Real Engagements. Measurable Outcomes.

Anonymized case studies from our work with ISPs, telecoms, and enterprise network operators. All client details are protected.

NOC EnablementRegional WISP~5,000 Subscribers

Building a NOC from Zero for a Growing WISP

75%
MTTR Reduction
The Problem

A regional fixed wireless ISP with approximately 5,000 subscribers had no centralized monitoring infrastructure. Network faults were discovered only through subscriber complaints. Average response time exceeded 4 hours for major incidents. Engineers had no documented escalation path and no on-call runbooks.

Our Approach

Deployed a Zabbix monitoring stack with customized templates for the client's Mikrotik and Ubiquiti equipment. Built alerting dashboards, defined incident severity tiers, and created escalation workflows. Developed a complete runbook library covering the 15 most common fault types. Trained the NOC team over a 2-week enablement program.

The Outcome

Within 60 days: MTTR reduced from 4 hours to 45 minutes (75% improvement). Network uptime improved to 99.4%, sustained over 6 months. The NOC team moved from reactive fault response to proactive monitoring with automated alerts. Subscriber complaint volume dropped 60%.

ZabbixMikrotikUbiquitiRunbook DesignStaff Training
CybersecurityMid-Size ISPFiber + Wireless

Cybersecurity Hardening for a Dual-Technology ISP

23
High-Risk Exposures Closed
The Problem

A mid-size ISP operating both fiber and wireless networks had accumulated significant security technical debt. Management interfaces on routers and switches were accessible from public IPs. No segmentation existed between the customer-facing network and infrastructure management plane. There was no documented incident response plan and no visibility into anomalous traffic patterns.

Our Approach

Conducted a full security posture assessment mapping all exposed management surfaces. Redesigned the network segmentation architecture with a dedicated out-of-band (OOB) management VLAN. Rewrote firewall ACL policies. Deployed IDS sensors at key aggregation points. Created a tiered incident response playbook and tabletop-tested it with the team.

The Outcome

23 high-risk exposure points identified and closed. Zero management interfaces remaining on public IPs. Internal security audit completed successfully one month post-engagement. The team now has a defined process for security incidents and change control for firewall policies.

Network SegmentationOOB ManagementFirewall ACLIDS DeploymentIR Playbook
BGP / RoutingEnterpriseMulti-ISP Connectivity

BGP Architecture Redesign for Multi-Homed Enterprise

0
Unplanned Downtime (6 mo.)
The Problem

A large enterprise with multi-ISP BGP connectivity was experiencing consistent packet loss on inbound traffic and asymmetric routing that impacted latency-sensitive applications. Their existing BGP configuration had grown organically over years and contained contradictory policy statements. ISP failover was not functioning correctly — traffic did not shift as expected during upstream degradation.

Our Approach

Conducted a full BGP policy audit across all peering sessions. Redesigned community tagging strategy for inbound and outbound traffic control. Rebuilt route-map policies to enforce deterministic path selection. Implemented proper load balancing across both upstream providers. Performed staged failover testing with each ISP before cutting over to live configuration.

The Outcome

Packet loss eliminated on primary paths. Inbound traffic load balanced correctly across both upstreams. Failover tested and verified — traffic shifts within 90 seconds of upstream degradation detection. Zero unplanned downtime recorded in the 6 months following implementation. Network team left with documented BGP policy and change control process.

BGP PolicyCommunity TaggingLoad BalancingFailover TestingDocumentation

Note on confidentiality: All client names, identifying details, and specific configuration data have been removed or modified. Metrics represent actual outcomes from real engagements. We do not publish case studies without client consent.

Ready to Become the Next Success Story?

Every engagement starts with a free 30-minute discovery call. No obligation, no sales pitch — just an honest assessment of where we can add value.