Field notes, powered by ewusOS

A business firewall when nobody is a security engineer

Ask a twenty-person business who owns network security and you usually get a pause, then a name, then a qualification: he does it, alongside everything else.

The honest answer is nobody

In a business of twenty or fifty people, network security is rarely somebody's job. It is a task attached to whoever is most comfortable with computers, on top of the work they were actually hired for. That person is not underqualified. They are unavailable.

This matters more than any feature comparison, because almost every security product on the market assumes the opposite. It assumes a person who will read what it reports.

What "we will check the logs" quietly assumes

It assumes somebody knows what normal looks like, so they can recognise abnormal. It assumes they look often enough to catch something while it still matters. And it assumes that when they find something, they know what to do next.

Each of those is a full-time habit. A product that depends on all three, in a business where nobody owns the task, is not protecting anything. It is producing evidence for after the fact.

Decisions made once, not decisions made daily

The protections that survive in a business like this are the ones that are set once and then hold without attention. Guests separated from the machine that holds your accounts. Administration unreachable from the ordinary staff network. Threats stopped at the gateway, where the cover extends to the camera, the printer and the card terminal, none of which can run security software of their own.

None of those need watching. They need deciding, once.

What happens at two in the morning

The real test of unattended security is what it does when it fails and nobody is there. A device that can take the business offline while protecting it has swapped a possible problem for a certain one.

EWUS gateways fail open: if our software has a problem, the connection stays up. Two lines run together rather than one sitting idle as a line item. EWUS Secure is built for the business where nobody is watching, because in most businesses this size, nobody is.

Where EWUS actually is. The gateway described here is pre-certification: there is no stock, no pre-orders and no availability date, and nothing on this site is a photograph of finished hardware. What is described is what ewusOS is built to do. If it fits a problem you have, the waiting list is the only thing on offer today.

See EWUS Secure →

← Previous: Family internet rules that actually holdNext: What a subscriber gateway does that a… →

All field notes →