During our network audit, we will document and evaluate your current network configuration and discuss your current and future network requirements.

Security status

The security status evaluation provides a high-level snapshot of your organization’s overall protection posture against cyber threats. We assess exposure to common risks like unauthorized access, malware, ransomware, phishing vectors, and data exfiltration. This includes scanning for known vulnerabilities across devices, endpoints, and applications using industry-standard tools. We review patch levels, antivirus/EDR effectiveness, user access privileges, and any indicators of compromise from logs or recent incidents. Encryption usage (e.g., for data at rest and in transit), multi-factor authentication enforcement, and backup integrity are also checked. The goal is to identify critical, high, medium, and low risks with a prioritized heat map. For Ottawa businesses, this often highlights gaps from remote work setups, outdated software, or weak perimeter defenses. By the end, you’ll understand your current risk profile, compliance alignment (e.g., basic PIPEDA considerations), and immediate steps to reduce breach likelihood—often uncovering issues that could prevent costly downtime or regulatory fines. For more on building a strong security posture, see the NIST Cybersecurity Framework and the CIS Controls.

Firewall configuration

Firewall configuration review dives deep into your primary security gateway. We examine rule sets for accuracy, order, and necessity—checking for overly permissive “any-any” rules, outdated allow statements, or shadowed rules that hide vulnerabilities. NAT policies, VPN tunnels, intrusion prevention signatures, application-layer filtering, and logging/alerting are all audited. We verify that inbound/outbound traffic aligns with business needs while blocking threats like exploits or command-and-control communications. Common findings include unnecessary open ports, missing geo-blocking, weak zone segmentation, or unpatched firmware exposing known CVEs. For modern environments, we also assess next-gen features like SSL decryption, user-ID integration, or threat intelligence feeds. The audit ensures the firewall enforces least-privilege access and supports secure remote access without creating backdoors. Businesses often discover “rule bloat” from years of additions, leading to performance hits or security holes. Post-audit, you’ll receive recommendations to clean up rules, implement deny-by-default policies, and align configurations with best practices—strengthening defense-in-depth and reducing attack surface dramatically. Refer to Palo Alto Networks’ Best Practices or Cisco’s firewall mappings to NIST CSF.

Router/switch performance

Router and switch performance evaluation focuses on the core devices handling traffic routing and switching. We measure key metrics like CPU/memory utilization, interface errors, packet drops, CRC errors, and throughput under normal load. Bottlenecks from oversubscription, duplex mismatches, or aging hardware are identified. Routing protocols (e.g., OSPF, BGP, static) are checked for stability, convergence times, and misconfigurations causing loops or blackholing. Switch features like VLAN trunking, spanning tree protocol health, QoS policies, and port security are reviewed. We look at buffer overflows, broadcast storms, or high latency impacting VoIP/video applications. In many Ottawa offices, we find undersized routers struggling with increased cloud traffic or switches with failing power supplies. Performance data helps forecast capacity needs for growth. You’ll get insights into optimization opportunities—like enabling link aggregation, upgrading firmware, or segmenting traffic—to improve reliability, reduce downtime, and ensure smooth application performance across the network. Cisco’s Network Management Best Practices outline key monitoring strategies.

Physical layer evaluation (cabling)

Physical layer (cabling) evaluation inspects the foundational wired infrastructure. We visually and functionally assess Category rating (e.g., Cat5e vs. Cat6/6a), cable integrity, terminations, patch panel organization, and labeling accuracy. Testing includes continuity, length limits, crosstalk, attenuation, and return loss using certified cable testers to verify support for current/future speeds (Gigabit to 10G+). Common issues found: damaged cables from poor routing, unshielded runs near power lines causing interference, outdated copper in high-bandwidth areas, or improper grounding leading to EMI. We check for compliance with TIA/EIA standards and identify risks like single points of failure from daisy-chained connections or unlabeled runs complicating troubleshooting. In older Ottawa buildings, legacy cabling often limits Wi-Fi backhaul or PoE for IP cameras/phones. Recommendations typically include recabling segments, reorganizing racks for better airflow, or planning fiber uplinks. A solid physical layer prevents intermittent connectivity, speed degradation, and costly future rewiring—ensuring reliable, high-performance connectivity as your business scales. Learn more from the ANSI/TIA-568 standards overview or TIA structured cabling guidelines.

