Case study · IoT & security electronics
Zero-trust case study: protecting the firmware that is the business.
This Pune manufacturer designs and builds electronic security, gas and fire detection, micro-controller alarm systems and IoT surveillance sensors. Their embedded code and PCB designs are the company. We built the network around protecting them. Client name withheld by policy.
Client · name withheldHQ · R&D lab · manufacturingPune
Hybrid
Dual-vendor firewall mesh
ZT
Zero-trust R&D repository isolation
Sync
Multi-site directory synchronisation
100%
Offsite DR coverage
Interactive topology
Two vendors, one mesh. One locked room.
Perimeter
UTM firewall
- Enterprise UTM at the primary corporate / datacentre edge
- SSL inspection and ASIC-accelerated traffic inspection
- Paired with separate firewalls at production sites in a dual-vendor fabric
Zero-trust segment
R&D firmware repository
- Dedicated source-control infrastructure
- Embedded C/C++ firmware, micro-controller codebases, PCB schematics and IoT sensor algorithms
- Isolated inside a zero-trust R&D network segment
Production
Manufacturing & assembly sites
- Firewalls with internal VLAN segmentation
- Hardware-accelerated encrypted site-to-site mesh with redundant failover routes
Identity
Distributed hybrid directory
- Active Directory integrated with local directory servers across branches
- Synchronised access and local authentication survivability
Recovery
Storage & offsite DR
- Multi-bay network storage arrays
- Automated incremental offsite replication protecting engineering IP against ransomware and hardware disasters
Tip: use Tab and Enter to move between components.
Honest critique
What we'd modernise next.
Publishing our own improvement list is part of the Ethics Charter. For this estate:
- Version control modernisation: moving the legacy repository to a modern self-hosted version-control platform to strengthen firmware protection.
- Lifecycle management: decommissioning legacy server operating systems before their 2027 end-of-life milestone.
- Centralised telemetry: cross-site SIEM across manufacturing sites.
- Configuration resiliency: automated, encrypted offsite config backups for every firewall.
Your IP deserves its own segment.
R&D, firmware, designs — isolated, backed up offsite, and auditable.