Community Bank
Network Segmentation & Firewall Hardening
The Challenge
A Central Florida community bank was operating on a largely flat network — workstations, servers, and IoT/peripheral devices sharing the same broadcast domain. A recent examination had flagged inadequate network segmentation as a finding, and IT staff had limited visibility into east-west traffic between systems.
The Solution
Darthtech performed a full network architecture overhaul:
- Redesigned the network into purpose-built VLANs (workstations, servers, guest, cameras/IoT, management)
- Implemented zone-based firewall rules to control and log traffic between segments, including sending key logs to the SOC/SIEM for continuous review
- Deployed an mDNS proxy so cross-VLAN discovery services (printers, Apple devices, etc.) continued working without flattening the network back out
- Migrated the branch's camera system and Wi-Fi onto isolated VLANs, removed from general network traffic entirely
Before → After
Single flat network, no traffic segmentation
→
Purpose-built VLANs with documented zone policies
No visibility into inter-device traffic
→
Logged, rule-based traffic between every zone, monitored via SOC/SIEM
Cameras, IoT, and Wi-Fi traffic mixed in with core banking systems
→
Cameras, IoT, and Wi-Fi fully isolated on dedicated segments
Examiner finding on segmentation
→
Segmentation architecture documented and exam-ready
Result: The bank passed its next examination cycle with the segmentation finding closed, and IT staff gained real visibility into what's talking to what — something they'd never had before.
Credit Union
Branch Camera & Physical Security Upgrade
The Challenge
A regional credit union was running aging cameras across several branches — poor image quality, blind spots at teller lines and entrances, and a clunky management interface. When compliance or loss-prevention needed footage, pulling it was a slow, frustrating process for the team.
The Solution
Darthtech designed and deployed a modern commercial camera system across the branch network:
- Installed enterprise-grade cameras with full coverage of entrances, teller lines, vaults, and parking areas, including across a multi-story branch building
- Centralized cloud-based management, giving compliance and operations staff remote access to live and recorded footage from any branch — eliminating the cumbersome interface staff previously had to work around
- Set retention policies aligned with the credit union's audit and incident-response requirements
Before → After
Analog cameras, blind spots at key areas
→
High-resolution coverage of entrances, teller lines, and vaults, meeting regulatory requirements with significantly improved detection
Footage only accessible by the IT department, with a slow turnaround
→
Remote, cloud-based access for any authorized user, with permission-based access for the staff who need it
No standardized retention across branches
→
Consistent retention policy applied enterprise-wide
Result: Incident review time dropped from a same-day branch visit to a matter of minutes, and the credit union now has audit-ready footage and coverage across every branch, not just headquarters.
Multi-Branch Financial Institution
SD-WAN with Cellular Failover for Branch Business Continuity
The Challenge
A multi-branch financial institution had experienced repeated ISP outages that took branches fully offline — no card transactions, no ATM connectivity, no core banking access — until the primary circuit was restored. Downtime meant lost transactions and frustrated customers standing in a branch that was limited to offline operations.
The Solution
Darthtech deployed SD-WAN and cellular failover at each branch:
- Automatic, seamless failover to cellular the moment the primary ISP circuit drops
- No manual intervention required — staff often don't notice an outage occurred until asked
- Centralized monitoring so Darthtech and the institution's IT team can see connectivity status across every branch in real time
Before → After
ISP outage = full branch outage
→
ISP outage = automatic, near-instant failover to cellular
No visibility into branch connectivity status
→
Centralized real-time monitoring across all branches
Manual escalation and downtime during outages
→
Continuity maintained with no staff intervention
Business continuity gap during ISP issues
→
Documented failover architecture supporting continuity requirements
Result: Since deployment, no branch has experienced a full outage due to an ISP failure — transactions and ATM service continue uninterrupted even when the primary circuit is down.
