Case studies

Projects delivered end to end.

Firewalls, datacenter, telephony, mobility: an overview of projects delivered for our clients. To honour our confidentiality commitments, no client is named and sensitive details are deliberately left out.

14projects shown

Migrating a critical firewall to a high-availability FortiGate cluster

Cybersecurity

Completed project Large enterprise

Migrating a critical firewall to a high-availability FortiGate cluster

The challenge

All company traffic relied on a single virtualised firewall that handled both perimeter security and routing between internal networks. Ageing and without redundancy, it was a single point of failure for critical services. The migration had to happen without disrupting operations.

What we did

Full audit of the existing configuration and a migration plan approved by the client
Both firewalls running side by side during the transition, with rollback at every step
Rules, objects and network services reproduced exactly so nothing breaks
Gradual cut-over, network by network, with traffic spread across two Internet links (SD-WAN)
Automated testing: every rule replayed and validated one by one on the new firewall

The result

Migration completed with no service interruption, 100% rule compliance validated, and a modern, redundant security platform. A recommendations report was delivered for the next hardening steps.

	Before	After
Redundancy	None, single point of failure	Two firewalls, automatic failover
Visibility	Poorly documented legacy rules	Audited, documented rules
Internet access	Links used separately	SD-WAN across both links

For your project : An inventory of critical flows, an agreed cut-over window and a network contact on your side. We prepare everything upfront so every step is reversible.

FortiGateHaute disponibilitéSD-WAN

Replacing an end-of-life firewall cluster in a single day

Cybersecurity

Completed project Enterprise

Replacing an end-of-life firewall cluster in a single day

The challenge

The existing firewall cluster was reaching vendor end of life, with security updates no longer guaranteed. It had to be replaced without changing the network architecture or disrupting users, VPN included.

What we did

Complete new configuration prepared ahead of the intervention
Port-for-port replacement with a pair of next-generation FortiGates
High availability with dual synchronisation links and session pickup
Networks, rules, DHCP, VPN and address translation migrated exactly as before

The result

Completed in one day, failover tested under real conditions in under 2 seconds with no noticeable interruption. Acceptance report signed without reservation.

	Before	After
Vendor support	End of life	Guaranteed for years
Continuity	At risk on any failure	Failover tested under real conditions
Intervention	—	One day, no noticeable downtime

For your project : A backup of the current configuration and an intervention window. We prepare the new configuration in advance for a same-day swap.

FortiGateCluster HAFin de vie

Private datacenter modernisation: a high-availability virtualisation cluster

Infrastructure

Completed project Large enterprise

Private datacenter modernisation: a high-availability virtualisation cluster

The challenge

The company’s servers ran on ageing infrastructure with no tolerance for hardware failure. Network performance was also degraded, with no identified cause.

What we did

Design of a multi-node Proxmox cluster with Ceph distributed storage
Planned migration of all virtual machines, with no data loss
In-depth network diagnosis: bottleneck identified and fixed
Formal acceptance testing, followed by a maintenance contract

The result

A redundant infrastructure able to survive a server failure, network losses fully eliminated and long-term operations secured.

	Before	After
Server failure	Hosted services go down	Automatic restart on another node
Network performance	Degraded, unknown cause	Stable, bottleneck fixed
Operations	Ad hoc	Maintenance contract

For your project : An inventory of your virtual machines and their priorities, and migration slots by batch. We size the cluster and storage with you.

ProxmoxCephVirtualisation

Next-generation firewall and dual Internet access with no downtime

Cybersecurity

Completed project Private institution

Next-generation firewall and dual Internet access with no downtime

The challenge

A basic router handled connectivity: no advanced filtering, two Internet links that did not work together and no standard remote access for administration.

What we did

Router replaced by a FortiGate with advanced protection (IPS, web filtering, antivirus)
Addressing plan reproduced exactly: nothing to reconfigure on devices
SD-WAN across both links: load balancing and automatic failover
Secure VPN for administrators, admin interface closed to the Internet

The result

If one link fails, traffic switches over automatically within seconds. A protected network, both links in use and secure remote administration.

	Before	After
Filtering	Basic	IPS, web filtering, antivirus
Link failure	Outage	Automatic failover within seconds
Remote administration	Not standardised	Dedicated secure VPN

For your project : Your two Internet subscriptions and current network plan. We reproduce what exists: no change on devices.

