🏷️ SPECS:Whole File Scanned, Not SampledNo File Size LimitCatches Fileless AttacksSpots New RansomwareTLS 1.3 DecryptionCapture ATP SandboxUnknown Files Tested FirstVirus & Intrusion BlockingNothing Waved ThroughSonicOS 7 FirmwareZero-Touch DeploymentPost It, Plug InCloud Management ConsoleEvery Branch, One ScreenSecure SD-WANSwitches to Live LineAD Single Sign-OnRules Follow the PersonOne Renewal DateWireless & Switch ControlTZ Series DesktopFits a Small BranchNSa 1U RackmountSized for Head OfficeNSsp Data-Centre ClassDual Power SuppliesRuns on One PSU2.5GbE Multi-Gig Ports10GbE SFP+ UplinksQuiet Enough for Reception
Guest WiFi in the waiting area, staff WiFi upstairs, card machines on their own lane and CCTV kept well away from all of it. That is four networks, and most places run them as four separate headaches with four sets of wires. When the access points and switches answer to the same firewall, you set that separation once and it holds everywhere, so a visitor gets internet without ever seeing the accounts server (VLANs from one console). We do this for clinics, showrooms and co-working floors around Liluah.
📍 Sizing, Licensing and Ordering SonicWALL UTM Firewall Appliance for Branch and Head Office across Kolkata
Your ERP vendor wants remote access, your CCTV company wants remote access, and right now both hold the same password as your accountant. Each can instead be given an encrypted login that reaches exactly one machine on one port, with a second check at sign-in and a record of every session. Access can be switched on for the afternoon and off again by evening. That is a far smaller opening than the remote-desktop port most small offices in Kolkata leave facing the internet.
The security box in your rack still shows a green light, which is the most misleading thing about it. Once the subscription lapsed it stopped receiving new threat information, and it was never built to look inside the encrypted traffic that now carries almost everything. We read the old rules, rebuild only the ones still in use on a current SonicWALLUTM Firewall Appliance for Branch and Head Office, and switch over in the evening at your office in Kolkata. The old unit stays racked and powered off for a week in case anybody misses something.
💡 The Case for Doing It Properly Once across Kolkata
A firewall that arrives as a sealed carton and a PDF is not much help to a business with no IT team. Every unit is configured, updated and run in at our Kolkata bench before it ships, carrying your addressing, your rules and your Wi-Fi settings already. Ports are labelled, the configuration file is saved, and the handover includes a diagram rather than a login and good luck. If a unit fails inside warranty we handle the replacement and put the saved settings straight back on it.
Hotels, restaurants and showrooms in Liluah that hand out Wi-Fi to customers are expected to know who used it, and a password written on a card tells you nothing. The same appliance can put a login page in front of guest Wi-Fi, keep a record of who connected and when, and expire that access by itself at closing time. Visitors get their internet, your working network stays out of reach, and there is a list if anybody official ever asks for one. It is the sort of thing nobody thinks about until the day they must.
Franchise Outlets That Open Faster Than Anyone Can Travel
A hotel group running three properties around Kolkata had guests, the front-desk booking system and the restaurant billing machine sharing one network and one password. We split guest Wi-Fi away from the working network entirely, gave each property access points managed from the firewall, and put reception on a lane of its own. Guests still connect in one tap from the lobby to the top floor. The group answered its booking partner's security questionnaire with a network diagram instead of an apology.
🛡️ HOW A ROLLOUT ACTUALLY RUNS
The Paperwork You Get at Handover
Dropping a SonicWALL appliance into a network that is already carrying live work begins with an inventory, not a toolkit. We write down what actually runs at your site in Liluah - the Tally server, the biometric reader, the CCTV recorder, the second broadband line nobody documented - before a single rule is typed. Only then is a switchover slot agreed, usually after closing time, with a tested way back if something misbehaves.
Delivered on site or remotely, with rates agreed in advance:
▪Moving Off Your Old Firewall Without Downtime
▪Licence Renewal Tracking and Bundle Reviews
▪Supply, Configuration and Go-Live of the Appliance
▪Site-to-Site and Work-from-Home VPN Setup
*Note: every survey, configuration change and site visit listed above is a paid service, quoted before work begins, and separate from any assistance you receive directly from the manufacturer.*
💡 Engineering Fact: Some malware behaves perfectly while it is being scanned and only turns nasty half an hour later. To catch that habit, unknown files are run in a controlled patch of memory and watched for what they actually do (RTDMI).
