, remote access, network design, devices and accounts work together, and on someone keeping them current.
These are the most common gaps in small-office networks. Each one is fixable, usually without replacing everything.
Consumer equipment lacks the controls and visibility a business network needs.
Exposed remote desktop or VPNs without MFA hand attackers a front door to your network.
Guests, staff, servers, phones and cameras all share one network with nothing between them.
Alerts unread, firmware outdated, subscriptions lapsed and rules nobody remembers adding.
Network security services
We connect firewall and network controls with endpoint protection, identity and ongoing monitoring, so nothing is left half-configured.
Selection, sizing, deployment, policies and documentation for FortiGate, Sophos, Meraki and UniFi.
Exposed services, unused rules, firmware, subscriptions and admin access checked and cleaned up.
Health, security events, firmware and changes watched around the clock and handled by our team.
IPsec VPN, site-to-site links and zero trust access, with MFA and per-user permissions.
Separate staff, guest, server, voice, camera and IoT traffic so one problem can't spread.
SentinelOne and Sophos endpoint protection on every workstation and server, monitored 24/7.
Cloudflare DNS and web security to block malicious sites before a click becomes an incident.
Containment, investigation, restoration and coordination with your insurer and specialists.
Help answering insurer security questionnaires and closing the gaps they ask about.
Built on Canadian guidance
The Canadian Centre for Cyber Security publishes baseline security controls for small and medium organizations with fewer than 499 employees. Our firewall and network work is built to meet the network controls in that guidance, in plain terms your team, auditors and insurers can follow.
Platforms we install
We work with all four, so we recommend the platform that fits your office, not the one we happen to resell.
| Fortinet FortiGate | Sophos Firewall | Cisco Meraki MX | Ubiquiti UniFi | |
|---|---|---|---|---|
| Good fit | Strong performance per dollar and a deep security feature set | Offices also running Sophos endpoint, managed from one console | Multi-site businesses that want simple cloud management | Smaller offices on a tight budget with UniFi Wi-Fi and switching |
| Managed from | On-device or FortiCloud | Sophos Central | Meraki cloud dashboard | UniFi controller |
| Watch out for | Patch promptly; SSL-VPN tunnel mode removed in FortiOS 7.6.3+ | Older Sophos UTM reached end of life in June 2026 | Relies on ongoing licences to keep running | Fewer advanced security services than dedicated business firewalls |
Project cost
It depends on how much traffic you need to inspect, how many sites and remote users you have, and whether you want us to manage it afterwards. Every project is quoted in writing after a free assessment, with hardware, subscriptions and labour listed separately.
Sizing tip: size a firewall on its throughput with threat protection turned on, not the headline number on the datasheet. A firewall that slows to a crawl when inspection is enabled usually ends up with inspection switched off.
How we work
Understand the exposure before buying more tools, then fix what matters in the right order.
Step 1
Locations, users, internet, systems and remote access.
Step 2
Firewall rules, firmware, VPNs, switches, Wi-Fi and exposure.
Step 3
Urgent risks first; planned improvements next.
Step 4
Approved changes in controlled maintenance windows.
Step 5
Test access, segmentation, VPN, logging and your apps.
Step 6
24/7 monitoring, maintenance and regular reviews.
Who we protect
Firewall design follows how your business works and what you’re responsible for protecting.
Separate clinical systems from guest Wi-Fi and protect patient records, supporting your Health Information Act obligations.
Protect client files with segmented networks, MFA-protected remote access and monitored firewalls.
Secure VPN links for site trailers and remote crews, with each job site separated from head office.
Consistent firewall policies across every location, with site-to-site VPN and central monitoring.
Alberta’s PIPA requires businesses to notify the Privacy Commissioner of a breach that creates a real risk of significant harm. Firewall logs and 24/7 monitoring are what let you answer “what happened?” quickly. AlphaIT provides IT services, not legal advice.
Why AlphaIT
Our engineers hold Cisco CCNA and CCNP Switch certifications, so firewall work is designed together with your switching, Wi-Fi and VLANs, not dropped in front of them. We stay on after installation with 24/7 monitoring, so your firewall keeps protecting you long after the project ends.
Edmonton, St. Albert, Sherwood Park, Spruce Grove, Stony Plain, Leduc & Nisku, Fort Saskatchewan, Beaumont and Acheson.
Frequently asked questions
Straight answers before you start a firewall project, security review or managed security service.
Yes. Canada’s Cyber Centre recommends dedicated firewalls at the boundary between your network and the internet, even for small organizations. A business firewall adds traffic inspection, segmentation, logging and secure VPN access that an ISP router doesn’t provide.
A router connects your network to the internet. A business firewall inspects and controls the traffic passing through, blocks threats, separates parts of your network and provides secure remote access. Many ISP routers have a basic firewall, but not the controls or visibility a business needs.
It depends on the firewall model and the throughput it needs with threat protection turned on, annual security subscriptions, the number of sites and remote users, and whether you want ongoing management. We quote in writing after a free assessment, with hardware, subscriptions and labour separated.
There isn’t one best brand. FortiGate offers strong performance per dollar, Sophos pairs well with Sophos endpoint protection, Meraki suits multi-site businesses that want cloud management, and UniFi suits smaller budget-conscious offices. We install all four and recommend based on your needs.
Yes. Most business firewalls need annual security subscriptions for threat protection, web filtering and support. When they lapse, protection features can stop working. We track renewals as part of managed firewall service.
Security updates should be applied promptly, especially when the vendor or the Cyber Centre flags an actively exploited vulnerability. Several firewall and VPN flaws have been exploited in the wild since 2024, so patching is one of the most important parts of firewall management.
SSL-VPN tunnel mode was removed in FortiOS 7.6.3 and later, and replaced with IPsec VPN. Remote-access VPNs need to be migrated before upgrading. We plan and test that change so remote staff aren’t cut off.
Sophos UTM reached end of life on June 30, 2026, and Sophos will not support any customer beyond December 31, 2026. We recommend replacing it with a current firewall now.
A traditional VPN connects a remote device to your whole network. Zero trust network access connects each user only to the specific applications they’re allowed to use, after verifying who they are and the health of their device. We can set up either, depending on your needs.
Usually, yes. We confirm admin access, licensing, firmware and configuration first, then document the setup and clean up risky rules before taking it into management.
Yes. Our managed security service includes 24/7 monitoring of firewall and endpoint alerts, with our team handling issues and escalating anything serious to you.
Yes. Insurance applications commonly ask about MFA, endpoint protection, backups and firewall management. We help you answer accurately and close any gaps first.
Yes. We help with containment, investigation, restoring systems and coordinating with your insurer. Serious incidents may also need legal, forensic and privacy specialists, and we work alongside them.
Free network security assessment
We’ll review your firewall, remote access, network design, Microsoft 365 sign-ins, endpoints and backups, explain what deserves attention first, and give you a written plan. No obligation.
780-318-0149
4144A 97 St NW #232, Edmonton, AB T6E 5Y6
