Two layers, one strategy
Good security is boring. It doesn't rely on staff spotting a cleverly faked email or on luck. It relies on layers: a firewall that inspects everything crossing your network boundary, and endpoint protection that watches what runs on every machine inside it. An attack has to beat both — and beating both is rare.
That's the strategy behind our network security offering. Bitdefender EDR & ATS guards the endpoints your people work on; a Zyxel firewall guards the single door everything passes through. Each layer catches what the other can't.
The threat has changed fundamentally in the last few years. Attackers use AI to write flawless phishing emails in seconds, to clone a director's voice from a minute of audio, and to produce malware that rewrites itself so no signature ever matches. Defences built for the pre-AI era simply weren't designed for this.
Neither layer works as a set-and-forget box, though — protection that's installed and ignored quietly rots. Every deployment we deliver is monitored and managed by YBS engineers as part of your contract, so detections are investigated, updates are applied, and your security posture improves over time rather than decaying.
Bitdefender GravityZone
The Bitdefender EDR & ATS package
We deploy Bitdefender GravityZone with Endpoint Detection & Response (EDR) and Advanced Threat Security (ATS) across your workstations, laptops and servers. Each layer below adds another wall an attack has to climb.
What is EDR?
Endpoint Detection & Response watches what is actually happening on every workstation, laptop and server — processes, file changes, network connections — rather than just scanning files against a list of known viruses. When it sees behaviour that looks like an attack (a document spawning a script, a process encrypting files in bulk), it steps in, isolates the device and rolls back the damage.
What is ATS?
Advanced Threat Security adds the layers that stop attacks before they ever execute: machine-learning detection of never-before-seen malware, sandbox analysis that detonates suspicious files safely in the cloud, and exploit prevention that blocks the techniques attackers use to weaponise everyday software.
Why Bitdefender
A Gartner-recognised leader, in an AI threat landscape
Why we put our name behind Bitdefender.Endpoint protection is not the place to take a chance on an unknown brand. Here's why Bitdefender is the one we put our name behind.
The headline
Built for the age of AI attacks
AI-written phishing and self-rewriting malware need machine-speed defence. Bitdefender's AI learns from 500M+ endpoints, so an attack seen anywhere is blocked everywhere.Attackers now use AI to generate flawless phishing emails, deepfake voice calls and malware that rewrites itself to avoid detection. Defending against machine-speed attacks needs machine-speed defence — Bitdefender's own AI models are trained on telemetry from over 500 million protected endpoints worldwide, so a new attack seen anywhere is blocked everywhere.
A recognised industry leader
A Gartner® Magic Quadrant™ Leader with top AV-TEST scores year after year.Bitdefender is consistently named a Leader in the Gartner® Magic Quadrant™ for Endpoint Protection Platforms and posts some of the highest scores in independent AV-TEST and AV-Comparatives evaluations year after year. You're not trusting a startup's marketing — you're trusting independently verified detection rates.
Light on the machine
Enterprise protection that runs quietly, without slowing staff down.Enterprise-grade protection that users don't notice. Bitdefender is engineered to run quietly in the background without the slowdowns that make staff beg to have antivirus removed — which matters, because protection only works when it stays switched on.
Managed by us, not by you
We deploy, license and monitor it. Alerts reach our engineers, not your inbox.We deploy, license, monitor and respond. Alerts land with YBS engineers — not in an inbox nobody reads — so detections are investigated and dealt with rather than becoming tomorrow's breach report.
Perimeter defence
Why every business needs a proper firewall
If your network connects to the internet — and it does — something has to decide what traffic is welcome. That something should be a business-grade firewall, not an afterthought.
One door, properly guarded
Every packet entering or leaving your business passes through the firewall. It's where you enforce what is allowed in, what is allowed out, and what gets blocked on sight — the single most effective control point a business network has.
Stops the quiet attacks
The most damaging breaches aren't loud. They're a remote access attempt on an open port at 3am, or an infected device quietly calling home. A properly configured firewall sees and stops that traffic before it becomes an incident.
Keeps networks separated
Guest Wi-Fi, staff devices, servers and CCTV should not all share one flat network. Firewall rules and VLANs keep them apart, so a compromised visitor laptop can't wander into your accounts data.
