Watchguard firewall


CRS, also known as Civil Rail Services, is a company based in Kent, South East England, with offices located throughout the UK. They specialise in providing comprehensive rail infrastructure services.

As a leading provider in the industry, CRS offers a wide range of services related to rail construction, maintenance, and project management. They work on various aspects of rail infrastructure, including track construction and maintenance, signaling and telecommunications, electrification, and civil engineering works.

With their expertise and experience, CRS plays a crucial role in the development and maintenance of rail networks across the UK. Their services contribute to the safe and efficient operation of railways, ensuring the smooth transportation of passengers and goods.


CRS, a Kent-based company working on government contracts, required a firewall installation to improve its cyber insurance coverage and maintain uninterrupted business operations.

With the updated terms of their cyber insurance policy, CRS was required to implement multi-factor authentication (MFA) for remote access to their servers and internal applications. This additional layer of security was crucial to protect sensitive data and mitigate the risk of unauthorised access. Failure to implement MFA not only posed a threat to their contracts but also left them vulnerable to potential security breaches, which could have severe consequences for their business reputation and operations.

To address compliance and data security concerns, CRS engaged MPR IT Solutions, an experienced IT provider. Recognising the importance of robust cybersecurity measures, we recommended the implementation of a WatchGuard Firewall, specifically the WatchGuard Firebox T85. Alongside the firewall, we also advised the use of multi-factor authentication (MFA) to further enhance security. The WatchGuard Firebox T85 provided advanced threat protection and network security features, ensuring that CRS’s servers and internal applications were safeguarded from unauthorised access and potential data breaches. By combining the WatchGuard Firebox T85 with MFA, CRS significantly strengthened its overall cybersecurity posture, mitigating risks and ensuring compliance with data security regulations.


After a thorough consultation with Alex Mendes, Technical Services Director at MPR Technical Services, it was determined that the WatchGuard Firewall T85 firebox would be the ideal solution to meet CRS’s specific requirements. The T85 firewall firebox offered advanced features and capabilities to enhance CRS’s cybersecurity measures. Additionally, the existing Draytek router could be repurposed as a modem, eliminating the need for additional hardware costs.

To ensure secure remote access and comply with the updated terms of their cyber insurance, CRS recognised the need to implement multi-factor authentication (MFA). After careful evaluation, it was determined that five Authpoint licenses would be the optimal solution to enable MFA for the required number of users. Authpoint provides an additional layer of security by requiring users to verify their identity through multiple factors, such as a password and a unique code sent to their mobile device. By implementing MFA, CRS significantly enhances its cybersecurity measures and reduces the risk of unauthorised access to its servers and internal applications. This proactive approach demonstrates CRS’s commitment to data protection and mitigating potential security breaches.

Following these discussions and considerations, the quote for the firewall installation and MFA setup was adjusted accordingly, taking into account the specific requirements and preferences of CRS.

Additional Redundancy:

To ensure uninterrupted connectivity, CRS explored alternative internet provisions due to occasional dropouts with their on-premises line. While rare, dropouts can still occur with their main leased line connection. Implementing a different type of internet provision, such as wireless or 4G, was a logical choice for CRS to enhance business continuity and minimise disruptions. After careful evaluation, CRS decided to stick with the 4G backup solution, considering its improved stability and reliability compared to retaining the Old SoGEA line. This decision further strengthened their business continuity measures and reduced the risk of downtime.

Financing Considerations:

During the project, CRS expressed interest in exploring financing options for the firewall installation and MFA setup. However, after careful consideration, it was determined that the repayment terms associated with the available financing options were not suitable for this specific project. Typically, finance agreements are more favorable for projects exceeding £10k in value. While financing was not feasible in this case, CRS remained committed to finding a cost-effective solution that aligned with their budgetary constraints. By prioritising financial prudence, CRS ensured that the project remained financially viable and aligned with its long-term goals.


The successful implementation and configuration of the WatchGuard Firewall T85 firebox and MFA setup provided CRS with a robust network security solution. The firewall appliance was carefully configured to meet CRS’s specific requirements, ensuring optimal protection against cyber threats. The deployment of the firewall and MFA solution enabled secure remote access to Sage and other applications for five team members, enhancing productivity and data security.

In addition to the firewall installation, the network was carefully configured to ensure seamless integration and reliable connectivity. The 4G backup solution was deployed to replace the SoGEA line, providing improved reliability and minimising the risk of internet disruptions.

By customising the solution to fit their needs, CRS achieved a tailored IT infrastructure that met their specific business requirements and budget. This comprehensive approach to configuration, network setup, appliance deployment, and customisation ensured that CRS had a robust and secure IT environment to support its operations effectively.

By investing in the necessary IT infrastructure and security measures, CRS demonstrated its commitment to maintaining the highest standards of data protection and business continuity. This proactive approach not only safeguarded their contracts but also instilled confidence in their clients and stakeholders, showcasing CRS as a reliable and trustworthy partner in the government contracting sector.

Take Your Cybersecurity to the Next Level with MPR IT Solutions

At MPR IT Solutions, your business’s cybersecurity is our top priority. We understand the critical importance of safeguarding your sensitive data and protecting your operations against potential cyber threats. That’s why we offer industry-leading solutions to enhance your cybersecurity posture, including the installation of WatchGuard Firewall Firebox T85.

With the ever-increasing sophistication of cyber attacks, businesses need robust, state-of-the-art cybersecurity solutions to ensure their data remains secure. Our team of experienced professionals will work closely with you to assess your specific requirements and design a tailored solution using the WatchGuard Firewall Firebox T85.

Implementing the WatchGuard Firewall Firebox T85 provides your business with advanced threat protection and network security features. This powerful firewall appliance offers comprehensive security measures, guarding your servers and internal applications against unauthorized access and potential data breaches. With our expertise and attention to detail, we ensure that the installation and configuration of the firebox are carried out seamlessly, minimizing disruption to your operations.

In addition to the WatchGuard Firewall Firebox T85, we recommend the implementation of multi-factor authentication (MFA) to provide an extra layer of security. MFA ensures that only authorised individuals can access your servers and internal applications, reducing the risk of unauthorised access and protecting your valuable data.

By choosing MPR IT Solutions for your firewall installation and cybersecurity needs, you can expect:

  • Expert consultation to determine the most suitable solution for your business
  • Seamless installation and configuration of the WatchGuard Firewall Firebox T85
  • Implementation of multi-factor authentication to enhance security
  • Ongoing support and maintenance to keep your cybersecurity measures up to date
  • Customized solutions tailored to your specific requirements and budget

Don’t compromise on the security of your business. Contact MPR IT Solutions today to schedule a consultation and take the first step towards fortifying your cybersecurity defences with WatchGuard Firewall Firebox T85. Keep your data safe, protect your operations, and enjoy peace of mind knowing that you have a trusted partner in cybersecurity.