Managed Firewall Service: What It Includes and What to Ask

What is a managed firewall service?

A managed firewall service is an arrangement where a provider configures, monitors, updates and reviews your firewall for you, instead of your own staff doing it. You keep the protection of a business-grade firewall without needing a specialist on your team. The exact duties depend on the written scope you agree.

What a managed firewall service usually includes

• Configuration. Rules, access policies, VPN and remote access are set up to match how your business works.
• Updates. Firmware and security updates are applied on a planned schedule rather than when someone remembers.
• Monitoring. Logs and alerts are watched so unusual activity is noticed. Our overview of security operations and monitoring explains how logging fits in.
• Change handling. New rules, removed access and temporary openings go through a request, so changes are recorded.
• Regular reviews. Rules are checked against what the business still needs. We cover why this matters in Why Old Firewall Rules Become a Risk.
• Documentation. There is a current record of what is configured and why.

Managed versus doing it yourself

A firewall installed once and left alone drifts. Rules pile up, updates get missed and nobody is sure what each rule is for. A managed service puts the routine work in someone’s job description. If you already have a capable IT person, a managed service can still help by covering monitoring, cover during absences and periodic reviews.

Does a small business need one?

If you hold customer data, allow staff to connect remotely, or run systems in the cloud, the firewall is doing important work. A consumer router rarely gives you rule control, proper logging or VPN options. Our network security checklist for small businesses shows what else belongs alongside it, and What Is a Next-Generation Firewall? explains the features to look for.

Questions to ask a provider

1. Which firewalls do you manage? Ask about make and model, and whether you need to buy new equipment.
2. What exactly is covered? Get monitoring, updates, changes and reviews in writing.
3. How are changes requested, and who approves them? You should know who can alter your rules.
4. What will I receive regularly? Reports and records of what was checked and changed.
5. What happens if something goes wrong? Ask how incidents are reported and who responds.
6. What do I keep if the contract ends? You should be able to retrieve your configuration and documentation.

Where to start

Before choosing a service, find out what you have now. A review of your current firewall settings shows what needs fixing and what a managed arrangement would have to cover. NetworkAE offers a complimentary infrastructure assessment, and provides firewall and cybersecurity services once the scope is agreed with you. If you want a broader view first, see our network assessment.