Insurance & compliance
Cyber insurers increasingly ask one question before anything else: do you have a business-grade firewall, properly managed? A consumer router with a sticker password is no longer a passable answer.
Zyxel USG FLEX
Zyxel firewalls, managed by YBS
Our go-to firewall range for SME perimeter security.Zyxel is one of our long-standing partners, and their USG FLEX range is our go-to for SME perimeter security.
Zyxel
USG FLEX · Nebula
- IPS, gateway AV & web filteringEnterprise-grade IPS, gateway AV & web filtering
- 5 Gbps throughput5 Gbps throughput — no bottleneck at the door
- Cloud-managed via NebulaCloud-managed via Nebula — patched remotely
- Sized for 5–100 peopleRight-sized & priced for 5–100-person businesses
Right-sized for SMEs
Enterprise protection — IPS, gateway AV, web filtering — priced for SMEs.Zyxel's USG FLEX firewall range delivers genuine enterprise protection — IPS, gateway anti-malware, web filtering and application control — at a price point that makes sense for a 5-to-100-person business, without the licensing maze of bigger enterprise brands.
Cloud-managed
Monitored, updated and reconfigured remotely via Nebula — no site visit.Zyxel's Nebula cloud platform means we can monitor, update and reconfigure your firewall remotely, the moment something needs attention — no site visit required for the routine work, and firmware security updates are kept current.
Always-current protection
Live threat feeds push new blocklists and signatures automatically.Live threat intelligence feeds update the firewall's blocklists continuously. New malicious domains, botnet command servers and exploit signatures are pushed to the box automatically — protection that keeps pace without anyone lifting a finger.
Supplied, installed & managed
We specify, install and manage it as part of your contract.We specify the right model for your connection speed and user count, install it, migrate your settings, and manage it as part of your contract. You get the protection; we carry the pager.
Firewall vs. router — what's the difference?
The box your broadband provider sent is a router. It connects you to the internet — but connecting and protecting are two different jobs.
| ISP router | Business firewall | |
|---|---|---|
| What it isWhat it is | Moves traffic; security is minimal.A router's job is to move traffic between your network and the internet. It routes — security features are minimal and often switched off by default. | Inspects traffic; security is the point.A firewall's job is to inspect that traffic and decide what is allowed through. Routing is included — security is the point. |
| InspectionThreat inspection | NAT only — no inspection or IPS.Basic NAT hides internal addresses, but there's no deep packet inspection, no intrusion prevention and no malware filtering on the traffic itself. | Deep packet inspection, IPS, gateway AV.Deep packet inspection, intrusion prevention (IPS), gateway antivirus and content filtering examine the actual content of connections, not just where they're headed. |
| VisibilityVisibility & control | Little or no logging or alerting.Little or no logging. If something suspicious happened last Tuesday, there's no record to check and no alert raised. | Full logging, alerting and reporting.Full traffic logging, alerting and reporting. You can see exactly what tried to get in, what was blocked, and prove it to an insurer or auditor. |
| FeaturesBusiness features | Flat network, limited VPN, no policies.One flat network, limited VPN support, and no way to apply different rules to staff, guests and servers. | VLANs, VPN, per-group policies, filtering.VLANs, site-to-site and remote-access VPN, per-group policies, web filtering and bandwidth control — the toolkit a real business network needs. |
What managed security looks like day to day
Security tooling only earns its keep when somebody is watching it. Detections from Bitdefender and events from your firewall land with YBS engineers, not in a mailbox nobody opens — so a blocked intrusion attempt, a quarantined attachment or an isolated laptop is investigated the same day rather than discovered months later in a breach report.
The routine work matters just as much as the dramatic moments. Firewall firmware is kept current, rules are reviewed as your business changes, endpoint agents are checked for coverage gaps, and network segmentation is adjusted when new devices, sites or guest requirements appear. Protection that is installed and forgotten quietly rots; protection that is managed gets stronger each year.
If the worst does happen, containment is already planned. An affected machine can be isolated from the network in seconds, the attack path traced, changes rolled back and clean systems restored from backup — with a written account of what happened for your insurer or auditor. That is the difference between an incident and a crisis.
Find out where you stand
Not sure how exposed your network is? Start with our free open port scanner to see what's visible from the internet — then talk to us about locking it down properly.
Related questions