Solution · By task

Remote work

Opening a port to the outside and handing out passwords is a five-minute fix that survives until the first automated scan of your network. We build access differently: servers are invisible from the internet, files do not settle on home machines, and an employee leaving closes their access in a single action.

0
servers on the internet
2FA
confirmation at sign-in
Minutes
to grant and revoke access
1-2 weeks
the usual setup time

What we configure

The contents depend on what people do: email and documents need one thing, accounting systems and design software something else entirely.

Choose a scheme

A private tunnel

A private tunnel into the office network instead of ports open to the world. You can only connect with a work account and confirmation from your phone.

Server-hosted desktops

The working environment runs on a server. Files never leave the perimeter and the home machine acts purely as a screen.

Access to the accounting system

A terminal session or work through the browser at decent speed, without downloading the database to the employee's computer.

Confirmation from a phone

A confirmation from your phone is added to the password. A stolen or guessed combination no longer opens anything on its own.

Granting and revoking access

Permissions follow the role, not a verbal request. When someone leaves, everything closes at once, including the tunnel and the mailbox.

Mail and shared files

Work email, shared calendars and file storage open from any device, and there is no more emailing documents to yourself.

Which scheme suits you

Three schemes that work. You choose by the requirements on the data, not by how many people are outside the office.

Option 1

VPN on the laptop

The person sits down at a company laptop and connects through a private tunnel.

Quick to set up
Setup takes a couple of days
Files sit on the laptop
A lost laptop takes the data with it
The usual choice

Option 2

Terminal or VDI

Everything is computed on the server; the employee is left with just a screen and a keyboard.

Files go nowhere
Everything stays inside the perimeter
A new hire starts within minutes
Nothing to buy and nothing to configure

Option 3

Cloud services

Mail, files and collaboration on rented platforms; nobody enters the office network at all.

Available from anywhere
The office link is not involved
Does not solve the accounting system
The accounting systems are still in the office

The most common hole is a remote desktop port left open to the internet. Automated scanners find such machines within hours, and then password guessing begins. If this is how yours is set up, close it before any other work.

Questions and answers

Over a tunnel to a database in the office, almost certainly yes: the file-based mode copes very badly with link latency. The right route is a terminal session or the browser, where the picture travels over the network rather than the data itself. Then the speed is nearly the same as at an office desk.

Through a server or terminal, yes, and that is their main advantage: files never reach the home machine and its requirements are minimal. We do not recommend letting personal devices straight into the office network over a tunnel: there is no way to check what is installed on them.

Who connected when and which resources they used is visible in the logs, and that is needed for security. We do not install software that captures screens and records keystrokes: that is a separate legal conversation, and such tools usually do more harm than good.

A tunnel with phone confirmation for a thirty-person office takes a week or two and is relatively inexpensive. Server-hosted desktops need hardware and are priced separately: the main item there is capacity for the number of concurrent sessions.

We will set up working outside the office

Скажите, сколько человек работает вне офиса и с чем именно. Подберём схему под ваши требования к данным.