FortiGateSD-WANVPN

Securing an SME’s network and remote work

Cybersecurity

Completed project SME

Securing an SME’s network and remote work

The challenge

Staff worked remotely on business tools and the collaboration suite without adequate network protection or controlled remote access.

What we did

FortiGate firewall with IPS, web filtering, antivirus and application control
Two fibre links combined in SD-WAN with priority for business applications
User VPN for secure remote work
Documentation and knowledge transfer to the team

The result

A network protected against common threats, smooth business applications and secure remote work for the whole team.

	Before	After
Threats	Barely filtered	Blocked upstream
Remote work	Uncontrolled	Secure VPN
Business apps	No priority	Prioritised on the network

For your project : The list of your business apps and remote users. We size the firewall and licences to what you actually need.

FortiGateTélétravailSD-WAN

Infrastructure

Completed project Private institution

Access control: doors, locks and lift

The challenge

The institution wanted to control and log access to several sensitive areas, including the lift, with a solution that is easy to manage day to day.

What we did

Access survey and the right equipment chosen for each door
Connected locks, magnetic-lock door and lift access control
Installation, access-rights setup and training for administrators

The result

Controlled, traceable access managed from a single point, with no hassle for authorised users.

	Before	After
Access	Untracked keys and badges	Named, revocable rights
Traceability	None	Access log
Management	Scattered	Centralised

For your project : A survey of the doors and areas to protect and the list of access profiles. We choose the right hardware for each door.

Contrôle d’accèsSûreté

Unified 3CX telephony integrated with an AI voice agent

Communications

Completed project Enterprise

Unified 3CX telephony integrated with an AI voice agent

The challenge

An old open-source PBX handled both staff calls and those of an AI voice agent. The setup was complex to maintain, with no redundancy or safeguards against toll fraud.

What we did

Target architecture on 3CX, with native integration of the AI voice agent and CRM
Anti-fraud measures: firewall filtering and call limits
Proof of concept validated before buying licences, then a phased migration
Planned cut-over with rollback available

The result

Human and AI calls brought together on one modern, secure and easier-to-manage PBX, sized for high call volumes.

	Before	After
Platform	Old, complex PBX	Modern, centralised 3CX
AI agent	Fragile integration	Native integration
Toll fraud	Few safeguards	Filtering and call limits

For your project : Your call flows (inbound, outbound, automated) and the tools to integrate. We validate the architecture on a proof of concept before any licence purchase.

3CXIA vocaleCRM

Cloud phone system: an end to choppy calls

Communications

Completed project Group

Cloud phone system: an end to choppy calls

The challenge

The PBX was hosted far from its users: conversations suffered regular dropouts and audio loss, especially on mobile calls.

What we did

Voice-quality diagnosis (voice-stream analysis)
PBX migrated to better-connected cloud hosting with only minutes of downtime
Automatic monitoring with restart on failure and hardened security
On-site GSM gateways and mobile apps for staff

The result

Audio loss eliminated, clear calls and significantly lower hosting costs. Teams stay reachable anywhere on the company number.

	Before	After
Call quality	Dropouts and audio loss	Clear calls
Hosting	Costly and distant	Closer and cheaper
Incidents	Spotted by users	Automatic restart

For your project : Access to your current PBX and a short cut-over slot. We measure audio quality before and after to prove it.

YeastarCloudVoIP

A secure, remotely managed mobile fleet (MDM)

Devices & mobility

Completed project Group

A secure, remotely managed mobile fleet (MDM)

The challenge

The group had to meet strict security requirements for its teams’ business smartphones: inventory, application control, updates and data protection in case of loss or theft.

What we did

MDM comparison, choosing the one already included in the existing security licence
Phones enrolled by QR code, with a step-by-step guide
Business apps installed and updated remotely
Remote lock and wipe, security policies applied automatically

The result

Computers, servers and mobiles managed from a single console, group security requirements met, with no extra software purchase.

	Before	After
Inventory	Partial	Complete, per user
Loss or theft	Data exposed	Remote lock and wipe
Apps	Installed by hand	Deployed remotely

For your project : The list of your devices and security requirements. We first check whether an MDM is already included in your licences.

