Perimeter security & LGPD compliance in Brazil
Updated on
Perimeter security is the set of controls that protects a company’s network at the border with the internet and between its sites: firewall, segmentation, VPN and access control. Well configured, it reduces the risk of intrusion and provides the technical basis for compliance with LGPD, Brazil’s data protection law. At CCPR, Fortinet security was deployed across 17 sites as part of the network overhaul.
The problem
The firewall was installed years ago and nobody reviews the rules. Each branch has a different solution. The guest network can see the servers. If an incident happens, the company does not know what was accessed and cannot respond as LGPD requires.
Signs of risk
- Firewall without updates or out of support.
- Access rules nobody can explain.
- A flat network, with no separation between users, servers, guests and devices.
- Remote access without multi-factor authentication.
- No central logging of access and events.
- Branches with different protections, or none.
How I work
1. Assessment
I review the topology, firewall rules, remote access, segmentation and logging.
You get: a risk report with prioritized fixes.
2. Design
I define the security architecture, network segmentation, access policies and the branch standard.
You get: the design, budget and vendor proposals compared side by side.
3. Implementation
I implement the changes in planned windows, with testing and rollback, without taking operations down.
You get: a protected environment and documented rules.
4. Delivery
I document the policies and hand over to the internal team or to the vendor that will operate them.
You get: technical documentation that supports LGPD compliance.
Proof
- CCPR: Fortinet security deployed across 17 warehouses, stores and plants, together with the network overhaul, in 12 months. → Read the case study
- Certifications: Fortinet NSE 1 · Acronis Cloud Sales Fundamentals.
Frequently asked questions
What does LGPD require from IT infrastructure?
LGPD requires technical and administrative security measures to protect personal data, and the ability to identify and report incidents. In infrastructure terms, that means access control, segmentation, logging and perimeter protection. Full compliance also involves legal counsel.
Is Fortinet a good fit for companies with several sites?
It is one of the most widely used options for multisite networks, because it combines firewall, VPN and SD-WAN in one device with central management. The final choice depends on the environment, the budget and local support in each region.
Is network segmentation mandatory?
No law uses that exact term, but segmentation is one of the most effective technical measures to limit the damage of an incident. That is why it is usually a priority.
Let’s talk about your case
Tell me in a few lines what is happening or what you are planning. I reply personally.
Prefer email? james.eustachio@gmail.com · Contact form