Technology
What your network
actually delivers.
Not a tech spec sheet. A plain-language explanation of what you get, why it matters to your business, and what it looks like day to day.
What You Get
Four things your
network needs to do.
Every managed service client gets a network designed around these four outcomes — not just "internet that works."
01
⚡
Always On
Your network is monitored 24/7. When something goes wrong — a circuit drops, a switch fails, a firewall reboots unexpectedly — we know before you do. Most issues are resolved before anyone in your office notices. For those that aren't, response times are measured in minutes, not hours.
99.9% Uptime Target
02
🔒
Properly Secured
Your employees, your guests, your servers, and your VoIP phones are all on separate network segments. If a guest connects to your WiFi, they cannot access your file servers. If a workstation gets compromised, it cannot reach your accounting system. Ransomware that lands on one machine stays there.
Zero Flat Networks
03
📈
Visible to You
Every month you receive a plain-English health report: uptime, threats blocked, bandwidth trends, maintenance completed, and any recommendations. You're never in the dark about your own network. If something needs attention, it's flagged clearly — not buried in technical jargon.
Monthly Reports, Always
04
📅
Built to Grow
When you hire your 30th employee or open a second location, your network is ready. IP address space, VLAN architecture, and switching capacity are all designed with 3–5 year headcount growth in mind. No expensive re-installs. No "we need to start over." Just add capacity.
Designed for 3–5 Year Growth
Monthly Health Report
You'll know exactly
how your network performed.
Every client receives an automated monthly health report. Here's what it looks like — real numbers, plain language, actionable recommendations.
Overall Network Status✅ Healthy
Internet Uptime (Primary Circuit)99.97%
Unplanned Downtime0:00
Planned Maintenance10 min (firmware update, 2:00 AM)
Threats Blocked (Firewall / IPS)247
Malicious Sites Blocked182
Malware Downloads Prevented41
Unauthorized Access Attempts (VPN)0
Avg WAN Bandwidth Utilization42%
Firewall CPU (avg / peak)15% / 42%
Wireless Clients (avg connected)32 devices
Config Backup Status✅ Daily — All devices current
RecommendationsNone — Network performing optimally
Compliance & Security Posture
Built to satisfy
your compliance requirements.
Proper network segmentation is a requirement for HIPAA, PCI-DSS, and most cyber insurance underwriters. We design to these standards from the start — not as an afterthought.
🏥
HIPAA Network Segmentation
Patient data (EMR) on an isolated VLAN unreachable from guest WiFi or general workstations. Logging and access control documentation for audit readiness.
💳
PCI-DSS Zone Isolation
Payment card systems on a dedicated segment with explicit-permit firewall rules. No cardholder data environment exposure to general network traffic.
📄
Cyber Insurance Readiness
Underwriters now require documented network segmentation. Our monthly reports and as-built documentation provide the evidence trail your broker needs at renewal.
🌐
Remote Access VPN
Encrypted remote access for your staff — IPsec or SSL VPN with MFA. Remote workers get a corporate network experience without exposing internal resources to the internet.
📡
Guest Network Isolation
Client and visitor WiFi is completely isolated from your corporate network. Guests get internet. They cannot reach your servers, printers, or internal resources under any circumstances.
📋
Network Documentation
Every client gets complete as-built documentation: IP register, VLAN map, firewall rule set, device inventory, and DR runbook. Your network is fully documented, always.
Equipment We Deploy
Two hardware platforms.
Matched to what you actually need.
All client premises equipment is NetworkNavigators-owned. Rental is included in your monthly service fee. We maintain it, update it, and replace it at end of life. We deploy from two platforms depending on the tier — Ubiquiti UniFi for visibility-first monitoring, and Fortinet FortiGate for full UTM-grade security. Neither is "better" in the abstract — they're built for different jobs, and we'll tell you honestly which one your environment needs.
Essential Tier · Monitoring
Ubiquiti UniFi.
