Site network audit and hardening plan

01Problem

The network had grown for five years with no documentation. Nobody could say how many devices were in it, or who had changed a config and why. The client wanted the whole picture and a list of what to fix first.

02What was done

1. 01Walked the whole estate — equipment and services, what it is and what it does.
2. 02Pulled five years of change history and checked it against the live network.
3. 03A network map and device inventory, built from scratch. The old records could not be trusted.
4. 04Risks sorted by priority: first anything that breaks access or exposes the network.

03Outcome

• For the first time the client has a map, a device inventory and five years of change history.
• The critical items are being closed to plan, in a set order.

04Stack

• MikroTik
• RouterOS
• Python
• IP Video Surveillance