📋 SIZING & MODEL CHOICE
Send us your headcount, your internet lines and the software everyone depends on, and we will tell you which model fits your office in Liluah and why the next one up is not needed.
Included accessories are marked, so nothing surprises you at delivery:
TZ Desktop Firewalls for a Shop or Single Branch
The small box that sits on a shelf behind the counter and guards one or two internet lines. Right for a showroom, a clinic, a site office or any team of roughly five to fifty people.
🔹 BEST FOR
A single location of about five to fifty staff - one showroom, one clinic, one small factory office.
🔹 COMMON MISTAKE
Sizing by staff count alone. Count the cameras, IP phones and card machines too - every one of them holds connections open all day.
🔹 TWO INTERNET LINES
Fibre and a broadband backup stay plugged in together and the box quietly uses whichever one is behaving (Secure SD-WAN).
NSa Rack Firewalls for a Head Office or Campus
One-rack-unit NSa gateways for the main office of a company, a nursing home group or a college - anywhere a few hundred people share the same line from morning to night. Built to bolt into the cabinet you already own.
🔹 SEVERAL ISP LINES
More than one connection terminates on the same unit and it decides what travels where (BGP, OSPF and dynamic SD-WAN routing).
🔹 CHECK THIS FIRST
Cabinet depth and free rack units. More installations get delayed by a shallow cabinet than by anything technical.
🔹 IF IT FAILS
Keep a matched second unit powered beside it. The changeover takes a fraction of a second and a phone call does not drop (High Availability pair).
Heavy 2U Units for Data Centres and Big Campuses
The two-rack-unit NSa and NSsp appliances, for data centres, multi-building campuses and networks carrying tens of thousands of connections at once. Anything that can fail comes doubled.
🔹 PORT SPEEDS
Twenty-five and forty-gigabit fibre sockets are on offer, which keeps the security check from becoming a queue between server rows.
🔹 POWER
Both supplies come fitted. Feed them from separate circuits and one failed input turns into a log entry instead of an outage.
🔹 WHO BUYS THIS
Hosting providers, university campuses and large manufacturers running a proper data centre floor of their own.
Branch Boxes That Set Themselves Up (Zero-Touch SD-WAN)
For the extra showroom, the godown office, the site cabin. You courier the unit, somebody local plugs in power and internet, and it pulls down its own settings and joins the head office network.
🔹 COST NOTE
A branch unit and its subscription usually work out below a leased line to the same location, which is the whole argument for SD-WAN.
🔹 WHAT STAFF NOTICE
Nothing, ideally. Billing, the shared drive and the ERP screen open at the same pace as they do at head office.
🔹 IF THE LINE DROPS
A second broadband connection, or a 4G or 5G dongle, carries that branch until the main link comes back.
SonicWave WiFi Access Points for Full Floor Coverage
SonicWave units screwed to the ceiling so the signal reaches the far end of the floor. For any building where the WiFi works near the router and nowhere else.
🔹 WALKING AND TALKING
The handover from one unit to the next is quick enough that a call carries on while somebody walks from the store room back to the billing counter.
🔹 CABLE POWER
One cable does both jobs, signal and electricity, which is why mounting height stops being an electrical problem (PoE).
🔹 CROWDED ROOMS
WiFi 6 units are designed to serve many devices politely at the same moment, and that is what a full training room actually needs.
Managed Switches on the Same Console as the Firewall
Switches that report to the same screen as the firewall, so ports, cameras and phones are handled from one login. For offices past the stage of stacking small unmanaged boxes under a desk.
🔹 POWER BUDGET
Ports and watts are two different limits. A switch can have sockets to spare and still run out of power for the cameras plugged into them.
🔹 POWER OVER THE CABLE
Cameras, IP phones and access points draw electricity from the network cable, so no adaptor sits stranded above a ceiling tile (PoE).
