Most SMBs end up with a network that was assembled over time - a firewall from one vendor, switches from another, wireless from a third, and no one who truly owns any of it. Richweb builds SMB networks from the ground up on the Juniper Mist platform, designed to your environment, and operated by us on a monthly subscription so you never have to think about it.
We size the design to your business - not to a data sheet. One location or five, 10 users or 100, we spec and run the right network for where you are today and where you're going.
We help customers evaluate and source internet circuits - comparing carriers, contract terms, and SLAs for their location. We know what's actually available in most Virginia markets and what carriers tend to perform well in them. You don't have to navigate that conversation alone.
For customers with multiple locations that need to operate as one network, we design and build layer 2 services across sites - giving you consistent addressing, seamless application access, and centralized management regardless of which office a user is in.
Where the business requires it, we build failover into the design from the start - dual circuits, diverse carriers, automatic failover policies. When a primary link goes down the network keeps running, and we get alerted before most users notice anything changed.
The Richweb Network Services Appliance is something we built ourselves and deploy for our NaaS customers. Rather than dropping in a standalone physical firewall, we run the firewall function virtually on our service appliance alongside a set of containerized network services - DHCP, DNS, service probes, and monitoring tools - all running on a single piece of managed hardware we own and operate.
The appliance runs on Proxmox, provisioned and configured through our own automated deployment tooling so every unit comes up consistent and ready. We offer 1G, 2.5G, and 10G models depending on the throughput the environment needs. For customers that want to run edge applications - local caching, lightweight services, anything that benefits from being on-site rather than in the cloud - we can spec additional RAM and storage to support it on the same appliance.
This keeps the hardware footprint tight, gives us full visibility and control of critical network services from day one, and means we can update, reconfigure, or troubleshoot any of those services remotely without dispatching a tech. For customers it means less gear in the rack and a faster response when something needs attention.
Our managed BSD firewall is the standard deployment and what we know best. For customers with a specific requirement or existing investment, we can also run a virtual Palo Alto or Fortinet on the same appliance - same hardware platform, same containerized services around it, different firewall engine. That also means if your requirements change down the road - a new compliance obligation, an acquisition, a preference shift - we can swap the firewall without a hardware lift and shift. The appliance stays, the firewall changes.
Every component in a Richweb SMB deployment is chosen for the job it does, sized to the environment, and managed through Juniper Mist for consistent visibility across switching, wireless, and WAN. The physical installation matters to us too - clean cabling and proper cable management are a point of pride on every job we do. A well-built rack and tidy runs aren't just aesthetics; they make every future change, troubleshoot, and upgrade faster and cleaner.
Our standard switching platform for SMB deployments. Mist-managed EX4000 and EX4100 series switches bring multigig capability to access and distribution layers - important as wireless clients and workstations increasingly push beyond gigabit. Full Mist telemetry gives us real-time visibility into every port without polling.
AP selection depends on the environment - density, interference profile, client mix, and whether the space demands 6 GHz spectrum. Mist's AI-driven RF management handles channel planning and load balancing automatically; we do the site survey and deployment work to make sure the coverage map matches reality.
Clean, reliable power is infrastructure, not an afterthought. We spec Eaton or Vertiv PDUs and UPS units tailored to the rack size and load of each deployment - right-sized for the environment rather than a default SKU. Proper power protection extends hardware life and keeps the network up through brief outages and power events.
For NaaS customers, Opengear gives us a separate management path into the network that is completely independent of the production network. If the primary WAN goes down or a misconfiguration locks us out, we can still reach every device, diagnose the issue, and restore service - without rolling a truck.
Our managed BSD firewalls come bundled with a security and operations stack that is active from day one. You don't license these separately - they're part of what makes our NaaS deployments different from a box drop.
Bundled with every managed firewall deployment. DNSFilter handles content filtering and DNS-layer security - blocking malicious domains before a connection is ever established. ThreatStop adds an IP-level threat feed that keeps known malicious infrastructure blocked at the edge. Together they give the firewall active threat intelligence without requiring a separate appliance or subscription.
Firewall and network logs flow into Huntress SIEM, where they're correlated against threat intelligence and surfaced for our team to act on. When something in the network traffic indicates a problem - lateral movement, suspicious outbound connections, policy violations - we see it and respond rather than waiting for a user to notice something is wrong.
Automated configuration backups for every device in the network. Every change is captured and versioned, so if a misconfiguration causes an issue we can identify what changed and restore a known-good state quickly - no guessing, no reconstructing from memory.
Network-wide monitoring across every managed device. IrisNS gives us a unified view of device health, reachability, and status so we catch problems proactively - before they turn into outages or support calls.
NaaS is a subscription model but the real value is flexibility. Because we own the hardware, you aren't locked to it. We offer 36 and 60 month terms, and both allow you to grow or shrink along the way as your business changes.
Relocating is already a project. With NaaS the network isn't a separate one. We design the new space, move or replace hardware as needed, and have you connected on day one in the new location - covered under the same monthly agreement.
Adding a floor, a new branch, or doubling your headcount doesn't require a capital conversation. Expansions are scoped, scheduled, and absorbed into the subscription. The network grows when you do.
We think you'll stay, but NaaS gives you honest freedom. You're not tied to Richweb because you own hardware we configured. If the relationship ever isn't working, you can transition cleanly - no stranded equipment, no config hostage situations.
Our helpdesk for NaaS customers is staffed by experienced network engineers - not a general IT queue. The person helping you understands BGP, Mist, and how your specific network was designed, because that's the team that built it. In many cases you'll get the same engineer who deployed your network on the other end of a support call.
And when they're heads-down on something else, there's a deep bench behind them. Our team covers each other so customers are never waiting on one person. You get continuity when things are smooth and depth when things get complicated.
Tell us about your environment and we'll put together a design.
Get in Touch