Premium IT support provider in Norwich, Norfolk

A staff member clicks a convincing delivery notification, a visitor joins the guest Wi-Fi, or an old server is left running after a software change. None of these events needs to cause a major incident, but each can expose a weakness if the network is not properly controlled. A business firewall review looks beyond whether a firewall is switched on. It checks whether it is protecting the way your business actually works.

For small and medium-sized organisations, a firewall is often installed during an office move, broadband upgrade or initial network setup, then receives little attention until there is a problem. Settings that made sense two or three years ago may no longer suit hybrid working, cloud applications, new devices or additional sites. Reviewing the firewall regularly is a practical way to reduce avoidable risk without making day-to-day work harder.

What a business firewall review should cover

A firewall controls traffic moving between your network, the internet and, in some cases, separate parts of your internal network. It decides what is allowed in, what is allowed out and what should be blocked or examined more closely. The review should therefore begin with a clear picture of your network, not simply a check of the firewall model.

This includes your broadband or leased line connection, office Wi-Fi, remote access, servers, cloud services, phones, CCTV, guest networks and any specialist equipment. A manufacturer, school, care provider or professional office will have different requirements. The aim is not to block everything possible. It is to allow legitimate services while limiting unnecessary exposure.

Firewall software, licences and support

Security subscriptions matter. Many business firewalls rely on active licences for threat detection, web filtering, malware protection and application control. If a subscription has expired, the device may still pass traffic but no longer provide the level of inspection you expect.

A review should confirm that the firewall firmware is current and supported by its manufacturer. Older equipment can become difficult to update, particularly where it no longer receives security fixes. Replacing hardware has a cost, but continuing to rely on an unsupported device can cost far more if it creates an entry point into your network.

It is also worth checking who has administrator access. Shared passwords, departed staff accounts and supplier logins that are no longer required should be removed. Administrator access should use strong, unique credentials and multi-factor authentication wherever the device supports it.

Rules that have built up over time

Firewall rules tend to grow. A supplier needs temporary access, a new piece of software requires a port to be opened, or someone creates an exception to solve an urgent issue. Months later, that exception can remain in place even though nobody remembers why.

A good review examines every inbound rule, especially rules that allow access from the internet to internal systems. Remote desktop, remote management tools, file-sharing services and old web applications deserve particular attention. Where access is required, it should be restricted to named users, trusted locations or a secure virtual private network rather than opened broadly to the internet.

Outbound rules are just as useful to review. If a compromised computer tries to contact a known malicious site or transfer large amounts of data unexpectedly, sensible outbound controls can help limit the damage. The balance matters: overly restrictive rules can interrupt legitimate cloud services and frustrate staff. The right settings are those based on your applications, users and risk level.

Separate the networks that should not mix

One flat network makes life easy during initial setup, but it also makes it easier for a problem on one device to spread. Network segmentation separates systems into sensible groups and controls how those groups communicate.

For many offices, staff devices, servers, VoIP phones, CCTV, guest Wi-Fi and managed Wi-Fi equipment should not all sit on the same unrestricted network. A guest should be able to use the internet without seeing printers, staff laptops or shared files. CCTV cameras should be able to record and be managed without gaining broad access to office systems.

Segmentation is particularly valuable where businesses have a mix of newer and older equipment. Older specialist devices may not support modern security features, but they can often be placed in a restricted network area with only the connections they genuinely need. This is not a replacement for upgrading outdated equipment, but it is a sensible risk-control measure while a replacement plan is put in place.

Check remote working and cloud access

Remote working has changed the role of the office firewall. Staff may access Microsoft 365, line-of-business applications, files and phones from home, client premises or public networks. The review should establish which services are accessed remotely and how users prove their identity.

A secure remote access solution should use encryption, individual user accounts and multi-factor authentication. Giving users a shared remote access password may appear convenient, but it offers little accountability and is difficult to manage when someone leaves. Access should be removed promptly when roles change.

Cloud services also need careful configuration. Not every cloud application needs to route through the office firewall, but the firewall can still help manage unsafe destinations, risky downloads and unauthorised applications on office-connected devices. Policies should reflect how your team works. For example, blocking all file-sharing services may interrupt a legitimate client platform, while allowing every unapproved service can create data protection concerns.

Make web filtering useful, not disruptive

Web filtering can reduce the chance of staff reaching malicious, fraudulent or inappropriate websites. It is especially helpful against phishing pages that imitate banks, Microsoft sign-in screens, delivery firms and suppliers. Yet web filtering should support the business rather than become a daily obstacle.

During a review, check the categories being blocked, the users or groups affected and the process for requesting a legitimate site to be allowed. A marketing team may have a valid reason to use social media platforms that are unnecessary for another department. Likewise, an organisation handling sensitive information may need stricter restrictions than a business with a public-facing creative team.

The best approach is clear and proportionate. Explain the purpose of filtering to staff, monitor recurring blocked-site requests and adjust policies where there is a genuine business need. Quietly disabling filtering because it caused one inconvenience removes a useful layer of protection.

Review alerts, logs and response arrangements

A firewall can generate a great deal of information. Without monitoring, it is easy to miss repeated login attempts, suspicious traffic, devices connecting from unexpected locations or a sharp increase in blocked threats. The question is not whether logs exist, but whether someone reviews meaningful alerts and knows what to do next.

Set alerting thresholds that suit the business. A small office may not need a full-time security operations centre, but it should have a named person or IT provider who can investigate important alerts. The review should confirm contact details, escalation arrangements and whether alerts go to a monitored mailbox rather than an unattended account.

It should also check backups of the firewall configuration. If hardware fails or settings are damaged during a change, a current configuration backup can shorten downtime considerably. Keep a record of the internet connection details, network layout and any key rules so recovery does not depend on one person remembering how everything was set up.

When should your firewall be reviewed?

A full review is sensible at least once a year, with smaller checks after major changes. These changes include moving premises, changing internet providers, adding a new server, introducing remote working, installing CCTV, opening another site or bringing in a new cloud platform.

It is also wise to arrange a review after a suspected phishing incident, malware alert or unexplained network slowdown. The firewall may not be the cause, but checking it can reveal gaps that would otherwise remain unnoticed. Changes should be documented and tested, ideally outside the busiest part of the working day, so security improvements do not create unexpected disruption.

A properly configured firewall is one part of a wider security plan that includes updated devices, secure backups, staff awareness and dependable IT support. For businesses across Norfolk, Suffolk and East Anglia, Anglian Internet can help turn an unclear set of settings into a practical, manageable security position. A review now gives your business the chance to fix small weaknesses before they become an urgent call.