🔹 BETWEEN BUILDINGS
Copper stops being useful at about ninety metres. Past that the uplink goes on fibre, and these units take fibre directly.
Cloud Edge: Office Access for Staff Working from Home
Lets a person reach the one office server they need from home, a hotel or a client's site, without their laptop landing inside everything you own. Bought per person, not per building.
🔹 WHAT IT'S FOR
The accounts person finishing a return from home, and the sales engineer who needs the price list while sitting in a client's office.
🔹 RECORDS
Who connected, when, and to which server - the report exists whether or not anybody ever asks to see it.
🔹 HOW IT DIFFERS
Rather than putting a laptop inside everything, each person is handed only the servers and applications they have been cleared for.
Network Security Manager: Every Branch on One Screen
A cloud console that shows all your firewalls together - rules, alerts, firmware and reports. Worth it once you have more than two or three locations to keep an eye on.
🔹 REPORTS
Monthly summaries of what was blocked and where the day's bandwidth went, in a shape a director will actually read.
🔹 FIRMWARE
Updates get scheduled for a Sunday night across the whole estate, rather than done one branch at a time over a month.
🔹 AUDIT TRAIL
Every configuration change is recorded against a name and a time, which settles most arguments before they properly start.
Security Bundles and Licence Renewals
Firewalls are sold with a subscription behind them: threat updates, filtering, sandbox checks and vendor support. This is how those are bought, bundled and renewed without leaving a gap.
🔹 MULTI-YEAR TERMS
Paying for three years at once holds the price still and removes two more rounds of quotations, approvals and reminder calls.
🔹 WHEN IT EXPIRES
No alarm sounds and nothing goes dark. The unit simply stops learning about anything new while everyone assumes it is still working.
🔹 AUDITS
Show an assessor a lapsed subscription and it goes straight into the report as a finding, whatever the firewall itself is doing.
✉️ Service & Maintenance Support
Need site visits, AMC contract estimates, or customized installation architecture? Connect with our technical desk directly.
Turnkey UTM Firewall Appliance for Branch and Head Office Metrics Checklist near Liluah
🛠️ Workflow Setup
Next the unit is registered and licensed in your name and your rules are loaded before it leaves us. That takes a day or so at our end and saves a couple of hours at yours.
⚠️ Pitfalls to Avoid
Never hang the firewall off the same strip as an air conditioner or a laser printer. The surge when either starts is enough to restart it, usually mid-morning.
🔌 Guidelines & Sizing
Have the rack and the incoming telecom line properly earthed before installation day. Most equipment written off as lightning damage in this country was really killed by a missing earth.
📈 Upgrade Triggers
The last virus scare was cleaned up by rebuilding three machines over a weekend, and to this day nobody can explain how it got in.
📝 Questions Customers Ask Us Most across Kolkata
If you are buying a pair for high availability, make sure both units are registered together and the licensing is associated correctly, or the standby will come up without its protection services running. Test the failover once in a planned window and note how long a live call takes to come back. A pair nobody has ever tested is an assumption, not a plan.
The router that came with your connection belongs, in every practical sense, to the internet company: they set the password, they update it when they feel like it, and it knows nothing about who in your office did what.
A security box bought around 2015 will still boot happily. Its threat feed stopped the day the licence did, and its processor was never designed for traffic that is now almost entirely encrypted.
💡 Engineering Fact: Padlock icons stopped meaning safe a long while ago - the padlock only hides what is travelling. The firewall opens that envelope, reads what is inside and seals it again, doing the heavy maths in dedicated hardware so nobody notices the pause.
🛠️ Contract Terms Without the Small Print across Kolkata
Type of Business
What the Work Covers
Typical Lead Time
Business Centres and Shared Office Floors
A private lane and a fair slice of the line for each tenant, with no way to browse into the company at the next desk
Survey first, cutover on an agreed weekend
Nursing Homes and Multi-Speciality Hospitals
Patient records and billing separated from the reception counter, and consultants reading reports from home without opening the whole network
Priority slot for contract sites, otherwise next available
CA Firms, Tax Consultants and Legal Chambers
Filing-season access from home for partners and articles, with client data staying on the office server instead of travelling on laptops
A few working days once filing season allows
📊 Behaviour on a Slow Internet Line across Kolkata
Two branch links watched for a week, one of them a shaky broadband line.
