Firewall & routing
The boundary between your office and the internet: rules, firmware updates, and a record of who is allowed to change them.
Networking / The office's own category
A firewall appliance blinking quietly in a closet is not a network plan. The office network - firewall, Wi-Fi, wired ports, and remote access - deserves the same named, maintained category every laptop already gets.
Read this page in FrenchWhy this needs its own name
Device lifecycle gives every laptop a repeatable plan: provision, maintain, support, retire. The network hardware sitting between those laptops and the internet often gets none of that. A firewall, an access point or two, and a switch get installed once at setup, then disappear from anyone's attention until something stops working.
Four pieces, one standard
The boundary between your office and the internet: rules, firmware updates, and a record of who is allowed to change them.
Coverage, a genuinely separate guest network, and passwords that are not still the ones set at installation.
Switches and cabling that mostly go unnoticed until a port stops working or a new desk needs one.
A defined, revocable way for specific people to reach office resources from outside - not a permanent hole punched in the firewall.
Who owns what
| Area | What can be maintained | What stays a business decision |
|---|---|---|
| Firewall & rules | Firmware updates, rule hygiene, a change log | Which sites or services are allowed, and why |
| Wi-Fi | Access point health, guest network hygiene, password rotation | Coverage build-out for a new space |
| Wired network | Port and switch health, cabling documentation | New construction or office moves |
| Remote access | Access provisioning and prompt revocation | Who is approved for remote access, and to what |
Before you trust the blinking light
Most offices can answer very few of these questions on request - which is exactly why they are worth asking before something forces the answer.
What this does not replace
This is not a claim of data-centre network engineering, carrier-grade infrastructure, or specialized industrial networks - those need their own dedicated project scope. It also does not replace the internet service provider itself; see how that relationship is coordinated separately . Ordinary office connectivity - the equipment your team actually owns and depends on - is what gets a maintained standard here.
Next step
The service map turns your context into a short, copyable list: people, devices, Microsoft 365, vendors, and decisions to clarify.
Build the service map