Open the closet where your network lives and you will find a stack of black boxes with blinking lights, a power strip that has seen things, and a bundle of cables somebody definitely meant to label. Ask most owners what each box does and the honest answer is “the internet comes out of there somewhere.”
That is fine right up until something breaks, or a quote arrives proposing to replace a device you cannot describe. So let us fix it in one read. There are only four jobs happening in that closet, they map cleanly onto parts of a building you already understand, and once you can name them you can have a real conversation about what to fix first.
Your Network Closet, Explained as a Building
Picture your office as an actual building with a front door, hallways, and rooms.
- The modem is the driveway. It is the physical connection between the public road and your property. Its only job is turning your provider’s signal into something your equipment understands. It makes no decisions.
- The router is the front desk. Cisco’s networking documentation describes routers as devices that connect multiple networks together and connect the computers on those networks to the internet, and says a router acts as a dispatcher: it analyzes data being sent across a network, chooses the best route for that data, and sends it on its way. Where is this going, what is the fastest way there, next.
- The firewall is the security guard at the door. Cisco defines a firewall as a network security device that separates a trusted internal network from an external network deemed untrustworthy, such as the internet, monitoring incoming and outgoing traffic and deciding to allow or block it based on a defined set of security rules. The front desk routes. The guard decides who gets in at all.
- The switch is the hallway. Cisco’s documentation calls switches the foundation of most business networks and describes a switch as a controller that connects computers, printers, and servers to a network in a building or campus. It is how rooms reach each other without going outside.
- The cabling is the hallway itself. Nobody thinks about it because it is inside the walls, and it is a common cause of mystery problems. Old or badly terminated cable caps the performance of every expensive box you plug into it. If it was pulled long ago and never tested, that is worth knowing before you buy anything.
In a small office, several of these jobs get combined into one unit. That is not automatically bad. It means that when someone says “the router is the problem,” you have to ask which job they mean.
Why the Provider’s All in One Box Is Usually the Weak Link
The unit your internet provider installed is typically doing modem, router, firewall, switch, and wireless duty all at once. It is the studio apartment of network equipment. Everything is in there, none of it has much room, and the kitchen is three feet from the bed.
Our objections are specific rather than snobbish. It is optimized for cost, because your provider bought thousands of them. You usually do not fully control it, which limits both visibility and your ability to change security settings. Its wireless radio is designed to cover a house, not an office with concrete, metal shelving, and twenty five devices. And its firewall is generally the simplest kind available.
Whatever equipment you end up with, do the free thing first. NIST guidance for small businesses, published in 2016 by the National Institute of Standards and Technology, recommends installing and operating a hardware firewall between your internal network and the internet, and changing the administrative password on it upon installation and regularly thereafter. Default passwords on internet facing equipment remain one of the easiest ways in, and fixing that costs nothing.
What a Business Firewall Actually Adds
This is where the money goes, so it is worth understanding what you get for it.
Cisco’s documentation describes a traditional stateful inspection firewall as one that allows or blocks traffic based on state, port, and protocol. That is your basic guard, checking whether someone has a valid reason to be at the door. Useful, and roughly what the provider box gives you.
A next generation firewall, per that same Cisco documentation, provides capabilities beyond a traditional stateful firewall, adding application awareness and control, an intrusion prevention system, URL filtering based on geolocation and reputation, and threat intelligence. In building terms, the guard now recognizes individual visitors instead of just checking badges, notices when a delivery driver starts wandering the server room, and gets a daily briefing on which vehicles have caused trouble elsewhere.
The practical difference is visibility and control. You can see what is leaving your network, block categories of destinations, and get alerted when a machine behaves strangely. For any business handling customer data or payments, that shift from blind to informed is the real product. It is the same reasoning behind treating security as a baseline rather than an upgrade.
Access Points Are Not the Router
This confusion causes more wasted money than any other topic in this post. People with poor wireless coverage buy a bigger router, and nothing improves.
Cisco’s documentation says an access point allows devices to connect to the wireless network without cables, and describes it as acting like an amplifier: while the router provides the bandwidth, the access point extends that bandwidth so the network can support many devices. Different job, different device. The router is the front desk. Access points are speakers mounted through the building so people hear announcements in every room.
If your dead zone is at the far end of the warehouse, no router purchase fixes it, because the problem is distance and walls. What fixes it is a wireless radio nearer the people who need it, wired back to the switch. Two or three modest access points in the right places beat one expensive box in the closet.
The Sane Order to Upgrade In
You do not have to do this all at once, and doing it all at once is usually a mistake. Work in this order.
- Fix the free things. Change default administrative passwords, apply pending firmware updates, and find out whether anything is exposed to the internet that should not be. Zero dollars, meaningful improvement.
- Test the cabling. Do this before buying gear, not after. Discovering bad cable after you install new switches is a special kind of frustrating.
- Replace the firewall. This is the security boundary and the box you have the least control over today. It is the highest value single upgrade for most offices.
- Fix wireless with access points. Placement first, hardware second. A survey of where people actually work beats guessing.
- Upgrade switches last, unless they are the bottleneck. Switches are reliable and boring. Replace them when you need more ports, power delivered over the cable to phones and cameras, or the ability to split your network into separate zones.
The Bottom Line
Four jobs: connect to the road, direct the traffic, guard the door, link the rooms. Once you can name which box does which, quotes stop being mysterious and you can tell the difference between a genuine need and an upsell.
The all in one box from your provider is not evil, it is a compromise, and the firewall function is where that compromise hurts most. Better local networking also does not remove your dependence on the outside world, since the services you rely on can still have their own bad days. Hardware models and capabilities change constantly, so confirm current specifications before purchasing anything.
If you would like someone to open that closet, label what is in there, and tell you honestly what needs attention and what is fine, that is a normal Tuesday for us in Denton County. Contact us today.
Sources:
Comments are closed