WHAT YOU GET FOR THE MONEY - THE HIGHLIGHTS
REAL LIMITS - THE HONEST VERSION
✓An older box simply passed https pages along unread, and that is precisely where the trouble hides today; those sessions are opened and checked, with banking and health sites left alone by policy (TLS deep inspection).
—Zero-touch rollout still needs a live internet connection at the branch and the right serial registered in the portal. Get either wrong and the box sits there blinking.
✓Ransomware written last week matches nothing on a signature list, so suspicious files are watched while they run instead of being judged on what they look like (RTDMI).
—Branch VPN speed is capped by whatever upload your local line delivers. No appliance can create bandwidth the ISP is not providing.
✓Half the trouble in a small office starts with one shared login that everybody knows. Once each person signs in as themselves, the report finally names who did what (Single Sign-On with Active Directory).
—Hardware faults are settled under the manufacturer's warranty. We can raise the case and chase it, but the replacement timeline belongs to them, not to us.
✓A salesman on hotel WiFi can reach the office system with nothing installed on his laptop and no port left open to the whole internet (SSL VPN with a second login check).
—Fibre ports arrive empty. Transceivers or DAC cables are ordered separately, and a mismatched part will simply refuse to come up.
✓A separate wireless controller is one more box to buy, power and patch. The access points here register with the firewall and take their settings from it.
—Renewal is not a small line item. Budget for it every year or two alongside the hardware, because a firewall with an expired bundle is not far off an expensive router.
💡 Engineering Fact: Your whole office looks like one address from the outside, with dozens of machines sharing it. That is also why a camera recorder plugged straight into the internet, with no firewall in front, gets found by automated scanners within hours.
⚡ SYSTEM DEPLOYMENT ARCHITECTURE
Ready to secure your premises in Liluah?
Get comprehensive structured network setups, professional hardware alignment, and authorized warranty support allocations natively.
🛠️ Choosing a Spot for the Gateway on a Small Site
Go through these before the delivery date, not on the day an engineer is standing in your server room with a screwdriver.
🏢 User Training & Handover - Explained Simply anywhere in Kolkata
🔹Give the appliance its own management address on a separate VLAN and turn administration off from the internet side completely; reach it over the VPN when you are away from the office.
🔹Point the failover probes at something outside your provider's network, such as a public DNS address. Probing the provider's own gateway means a dead upstream link still looks perfectly healthy.
🔹Add the serial number to the cloud console before the box is couriered to a branch, whether that branch is across Kolkata or three states away, so staff there only have to connect power and the internet cable.
📊 Feature List and Technical Detail for offices in Liluah
The appliance is one buy and the protection is another. On its own the box joins your offices together, decides who can reach what, and carries staff in over a VPN. The yearly subscription is what scans for viruses, blocks intrusions and unwanted websites, and tests unknown files in the cloud. When a subscription lapses the unit keeps routing traffic and quietly stops learning about anything new.
Management is a browser page on the unit itself, plus a cloud console for anyone running more than one site. Logs and reports can sit on the appliance for recent activity or be sent off it when you need months of history for an audit. Configuration exports are small files and should live somewhere other than the same building.
🏆 CORE PARAMETER🔹 Network socketsCopper 1GbE on every model, 2.5GbE multi-gig on the TZ 570 and 670, and 10GbE SFP+ fibre on the larger rack units - the mix depends on the model ordered
🔌 Second power supplyOptional on smaller rack models, standard and hot-swappable on the large ones
🔹 The chip insideMulti-core system-on-chip running SonicOS 7
🔹 Threat updatesAutomatic feeds from the vendor's threat network, nothing to download by hand
🔹 If the box diesActive-Standby or Active-Active pair with stateful failover
🔹 Brand-new threatsLive memory inspection plus the Capture ATP cloud sandbox (RTDMI)
🔹 How it scansThe whole stream is reassembled and read, with no cap on file size (RFDPI)
SonicWALL Quality Control and Field Return Handling
If one internet line dies at eleven in the morning, your billing counter should not. Two or three connections, a mobile modem included, are measured all the time and traffic is moved onto whichever is behaving; when the dead line returns, your branch tunnels come back on their own without anyone travelling to site (Secure SD-WAN).
