Questions people ask Perimeter One

Perimeter One is a network security firm that plans and operates change to security platforms. That means firewall migrations and full security platform conversions, SASE and SSE deployments, zero trust network segmentation programs, security assessments, and managed or co-managed firewall operations. Every engagement starts with the current environment and ends with a tested cutover or a written operating plan.

A security platform conversion moves an organization from one firewall or secure access platform to another, for example from Cisco, Fortinet, Check Point or Sophos to Palo Alto Networks, or from Panorama to Strata Cloud Manager. Perimeter One converts rules, objects, NAT, routing, VPNs and logging, validates representative traffic in the target, and cuts over in controlled phases with a rollback procedure.

Perimeter One works with Palo Alto Networks firewalls, Prisma Access, Strata Cloud Manager and Panorama, Zscaler, Netskope, Fortinet, Cisco and Meraki, Check Point, Sophos, Juniper, Aruba and HPE, and Akamai including Guardicore microsegmentation. Platforms outside this list get a discovery review before scope and conversion coverage are confirmed.

SSE, or Security Service Edge, is the cloud delivered security half: secure web gateway, cloud access security broker, zero trust network access and firewall as a service. SASE, or Secure Access Service Edge, adds the networking half, usually SD-WAN, so that security and connectivity are delivered together. Perimeter One designs both based on documented user, site and application requirements.

Yes. Perimeter One runs managed and co-managed firewall and SASE operations: day to day policy changes, platform health, upgrades, policy lifecycle management, monitoring, Akamai based managed web application firewall, and continuous segmentation assurance. Responsibilities and the approval boundary are written down before the service starts.

It depends on the size of the rulebase, the number of sites and VPNs, and how much traffic must be validated before cutover. Perimeter One breaks every migration into five phases, inventory, translate, build, cut over and hand off, and gives a schedule after discovery rather than before. Automation handles the repeatable translation so engineering time goes to the exceptions.

Yes. Perimeter One is a wholly US owned and operated company. Ownership, leadership, engineering, and service delivery are all in the United States, and the company is focused on one thing: security and network segmentation. That matters to clients with data residency, supply chain, or federal and state procurement requirements.

Perimeter One is based in Raleigh, North Carolina and works with organizations across the United States, on site and remotely. Clients include enterprises in financial services, healthcare, government, and professional services, typically with regulated environments and audit obligations such as SOX, PCI DSS, HIPAA or FedRAMP.

Start with an assessment. Describe what you run today, what needs to change, and which constraints cannot move. Perimeter One reviews the configuration and architecture, returns findings with a practical next step, and scopes either a fixed price project or a managed service from there.

Yes. Perimeter One provides fractional and interim security leadership: a fractional CTO for technology strategy and architecture, a fractional CISO for security program ownership, compliance, and board reporting, and a VP of Security Management to run security engineering and operations day to day. Engagements are a monthly retainer with a fixed allocation of days, a written decision boundary, and a defined transition to a permanent hire when one is needed.