[AD2] TechConfidential

Network Assessment

Prepared for Acme Industries, Inc. — 87 employees, two sites, Denver, CO.

EngagementAEGIS‑A‑2026‑041
Report dateSeptember 2026
Prepared byAD2 Tech partners
CoveredFirewall · Switches · Wi‑Fi · Remote access
AEGIS · how AD2 Tech does the work

Summary for the owner

Acme Industries runs a typical network for a business of its size: one firewall at the main office, a second at the warehouse, five switches, eleven Wi‑Fi access points, and staff who connect from home. The network is stable and nobody has reported a problem. It nonetheless carries three critical findings that together give an outsider a realistic way in.

Critical3
High14
Medium29
Low28

The three critical findings (F‑003 remote desktop reachable from the internet; F‑009 the firewall's admin login has no second factor; F‑007 network settings have never been backed up) can all be closed inside 14 days for roughly a day and a half of work. We recommend starting there.

Beyond the immediate risks, the main office firewall is two years past the date its maker stopped supporting it, and nine of fourteen devices have automatic updates switched off. Neither is an emergency today; both should be on the budget for the next quarter rather than discovered after a failure.

Recommended next 90 days
  1. Close the three critical findings (quoted as one fixed‑price remediation project).
  2. Turn automatic updates on everywhere and separate guest Wi‑Fi from the office network.
  3. Budget the firewall replacement for next quarter; re‑check the network afterwards.
Request a proposal How this gets produced
One finding, up close

Every problem comes with the fix attached.

Findings aren’t a list of problems we hand off and walk away from. Each one says what we found, why it matters to the business, what to do, and how long it takes — diagnosis and prescription, side by side.

F‑003

Remote desktop on the accounting server is reachable from the internet.

Critical
What we foundA rule on the main office firewall, added in 2023, lets anyone on the internet reach the remote‑desktop login on the accounting server. It only asks for a username and password. Sign‑in attempts from unknown addresses appear in the log every day.
Why it mattersThis is the most common way businesses of this size get locked out of their own files and asked for a ransom. One guessed or reused password is enough. Typical recovery: six to nine weeks of disruption.
What to doRemove the rule. Staff who need the server from home connect through the company VPN instead, which already exists and asks for a second factor. Confirm the three people who used the old route can still work.
Effort
~1 hr
Includes a short check‑in with the three affected staff.