MDMKasperskyAndroid

Secure access to a biometric time-tracking system

Cybersecurity

Completed project Multi-site group

Secure access to a biometric time-tracking system

The challenge

The time-tracking software needed remote access for HR teams, without exposing the server to the Internet or disrupting the biometric terminals already in use.

What we did

Encrypted Cloudflare tunnel: no port open to the Internet
Valid HTTPS certificate and hardened security headers
Automatic monitoring every 5 minutes with service restart
Documented operating and rollback procedure

The result

Secure access from anywhere for managers, no downtime for the terminals, and a server that is no longer exposed.

	Before	After
Server exposure	Direct Internet access	No open port
Manager access	Unencrypted	HTTPS, valid certificate
Availability	Checked by hand	Automatic monitoring

For your project : Access to the time-tracking server and how your terminals currently work. We preserve their communication channel with no interruption.

CloudflareHTTPSBiométrie

A custom employee time-tracking application

Devices & mobility

Completed project Enterprise

A custom employee time-tracking application

The challenge

Attendance tracking was manual, slow to consolidate and error-prone, with no central view for management.

What we did

Custom web application built around the company’s rules
Dedicated HTTPS hosting with automatic health checks
Updates deployed automatically, with no downtime
Maintenance and enhancements provided by ALLSAFE

The result

Attendance centralised and available online, less manual entry and a platform maintained over time.

	Before	After
Data entry	Manual	Automatic
Consolidation	Slow, error-prone	Instant
Access	Local	Online, secure

For your project : Your attendance rules (schedules, teams, exceptions) and expected exports. We build and host the app, then keep improving it.

DéveloppementWebRH

Network audit, recabling and clean-up for a healthcare facility

Infrastructure

Completed project Healthcare facility

Network audit, recabling and clean-up for a healthcare facility

The challenge

Years of piecemeal additions had left chaotic cabling, network equipment sitting on the floor and no documentation. Critical services depended on this fragile, hard-to-troubleshoot installation.

What we did

Full audit of the existing setup and a clean-up plan
Category 6 cabling, locked network cabinet and cable trays
Separation of power and data cabling
Wi-Fi optimisation and network plans handed over

The result

A clean, physically secured and fully documented network, delivered in a few days of work with a closing report.

	Before	After
Cabling	Chaotic	Structured and labelled
Equipment	On the floor	Locked cabinet
Documentation	None	Complete plans

For your project : A site visit and the list of critical areas. We schedule the work so it doesn't disrupt operations.

CâblageWi-FiDocumentation

Ongoing managed IT for a multi-site group, for several years

Infrastructure

Completed project Multi-site group

Ongoing managed IT for a multi-site group, for several years

The challenge

Round-the-clock operations, teams spread across several cities and systems critical to the group’s own customers. The group needed a partner able to handle both day-to-day support and major incidents.

What we did

Multi-site user support and scheduled interventions
Monthly activity report shared with management
Advanced incident diagnosis (network analysis) and preventive measures
Support towards ISO 27001 best practice: backup and restore testing

The result

A long-term relationship built on trust: an estate tracked month after month, critical incidents resolved at the root cause and documented continuous improvement.

	Before	After
Support	Reactive, ad hoc	Structured, planned follow-up
Incidents	Worked around	Fixed at the root cause
Oversight	Little visibility	Monthly report to management

For your project : An inventory of your estate and your business priorities. Together we set service levels and the reporting format.

InfogéranceSupportISO 27001

3CX IP telephony for a financial services company

Communications

Completed project Financial services company

3CX IP telephony for a financial services company

The challenge

An ageing, inflexible phone system that allowed neither remote work nor easy call tracking.

What we did

3CX PBX and IP handsets deployed
Mobile and desktop apps for every staff member
Hardware supplied, configured and users trained

The result

Modern telephony usable anywhere, delivered on time and certified by the client as compliant with the specifications.

	Before	After
PBX	Old, rigid	Modern 3CX
Mobility	None	Mobile apps
Delivery	—	On time, compliant with specs

For your project : Number of handsets, current numbers and opening hours. We handle number porting and configuration.

3CXTéléphonie IPMobilité

The projects shown are real and delivered by ALLSAFE SOLUTIONS. In line with our confidentiality commitments, we never publish client identities, their exact sector or any sensitive technical detail (architecture, volumes, equipment). References can be shared on request, with the consent of the clients concerned.

A similar project? Let’s talk.

Free initial audit, reply within one business day.

Request an audit