Hardware is specified for continuous operation in ordinary commercial premises. Compact models run without fans for quiet, dust-tolerant service at a counter or in a small office, while rack models offer redundant power and pairing for sites that cannot tolerate an outage.
✉️ SUPPORT DESK
Coordinate custom hardware configurations, AMC maintenance contracts, and site engineering visits directly with authorized integration desks.
Q. The quote shows the box on one line and three more charges underneath. What are those?
Those extra lines are the subscriptions, and they are the part buyers most often miss when comparing two quotes. The hardware price alone gets you a working router and firewall; the other lines buy virus scanning, website categories, the cloud test-room for unknown files and the right to phone support, sold together as a security bundle for one, three or five years. Suppliers package these differently, so a cheaper-looking quote usually has a thinner bundle or a shorter term hiding inside it. Ask anyone quoting you - including us - to show hardware, bundle and term as three separate numbers.
Q. Can we manage the switches and access points from the same screen too?
Yes, and it saves more time than people expect. Supported switches and wireless access points are adopted by the firewall and appear inside the same console, so a new lane for the CCTV recorder, or a change to the guest WiFi password, is done once and pushed out everywhere (SonicOS management). One login, one place to look when something misbehaves, instead of three web pages and three forgotten passwords. Older third-party switches will not join in - those carry on being managed separately, and we say so at the site survey rather than after the invoice.
Q. Why buy through Microtech Solutions rather than the cheapest listing online?
Because you are not just buying a box - you are buying a licence registered to somebody's name, and cheap online stock is often registered elsewhere, imported without local warranty, or sold with a bundle far shorter than the listing implies. We register both the hardware and the subscription to your company, keep the paperwork where you can find it at audit time, and are the people who turn up when the link drops. You also get the sizing conversation before the money is spent instead of a return request afterwards. Compare the total of hardware, bundle, installation and support across Kolkata, not the sticker price on its own.
Q. How does it scan a file for viruses without holding up the traffic?
It reads the data as it streams past instead of collecting the whole file into memory first, which is where older gateways lose both time and RAM (Reassembly-Free Deep Packet Inspection). With nothing sitting in a buffer there is no practical file-size limit, and thousands of connections can be checked side by side. Day to day that is why downloads and browsing feel ordinary with scanning switched on. The one place you will notice a pause is a genuinely unknown attachment being sent up to the cloud test-room, which adds a few seconds.
Q. Can the same box run our office WiFi?
Yes. The firewall doubles as the wireless controller, and the access points feed off your existing network cabling. Because one unit is doing the security work as well, guest WiFi, staff WiFi and the billing network each get their own lane and their own rules from a single screen, instead of a row of home routers that nobody manages. Coverage is still a physical matter, though: thick walls, a mezzanine floor or a metal-clad godown will need more access points than a plasterboard office of the same area. We walk the floor around Liluah before quoting and give you the honest number.
💡 Engineering Fact: Your manager gets manager-level internet access from any desk in the building because the firewall reads who signed in to Windows and applies rules to the person rather than to the machine (Single Sign-On).
🔄 THE REST OF OUR WORK
Everything Else We Supply and keep around Liluah
Email, Teams and Office licences: we handle Microsoft 365 setup and move old mailboxes across without losing folders.
Liluah is a major industrial workshop and dense commercial manufacturing neighborhood in Kolkata, featuring engineering units, steel re-rolling mills, and dense residential housing. Constant lorry movements and high-volume workshop activities require steady, reliable surveillance. UTM Firewall Appliance for Branch and Head Office from SonicWALL provides a strong security foundation designed for compact industrial spaces. Workshop owners and residential building committees in Liluah deploy UTM Firewall Appliance for Branch and Head Office to watch over main gates, machine floors, and stock storage godowns.
Smart motion tracking pushes real-time alerts directly to owners during off-hours. Ensuring safety across Liluah's busy industrial streets demands trusted technology. Installing SonicWALL surveillance setups gives you clean video feeds, simple controls, and long-term asset protection.
