Multi-site Infrastructure Modernisation

The problem

The estate had grown organically: a flat network, unmanaged switches, ageing servers and no clear security posture. It came to a head when a legacy server failed and could be reached neither remotely nor physically.

The approach

• Redesigned a flat network into a segmented multi-site UniFi estate, with OPNsense firewalls in high-availability pairs.
• Moved to Linux XCP-ng hypervisors and rebuilt 13 virtual machines from bare metal, including file servers and domain controllers.
• Refreshed more than 100 devices, including custom-built CAD workstations, with CrowdStrike across the fleet.
• Migrated a CAE and simulation consultancy's infrastructure into the data centre when it joined the group.
• Working towards Cyber Essentials and TISAX.

The outcome

• Endpoint exposure risk score cut from 90,000 to under 10,000 within three weeks of the endpoint rollout.
• Every site on a managed, segmented and monitored network.
• A stable platform the business now builds its own software on.

What they say