Infrastructure & Network

Each store had its own network, configured differently, with no central visibility. The customer Wi-Fi was unstable and shared the same network as the POS systems — a real security risk.

We unified everything on Ubiquiti infrastructure, managed from a central controller. We separated traffic onto dedicated VLANs (POS, back-office, guest), with authentication on the internal Wi-Fi and a captive portal for customers. All locations are now monitored and updated centrally.

Rolling out to new stores became a routine operation: the standard configuration replicates in a few hours, not days. The management team sees the status of each location in real time and can intervene remotely, with no site visits, which dramatically shortened reaction time to problems.

Production equipment (OT) and office computers (IT) were on the same network segment. A single infected workstation could halt the production line, and the setup did not pass audit requirements.

We redesigned the network with strict OT/IT segmentation, a dedicated firewall with explicit rules between zones and IDS/IPS for traffic. We secured remote access through a site-to-site VPN to headquarters and documented the entire architecture for audit.

The OT/IT separation eliminated the class of risks where an office problem could stop production. The complete architecture documentation significantly shortened subsequent audits and turned security into a permanent, maintained state rather than a one-off project done under pressure.

The clinic had a single internet connection, with no backup. Every outage took down the appointment system and left the front desk blocked, with patients waiting.

We installed a dual connection with automatic failover, so switching to the backup line is instant and transparent. We connected the two clinics through a site-to-site VPN and separated the patient Wi-Fi from the medical network.

The front desk gained confidence: appointments work regardless of the state of any single internet line. The secure link between clinics also opened the possibility of centralising resources and sharing medical systems between locations, with no major additional investment.