Remote access, branch VPNs and firewall rules built on the principle of least privilege.
Everyone can reach everything, and branch connections or remote work are not secure.
Security zones, documented firewall rules, VPN for branches and remote users, and event logging.
A review of the current configuration and the list of services that must be reachable from outside.
Yes, with VPN and user authentication; each user only reaches the services they need.
Yes. The existing rules are reviewed and you receive a written report of problems and recommendations.
Delivered on site for companies, factories, offices and shops across Mazandaran, Iran, and remotely for clients abroad. On-site cities include:
Write a few lines about your current setup and what you need; after a review I will propose the approach and an estimate.
Request a project reviewCall
A complete hardening checklist for MikroTik routers: updating RouterOS, removing the admin user, closing services and changing the Winbox port, the input firewall, brute-force protection, remote management over VPN, disabling extra features, logging, encrypted backups and regular reviews, all with ready-to-use commands.
· 7 min read
A MikroTik whose DNS answers the internet becomes a tool for DNS amplification attacks and wastes CPU and bandwidth. How to detect it, firewall rules to close port 53, preventing DNS hijacking and setting up DNS over HTTPS in RouterOS.
· 4 min read
Two critical PHP2Shell flaws allow remote code execution without logging in. Which versions are affected, and how to update or protect Issabel and PHP websites.
· 7 min read
A step-by-step site-to-site IPsec tunnel with IKEv2 between MikroTik (RouterOS 7) and a Cisco router (IOS): matching the parameters, the full commands on both sides, NAT bypass, firewall rules, testing the tunnel and fixing common errors.
· 7 min read