Network Infrastructure That Scales With Your Organisation

It depends on what you're starting with, but typically we're replacing aging switches and routers, upgrading your firewall to something current, swapping out consumer Wi-Fi gear for enterprise kit, segmenting your network properly, setting up monitoring so you can see what's happening, and documenting the whole thing. Most projects take 4-12 weeks from initial assessment to go-live, depending on how complex your site is and whether we can do cutover work outside hours.

Whatever genuinely fits your environment and budget — not what we're incentivised to sell. Cisco if you need enterprise-grade and compliance tick-boxes. HP/Aruba for education and healthcare. Ubiquiti if you're budget-conscious and want cloud management. Fortinet or Palo Alto for serious firewalls. Open-source platforms like pfSense when that makes sense. We're not locked into one vendor's roadmap, which means you get what actually works for you instead of what maximises our margin.

Usually, yes. We assess what you've got, figure out what can stay and what needs replacing, and design a migration that doesn't require downtime during business hours. We work with mixed environments all the time — Cisco core with Ubiquiti Wi-Fi, Fortinet firewalls with Aruba switches, whatever. If your existing gear is still doing its job, we'll integrate it. If it's end-of-life or causing you problems, we'll tell you why it needs replacing and what with.

We start by understanding what you actually need to allow — which users need access to what, where your compliance requirements are, what your risk profile looks like. Then we configure the firewall to block everything by default and only allow what's required. All rules get documented with business justification so when someone asks "why is this blocked?" in 18 months, there's an actual answer. We also set up logging and alerting so you know when something's trying to break in.

VLANs let you logically separate different types of traffic on the same physical network. Your staff, students, guests, IoT devices, servers, and management systems each get their own isolated segment with firewall rules controlling what can talk to what. This means a compromised guest laptop can't reach your file server, your IoT coffee machine can't access student data, and broadcast traffic doesn't flood your entire network. It's security and performance in one, and it's standard in every network we design.

Yes. We can do site-to-site VPNs if you need to connect offices, and remote access VPNs for staff working from home. Authentication ties into whatever identity system you're using (Active Directory, Google Workspace, JumpCloud) with MFA enforced. If you're cloud-first, we can also set up Zero Trust network access instead of traditional VPN, which works better for organisations where "the office" isn't really a physical place anymore.

Depends entirely on what you need. A 50-person office refresh is typically $15k-$30k. A 200-student school is more like $40k-$80k. A 500-student multi-building campus can be $100k-$200k+. Most organisations see payback within 12-18 months through reduced downtime and not having to reactively firefight network issues. We provide detailed quotes after the initial discovery session — pricing includes design, hardware, installation, configuration, testing, and proper documentation.

We can, but it's optional. Some clients want us to monitor and manage their network ongoing ($500-$2,500/month depending on size), which includes 24/7 monitoring, firmware updates, config backups, performance tuning, and priority support. Others prefer to run it themselves — in which case we deploy the monitoring tools, document everything properly, train your team, and provide support when you need it.

Yes. We do proper network assessments — switch and firewall audits, Wi-Fi spectrum analysis, bandwidth checks, routing reviews, the lot. Common culprits are misconfigured VLANs, spanning tree loops, firewall bottlenecks, overlapping Wi-Fi channels, insufficient bandwidth, or just outdated firmware. Most issues are fixable without ripping everything out and starting again.

Both. Some work can be done remotely (design, planning, config changes), but proper network work requires being physically there — site surveys, running cable, mounting switches and APs, troubleshooting weird issues. We're based in Christchurch with on-site coverage across Canterbury and the South Island. For organisations further afield, we do remote design and planning, then schedule on-site blocks for installation and training.