Hub/switch performance and configuration

(Note: While modern networks rarely use legacy hubs, this covers older or small setups; focus is on switches.) We evaluate switch performance through metrics like port utilization, error rates, broadcast/multicast storms, and backplane capacity. Configuration checks include VLAN setup, trunk/access ports, spanning tree (preventing loops), port security (MAC limiting), power-over-Ethernet budgets, and stack/master redundancy. We verify firmware currency, SNMP/community strings, management access controls, and logging. Issues often include misconfigured VLANs causing segmentation failures, disabled STP leading to loops, or overloaded PoE switches dropping devices. In performance terms, we identify bottlenecks from slow uplinks or congested ports affecting user experience. For Ottawa SMBs, we frequently see unmanaged switches in critical areas lacking visibility or security features. The audit delivers a clear picture of switch health, with suggestions for hardening (e.g., disabling unused ports), upgrading to managed/Layer 3 models, or implementing monitoring. This ensures efficient Layer 2 forwarding, better traffic control, and reduced risk of outages from configuration drift or hardware strain. Cisco provides detailed guidance on Spanning Tree Protocol configuration and VLAN best practices.

Internet configuration

Internet configuration review examines how your ISP link integrates with the internal network. We assess public IP assignments, NAT/PAT rules, static/dynamic addressing, DNS settings (internal/external), and proxy/VPN gateways. Router WAN interfaces, BGP peering (if applicable), QoS for VoIP/prioritization, and failover configurations (dual WAN, SD-WAN basics) are checked. We verify ISP modem/router handoff, MTU settings to avoid fragmentation, and any carrier-grade NAT issues. Security aspects include exposed services (RDP, VPN ports), DMZ setup, and rate-limiting against DDoS. Common findings: misconfigured split-tunnel VPNs leaking traffic, outdated DNS resolvers vulnerable to poisoning, or single points of failure without redundancy. For businesses relying on cloud apps, we evaluate bandwidth symmetry and latency to providers like Microsoft 365 or AWS. You’ll receive recommendations to optimize peering, implement secure DNS (DoH/DoT), add failover, or negotiate better ISP terms. Proper configuration ensures reliable, secure Internet access—critical for hybrid work, SaaS performance, and preventing costly outages. See IETF’s RFC 7454 on BGP Operations and Security for advanced routing insights.

Internet performance

Internet performance evaluation measures real-world throughput, latency, jitter, packet loss, and stability across your connection. We run speed tests (upload/download), traceroutes to key destinations, and continuous monitoring for drops or spikes. Factors like ISP contention, peering quality, local loop issues, or internal bottlenecks (e.g., firewall throughput limits) are isolated. VoIP/video quality is simulated to detect jitter-sensitive problems. In Ottawa, we often see asymmetric DSL/cable links struggling with upload-heavy cloud backups or remote desktop. We benchmark against SLA promises and identify degradation causes like bufferbloat or Wi-Fi interference bleeding into wired metrics. Long-term trends help predict saturation points. You’ll get data-driven insights—e.g., “peak-hour slowdowns due to oversubscription”—plus fixes like traffic shaping, ISP upgrades, or adding bonded connections. This ensures applications run smoothly, video calls stay clear, and cloud services perform reliably, directly impacting productivity and user satisfaction. Cisco explains key metrics in their network performance monitoring guide.

Overall network configuration

Overall network configuration provides a holistic review of design, documentation, and settings coherence. We map topology (physical/logical), IP addressing schemes (subnetting, DHCP scopes), VLAN architecture, routing tables, ACLs, and naming conventions. Documentation quality—diagrams, asset inventories, change logs—is assessed for accuracy and completeness. We check for consistency (e.g., matching security policies across devices), legacy protocols (e.g., outdated SNMPv1), and scalability issues like exhausted subnets. Common gaps include poor segmentation allowing lateral movement in breaches, undocumented shadow IT, or inconsistent QoS causing priority conflicts. For growing Ottawa businesses, we evaluate readiness for expansion (cloud migration, new branches). The audit uncovers configuration drift from years of ad-hoc changes. You’ll receive a clean topology map, prioritized cleanup steps, and best-practice alignments (e.g., zero-trust principles). A well-documented, logical configuration reduces troubleshooting time, improves security, and supports faster deployments—turning your network from a black box into a strategic asset. Cisco’s NMS Best Practices emphasize topology mapping and documentation.

Overall network performance

Overall network performance ties everything together by measuring end-to-end health. We baseline latency, throughput, error rates, and application response times across segments. Tools simulate user traffic to spot bottlenecks—whether from core switches, WAN links, wireless overlays, or server uplinks. We analyze utilization trends, peak loads, and retransmissions indicating congestion or quality issues. In multi-site or hybrid setups, inter-VLAN routing efficiency and remote access performance are key. Ottawa clients often face Wi-Fi congestion in dense offices or VPN slowdowns during remote work surges. We identify “noisy” devices, inefficient protocols, or under-provisioned links. Results include heat maps of problem areas and capacity forecasts. Recommendations might involve segmentation, hardware refreshes, or monitoring tools for ongoing visibility. Strong overall performance means faster file transfers, seamless collaboration, reduced user complaints, and better support for business-critical apps—ensuring your network enables growth rather than hindering it. For metric definitions and monitoring, check resources on latency, jitter, and throughput.

Network Audits for Ottawa Businesses - Firewall Technical

During a Network Audit, We Evaluate the Following: