Building a Corporate Wi‐Fi Infrastructure and Information Security System

Solution and Business Value

The Senseti Group team conducted a full audit of Euromix’s warehouse and office locations across Ukraine, developed a detailed coverage plan, and designed a new network architecture.

• Designed and deployed a new Wi‐Fi network based on Aruba hardware, tailored to each site’s architectural layout;
• Implemented centralized network management via Aruba AirWave, enabling single-window control of the entire infrastructure;
• Installed FortiGate gateways to establish a secure network perimeter and safe remote access;
• Introduced network segmentation using VLANs, creating dedicated subnets for scanners, printers, users, and guest devices;
• Set up encrypted communication channels between warehouses and the central office.

Business value delivered:

• Reliable and stable Wi‐Fi coverage across all warehouse and office locations;
• Reduced network-related incidents and operational downtime;
• Enhanced security through VLAN segmentation and perimeter protection;
• Centralized management and decreased workload for local IT teams;
• Infrastructure ready for scaling and future digital processes.

How the Solution Was Implemented

The project was executed in multiple stages, taking into account the geographical spread of branches and minimizing disruption to ongoing business operations.

Phase 1: Audit and Planning

• Audited all warehouses and offices: analyzed floor plans, rack heights, product types, and interference sources;
• Identified optimal coverage zones and created a detailed map for access point placement;
• Designed a VLAN-based segmentation structure.

Phase 2: Wi‐Fi Infrastructure Deployment

• Removed outdated Ubiquiti equipment;
• Installed Aruba access points in optimal coverage zones based on site-specific layouts;
• Configured centralized management through Aruba AirWave.

Phase 3: Building a Secure Network Architecture

• Deployed FortiGate gateways at each site to protect the perimeter and ensure secure communication with headquarters;
• Configured SSL-encrypted VPN connections between branches and the central office — secure links with no risk of data interception;
• Deployed dedicated VLANs for scanners, printers, users, and guest devices.

Phase 4: Testing and Go-Live

• Performed end-to-end testing of all nodes and systems;
• Set up automatic failover and traffic prioritization;
• Trained local IT personnel to support and maintain the new network infrastructure.

Technical Details

Network Architecture:

• Wi‐Fi infrastructure powered by Aruba Networking, centrally managed through AirWave;
• Routing and switching based on Aruba (HPE) equipment;
• PoE switches used for easy deployment of access points in warehouse environments.

Security and Protection:

• FortiGate security system deployed with a full range of features:
• Next-Generation Firewall, Intrusion Prevention System (IPS), Advanced Malware Protection, Application Control, URL/DNS/Video Filtering, and Antispam services;
• Multi-layered threat protection implemented under a Zero Trust policy;
• All FortiGate devices integrated into a centralized security policy platform via FortiManager;
• Traffic segmentation implemented using VLANs — separate subnets for each device type (e.g., scanners, printers, guest devices).

Centralized Management:

• Aruba AirWave for real-time monitoring, policy management, and inventory of access points and switches;
• FortiManager used for managing all FortiGate devices through a unified interface;
• Remote access configured for Senseti and Euromix IT administrators;
• Standardized configuration templates and updates deployed across all locations.

Scalability:

• The infrastructure is fully ready to add new branches and warehouses without changes to core architecture;
• Flexible expansion model for both hardware and licensing.