Ask ten business owners whether they have a firewall and ten will say yes. Ask what it is doing and the room goes quiet. That is not a criticism — a firewall is supposed to be boring. But there is a difference between a firewall that is quietly working and one that is quietly decorative, and it is worth five minutes to know which one you have.
The bouncer analogy, briefly
A firewall stands at the door between your network and the internet and decides who gets in and who gets out. The free one built into your internet provider's router is a bouncer who checks that visitors are wearing shoes. A managed business firewall is a bouncer who knows the guest list, recognises the regulars, notices the person trying the side door, and phones someone when it happens.
What a managed firewall does that the router does not
- Inspects the traffic, not just the address. Modern threats arrive over perfectly normal-looking connections. A business firewall looks inside for known malware, exploit attempts and command-and-control traffic.
- Filters where people go. Not to police anyone's lunch break, but because a staggering number of infections start on a look-alike site that a filter would have blocked.
- Gives remote staff a locked door, not an open window. Secure remote access instead of "we opened a port so Dave can get in from home". Dave is lovely. The port is not.
- Separates guests, cameras and printers from your servers. A visitor's laptop or a five-year-old camera should never be able to reach your accounting system. Segmentation makes sure of it.
- Gets updated. A firewall running firmware from 2021 is protecting you from the threats of 2021.
The part nobody mentions: someone has to watch it
A firewall generates alerts. If those alerts go to an inbox nobody reads, you have a very expensive diary. This is the piece most small businesses are missing, and it is where a managed service earns its keep: our monitoring sees the alert at 2 a.m., an engineer decides whether it matters, and — if it does — acts before your staff arrive to find out.
A quick self-check
When was the firewall's firmware last updated? Who receives its alerts? Are the guest Wi-Fi and the office network actually separate? If any of those answers is "I'm not sure", it is worth a look. We assess firewalls all the time — sometimes the verdict is "it's fine, keep it", and we will say so.
