Firewall setup & management

A dental office's network carries patient records, imaging and card payments, and it is required by HIPAA to protect them. The firewall is where that starts. We set it up around how a dental office actually works, and we keep it that way.

Why a dental office needs more than the router that came with the internet

The device your internet provider supplied does one job: it connects you to the internet. It does not separate the front desk from the operatories, it does not keep the guest Wi-Fi away from the server, and it does not tell anyone when something is trying to get in. A proper firewall does all three, and the HIPAA Security Rule expects the practice to have thought about it.

What we set up

We start by mapping what is on the network. Workstations, the server, imaging sensors, the phone system, printers, the patient Wi-Fi. Then we build the firewall rules around that map: clinical devices on their own segment, guest traffic on another, remote access only through a proper VPN, and everything else closed.

Practice-management and imaging software often need specific ports open for updates and support. We know which ones, so nothing gets blocked that should not be, and nothing stays open that should be closed.

What we manage afterwards

• Firmware updates on a schedule, tested before they go in
• Rule reviews when you add a device, a service, or a new supplier
• Logs reviewed for anything unusual, with a plain-English note to you if there is
• Remote-access accounts created and removed as staff join and leave
• A written summary of the configuration, kept current, for your HIPAA file

How it fits with the retainer

Firewall management is included for practices on the retainer. If you are not on retainer, we can set the firewall up as a one-off project and manage it on its own. Either way, the work is done by the same technician who set it up, so nothing gets lost between people.

What happens when something gets through

No firewall stops everything. What ours gives you is containment, so a problem on one device stays on that device, logs that show what happened, and a person to call who already knows the network.

Common questions

We have a firewall already. Do we need a new one?

Maybe not. Plenty of practices have a capable device that was never configured beyond the defaults. The assessment tells us whether the hardware is fine and only the setup needs work, or whether it is time to replace it. We will show you the difference before you spend anything.

Will this slow the internet down?

A correctly sized firewall does not. Where practices notice slowness after a firewall goes in, it is almost always an undersized device or a rule set that inspects traffic it does not need to. We size the device for your connection and your number of users, and we test throughput before we leave.

Does this cover the card terminal?

The card terminal sits on its own segment, away from patient data and away from the guest Wi-Fi. That is what your payment processor expects, and it is part of the standard setup.

What about staff working from home?

Remote access goes through a VPN on the firewall, with an account per person. When someone leaves the practice, their access is removed the same day you tell us. Nobody shares a login.

Is this enough for HIPAA?

It is the network part of HIPAA. The rule also covers policies, training, and how you handle records, which are outside what a firewall can do. We give you the technical documentation for your file and we will tell you which parts of the picture we do not cover.

Getting started

The free on-site assessment includes a look at your current firewall and network layout. If it is fine, we will say so. If it is not, you will get a clear list of what we would change and why, before any decision about cost.