A client of ours had a large office space but wanted to divide that office space so they could sub-let those offices. This allowed them to down-size their own business without having to move premises.

This meant there was now the main central office and 5 smaller sub-offices. All needed to have separate networks but the main office wanted its own Internet connection whilst providing the sub-offices with a single, shared Internet connection and yet separate from each other.

To achieve this, we installed a Watchguard XTM-330 firewall and set two internet connections to be connected to it.

We then used a managed switch to separate the various offices into subnets and used the firewall to route the two Internet connections to the correct offices.

This meant the main office had it's own Internet connection with the firewall protecting its servers through its own set of security rules and the sub offices shared an Internet connection but each office was able to be given its own set of security rules.

It took a lot of time to create all the rules but this has meant each office is protected by a state of the art firewall whilst being totally separate from each other.