Network security services in Pittsburgh and Cleveland
KawaConnect protects business networks in Pittsburgh and Western Pennsylvania, and across the Cleveland area and Northeast Ohio. We manage OPNsense firewalls, network segmentation, VPN and remote access, and multi-factor authentication. This page is about defending the network you already have.
Review your network security Networking and firewalls
Platforms on this service
How we protect the network
Four controls do most of the work: a well-run firewall, a network divided into zones, controlled remote access, and strong sign-in.
OPNsense firewalls
Firewall rules, updates and logs maintained by a person, with high-availability pairs where an outage would stop the business.
Network segmentation
VLANs that keep guests, phones, cameras, servers and staff computers apart, so a problem in one area stays there.
Site-to-site VPN
Encrypted tunnels between your locations, so branch offices reach shared systems without exposing them to the internet.
Remote access
Tailscale and VPN access for staff and vendors who work away from the office, limited to the systems they need.
MFA and conditional access
Multi-factor sign-in and access rules that consider who is signing in and from where, applied through Microsoft Entra ID.
Review and monitoring
We read firewall logs and alerts, and review open ports and rules, so old exceptions do not pile up.
Protecting the network versus building it
Our networking and firewall page covers designing and installing a network: switches, Wi-Fi, cabling and the first firewall build. Our endpoint security service covers the laptops, desktops and servers on it. This page sits between the two. It covers the rules, boundaries and sign-in controls that decide what can reach what.
OPNsense firewall support
OPNsense is an open source firewall. In a high-availability pair, the second unit takes over if the first one fails. We support firewalls we built and firewalls we inherited.
- Rule review: remove outdated rules, document the ones that remain, and close ports that no longer need to be open.
- Updates: apply firmware and package updates on a planned schedule, with a way back if something breaks.
- Logging: keep firewall logs and read them.
- Configuration backup: keep a copy of the firewall configuration so a replacement can be brought up fast.
Segmentation limits the damage
A flat network lets one infected computer, or one careless guest, reach everything. We divide the network with VLANs and write firewall rules between the zones. Common examples are a separate guest network, a separate segment for IP cameras, and a protected zone for servers. Point-of-sale systems in retail get their own segment as well.
Remote access without open ports
We prefer to reach systems through a VPN or Tailscale rather than leaving ports open to the internet. The same approach applies to security cameras, where remote viewing runs through VPN. Staff get the access their job requires, and vendors get limited access that can be turned off.
MFA and conditional access
Stolen passwords are a common way into a business. Multi-factor authentication makes a stolen password far less useful, and conditional access adds rules about device and location. We set both up in Microsoft Entra ID as part of our Microsoft 365 work.
How an engagement works
- Review. We look at your firewall, network layout, remote access and sign-in settings.
- Written scope. We list what to fix, in order, and agree it with you.
- Implement and verify. We make the changes in a planned window and test that business systems still work.
- Document and monitor. We record the new design and keep watching it under managed IT if you want ongoing support.
Serving Pittsburgh and Cleveland businesses
Our Pennsylvania offices are in Coraopolis and Beaver Falls. We support businesses across Pittsburgh and Western Pennsylvania, and in the Cleveland area and Northeast Ohio. Most security work is done remotely, with on-site work by appointment in Pennsylvania and arranged around the project in Ohio.
Questions about network security
Can you support a firewall that someone else installed?
Yes. We review the configuration, document it and clean it up before taking it on. We can replace it with OPNsense if that suits you better.
Is a firewall enough on its own?
No. A firewall controls traffic, but you also need segmentation, sign-in controls, patching and watched alerts on devices. Devices are covered by our endpoint security service.
Do you offer VPN for a team that works from home?
Yes. Home workers connect over VPN or Tailscale and see only the systems their job needs.
Who it is for
- Businesses with a single flat network where everything can reach everything
- Companies with several locations that need secure links between sites
- Offices whose firewall has not been reviewed in years
- Regulated operations that must show who can reach which systems
Related guides
Plain-English explanations from our knowledge base.
FirewallsOPNsensepfSenseVPNWireGuardTailscaleRemote desktop and RDPSSHMulti-factor authentication (MFA)
Get your network reviewed
Describe your firewall and network layout and we will tell you where we would start. We reply within one business day.
Start a conversation