Service
Network, firewall, and Wi-Fi management for Palo Alto, Meraki, and Cisco.
Intragreat configures and manages Palo Alto Networks firewalls, Cisco Meraki, Cisco switches, and wireless access points for companies with a small IT team or none. We clean up firewall rules, set up GlobalProtect VPN with Entra ID sign-in, segment networks with VLANs, and fix Wi-Fi that drops or doesn’t reach. Work is on-site in Lake Tahoe, Reno, Carson City, and the Sacramento region, and remote anywhere else.
Who It Is For
Practical support for growing businesses.
For companies whose firewall, switches, and Wi-Fi were set up years ago by someone who has since left, or whose one IT person needs help with the network on top of everything else.
Problems Solved
What Is Included
Clear scope and plain-language documentation.
Palo Alto firewall policy review and cleanup
GlobalProtect VPN with Entra ID sign-in
Meraki MX, MS, and MR setup and management
Cisco switch configuration: VLANs, trunks, and PoE
Wireless surveys, guest networks, and roaming
Firmware upgrades and written change records
When You Need This
Signs it’s time to bring this in.
Palo Alto Networks firewalls
Palo Alto firewalls are capable, and often configured far below what they can do. We work in PAN-OS to make the policy something you can read and defend:
- Review the rulebase, remove unused and overly broad rules, and move port-based rules to App-ID where it makes sense.
- Apply security profiles, such as threat prevention and URL filtering, to the rules that carry real traffic.
- Set up GlobalProtect for remote access, with SAML sign-in through Microsoft Entra ID so MFA and Conditional Access apply to the VPN too.
- Plan PAN-OS upgrades, back up the configuration first, and record what changed.
Cisco Meraki: MX, MS, and MR from one dashboard
Meraki’s dashboard makes it easy to get started and easy to drift. We set it up or tidy it up across the stack:
- MX security appliances: firewall rules, site-to-site Auto VPN between offices, client VPN, and content filtering.
- MS switches: VLANs, port profiles, PoE for access points and phones, and 802.1X on ports where it fits.
- MR access points: SSIDs, WPA2 or WPA3-Enterprise for staff, isolated guest networks, and band and power settings.
- The dashboard itself: named admin accounts instead of a shared login, SAML sign-in where it’s available, alerts that reach someone, and scheduled firmware updates.
- License dates, because Meraki equipment needs active licensing to keep working.
Cisco switching
On Cisco switches, we set up VLANs and trunks so staff, guests, phones, printers, and cameras sit on separate networks. We check PoE budgets before adding access points or cameras, keep firmware current on a planned schedule, back up configurations, and document which port goes where.
Wireless access points and Wi-Fi
Most Wi-Fi complaints come from placement, channel and power settings, or too many networks. We survey the space, place and tune access points, and set up roaming so calls survive walking between rooms on devices that support it. Guests get their own network, kept away from company systems. For staff, we can replace the shared password with certificate-based sign-in.
How network work fits co-managed IT
If you have an IT person, they stay in charge of the network. We take the work that needs time or depth they don’t have: firewall cleanups, upgrades, VPN changes, and new sites. Every change is written down with the reason for it. We don’t run a 24/7 network operations center.
On hardware, we work with what you have, or help you choose what to buy and plan the rollout.
Related Services
FAQ
Common questions.
What does IT infrastructure management include?
For a small or mid-sized company, it usually means the firewall, switches, Wi-Fi, and VPN, plus keeping their firmware current and their configuration documented. We cover those on Palo Alto, Meraki, and Cisco equipment, alongside the Microsoft 365, identity, and device work most companies also need.
Do you offer managed firewall services?
Yes. We manage Palo Alto Networks and Meraki MX firewalls: rule changes, policy reviews, VPN, and planned firmware upgrades, with each change recorded. We don’t run a 24/7 network operations center, so we’ll be clear about what’s covered and when.
Do you work on-site?
Yes, in Lake Tahoe, Reno, Carson City, and the Sacramento region, for installs, office moves, Wi-Fi surveys, and anything easier to fix in person. Elsewhere we work remotely through the Meraki dashboard or management access to your firewall and switches.
Can you work alongside our IT person or current provider?
Yes. Your IT person or provider keeps day-to-day ownership, and we take defined pieces such as a firewall cleanup, a GlobalProtect rollout, or a Wi-Fi redesign. We agree who changes what before we start.
Do we have to buy new equipment?
No. We work with what you have when it’s still supported and fits the job. If something needs replacing, we help you choose what to buy and plan the changeover.