Total visibility, at a lower price point.
Deployed on our Essential service tier. UniFi's strength is its single-pane monitoring console — real-time topology, per-client analytics, and historical trending — not a full UTM security stack. Right choice for offices, homes, and sites where visibility and clean network hygiene matter more than deep-packet UTM inspection.
Ubiquiti
UniFi Cloud Gateway Ultra / UDM-SE
Gateway · Monitoring · VPN
- Real-time topology & client-level analytics
- DPI traffic identification
- Built-in IDS/IPS (Suricata-based)
- WireGuard & OpenVPN remote access
- Multi-WAN with automatic failover
- Single-pane UniFi Network dashboard
Ubiquiti
UniFi Switch Pro Max 24 PoE
Managed Switch · VLAN · PoE+
- 802.1Q VLAN trunk & access ports
- PoE+/PoE++ for APs and VoIP phones
- Per-port real-time traffic & power monitoring
- STP loop prevention
- 24 or 48-port configurations
- Remotely managed via UniFi Network Console
Ubiquiti
UniFi AP U6+ / U7 Pro
Wireless Access Points · Wi-Fi 6/6E/7
- 802.11ax/be Wi-Fi 6 & 7
- SSID-to-VLAN mapping per radio
- Real-time client signal & throughput analytics
- Heatmap-based RF planning
- Guest captive portal support
- Seamless roaming across APs
No FortiGuard-style subscription required for core monitoring — UniFi Network Application, DPI, and IDS/IPS signatures are included with the hardware. Sites that need PCI/HIPAA-grade UTM, sandboxing, or SSL deep inspection move to the Fortinet tier.
Professional & Enterprise Tier · Deep Security
Fortinet FortiGate.
Full UTM. Included in your monthly fee.
Deployed on our Professional and Enterprise service tiers. FortiGate's strength is threat depth — IPS, application control, SSL inspection, and sandboxing running on ASIC-accelerated hardware. Right choice for compliance-driven, higher-risk, or higher-value environments.
Fortinet
FortiGate 60F / 80F
Firewall · Security Edge · VPN
- Stateful firewall with security zones
- App-ID: 7,000+ application signatures
- Intrusion Prevention System (IPS)
- IPsec site-to-site & SSL remote-access VPN
- VLAN-aware routing & NAT
- Content filtering (Professional+)
Fortinet
FortiSwitch 124F-POE
Managed Switch · VLAN · PoE+
- 802.1Q VLAN trunk & access ports
- PoE+ for APs and VoIP phones
- RSTP loop prevention
- LLDP neighbor discovery
- 24 or 48-port configurations
- Remotely managed via NETCONF
Fortinet
FortiAP 231F / FortiAP U431F
Wireless Access Points · Wi-Fi 6
- 802.11ax Wi-Fi 6
- SSID-to-VLAN mapping per radio
- Cloud-managed RF optimization
- Rogue AP detection
- Guest captive portal support
- Seamless roaming across APs
Fortinet CPE across Professional and Enterprise tiers — FortiGate firewall, FortiSwitch, and FortiAP form a unified management fabric with active FortiGuard threat intelligence.
Which Tier Is Right for You
Monitoring first,
or security first?
📊
Choose Ubiquiti if…
You want full visibility into what's happening on your network — topology, client behavior, bandwidth — at a lower monthly cost, and your compliance requirements don't mandate a certified UTM firewall.
🛡️
Choose Fortinet if…
You handle regulated data (HIPAA, PCI-DSS), carry cyber insurance that questions firewall make/model, or need IPS, sandboxing, and SSL deep inspection actively blocking threats — not just reporting on them.
🔄
Not sure? Start with a consult.
Most clients don't know which tier they need until we've looked at their environment. We'll recommend one platform, honestly — not upsell you into the more expensive tier by default.
Questions about your specific setup?
We'll give you a straight answer.
Free 30-minute consultation. We'll review what you have, what you need, and what it'll cost. No obligation.