Employees spend their work hours on social media, nobody knows who goes where online, and when you need to give a branch office access, you end up duct-taping something together. Deploying Kerio Control, Ideco or UserGate closes this topic for good: one gateway, one set of rules, one report for management. Fits companies that need a UTM gateway (a single device for traffic filtering, VPN and access control) instead of a pile of disconnected tools.
What’s included in Kerio Control setup and similar solutions
I take on the whole task: from gathering requirements to handing over a ready gateway with documentation.
- Installing a UTM solution: Kerio Control, Ideco or UserGate, picked to fit your case
- Setting up internet access policies for users and groups
- Setting up VPN for remote employee access and connecting offices
- Content filtering: blocking unwanted sites and categories
- Setting up reports on traffic and user activity
- Documentation on the configured policies
How UTM gateway deployment works
%%{init: {
'theme': 'base',
'themeVariables': {
'primaryColor': '#ffffff',
'primaryTextColor': '#1e293b',
'primaryBorderColor': '#94a3b8',
'lineColor': '#64748b',
'fontSize': '15px',
'fontFamily': 'ui-sans-serif, system-ui, sans-serif'
},
'flowchart': {'curve': 'linear', 'nodeSpacing': 50, 'rankSpacing': 50}
}}%%
flowchart TD
S1["1. Access policy requirements"]
S2["2. UTM installation"]
S3["3. Policies, users"]
S4["4. VPN and content filtering"]
S5["5. Reports and handover"]
S1 --> S2
S2 --> S3
S3 --> S4
S4 --> S5
style S1 fill:#f8fafc,stroke:#3b82f6,stroke-width:2px,color:#1e40af
style S2 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
style S3 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
style S4 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
style S5 fill:#f8fafc,stroke:#22c55e,stroke-width:2px,color:#15803d
- Gathering requirements. I discuss what access policies you need, what filtering, whether VPN is needed and which reports matter to management.
- UTM installation. I deploy the chosen solution: Kerio Control, Ideco or UserGate, on the prepared server or hardware platform.
- Policies and users. I configure access rules, add users, and if needed integrate with Active Directory (the directory service for managing employee accounts).
- VPN and filtering. I set up secure remote access and configure blocking of unwanted content by categories and rules.
- Reports and handover. I set up traffic reports, verify all rules work, and hand over the gateway with documentation.
What hardware you’ll need for Ideco or UserGate
You need a server or virtual machine for the chosen solution, or a vendor hardware appliance, if you decide to go that route. You also need a license for the chosen product: without it, the gateway won’t work at full capacity.
What we deploy on your infrastructure
At the end you get a working UTM gateway: internet access rules, content filtering, VPN for employees and branch offices, traffic and user reports. Everything configured for your requirements, not off a template.
What you get as a result of the deployment
- Controlled employee internet access
- Traffic reports: you see who goes where and how much traffic they use
- Documentation on all configured access policies
- A ready VPN for remote work and connecting offices
Cost of setting up Kerio Control and similar solutions
The base price depends on the scope of policy and filtering work and the number of users. Current rates below.
| Work | Price |
|---|---|
| Kerio Control, IDECO, UserGate deployment: base package (2-3 days) | from 10 000 ₽ |
| AD integration | from 4 000 ₽ |
| Migrating rules from the old gateway | from 5 000 ₽ |
Not included in the price: License cost.
After delivery: 14 days of free fixes for any issues. After that: one-off work at 2 000 ₽/hour or support from 4 000 ₽/month.
What I need from you before starting work
- A license for the chosen solution (Kerio Control, Ideco or UserGate)
- Access to Active Directory, if integration with employee accounts is needed
- A list of access rules: what to allow, what to block, for whom and when
- A prepared server, VM or hardware platform for the gateway
Frequently asked questions about UTM gateway deployment
Is the work done remotely?
Yes, the whole process, from installation to delivering reports, is done remotely.
How long does setting up Kerio Control or Ideco take?
On average 2-3 days, depending on the scope of policies and number of users.
What if there’s no license yet?
I’ll tell you which license and what capacity to buy for your tasks. The license itself is not included in the service price.
What if AD isn’t set up?
Active Directory integration is a separate task, we’ll discuss it during the requirements gathering stage.
What happens after the gateway is delivered?
I fix issues for free for 14 days, if something doesn’t work as agreed. After that: one-off hourly work or monthly support, if you need ongoing coverage.
Can rules be migrated from the old gateway?
Yes, migrating rules from the previous solution is a separate service, we’ll discuss its scope during requirements gathering.
Related reading
Оставайтесь на связи
Рецепты от IT-боли. Без воды, без рекламы, без маркетинговой шелухи.
Подписаться на IT-Аптеку →




