Firewalls: a professional assessment and implementation plan

Why one firewall usually isn’t enough

A firewall’s job is simple to describe: it decides what traffic is allowed in and out of your network or your computer. The trouble is that a single firewall can only watch one layer of the problem. A strong setup uses two layers working together:

Home networks often rely on whatever firewall ships with the internet provider’s router, left on default settings. Small businesses frequently have the opposite problem: strong network hardware, but PCs with their built-in firewall quietly turned off by an old program or a well-meaning user trying to fix a connection issue. Either way, the fix starts with finding out what’s actually in place.

The assessment

Before changing anything, I walk through the same checklist on every job, whether it’s a single home office or a multi-PC business:

1. Map the network. What’s the router or gateway, how old is its firmware, and what devices are connected — including things people forget, like smart cameras, printers and guest devices.
2. Check the router’s firewall settings. Is it on, is it current, and are there any risky holes left open, such as remote-management access or old port forwarding rules nobody remembers creating.
3. Check each PC’s built-in firewall. Windows and Mac both include a solid firewall. I confirm it’s actually enabled and not disabled by old software or a previous troubleshooting step.
4. Review Wi-Fi security. Open or weakly secured Wi-Fi undermines a firewall from the inside, so this gets checked as part of the same visit.
5. Identify what needs separating. In a business, guest Wi-Fi, security cameras and point-of-sale or payment systems should generally sit apart from everyday office traffic.

The implementation plan

Once the assessment is done, here’s the order I put changes in. Each step is explained plainly before it’s made, and nothing changes without you knowing what and why.

1. Secure the router first.

   Update the firmware, set a strong admin password, turn off remote management if it isn’t needed, and confirm the router’s firewall is active.

2. Separate your networks.

   Set up a guest network for visitors and smart devices, and a separate network for security cameras or business systems, so a problem on one can’t spread to the others.

3. Turn on and configure PC firewalls.

   Confirm Windows or Mac’s built-in firewall is enabled on every device, and adjust rules so it blocks what it should without breaking the programs you rely on.

4. Add a software firewall or security suite where it helps.

   Paired with antivirus protection, this covers the devices that travel outside your home or office network — laptops taken on the road, for example.

5. Test it.

   I check that the changes actually block what they’re supposed to, and that everyday things — printing, streaming, remote work tools — still work the way you expect.

6. Document and hand off.

   You get a plain-language summary of what was changed and why, plus the settings you’d need if you ever bring in someone else.

Keeping it working

A firewall isn’t a “set it and forget it” fix. Router firmware needs updating, new devices need to land on the right network, and rules occasionally need revisiting as your setup changes. This kind of check-up is included in the Mark’s Computer Repair Yearly Service Plan, and it’s one of the most worthwhile few minutes a network gets each year.

Running a small business with cameras, point-of-sale or multiple workstations to protect? Contact David to talk through what you have in place.

← Back to all tech tips