Secure Remote Working · Always-On VPN

Secure remote working, on by default.

An Always-On VPN that connects hybrid staff back to your network automatically and securely — built on Fortinet Zero Trust, fully managed.

Get a quoteWhat we cover
Cyber Essentials Plus certified20 years · Est. 2006130+ organisations supportedFixed monthly pricing
Cyber Essentials Plus certifiedMicrosoft & Fortinet partnerOldham Business Awards 2022 winnerDBS-cleared engineersUK-based helpdesk

Quick answer

An Always-On VPN gives remote and hybrid staff a secure, automatic connection back to your network the moment their device starts up — with nothing for the user to switch on. Foresight IT Services delivers a fully managed Always-On VPN built on Fortinet Zero Trust Network Access (ZTNA) and a managed FortiGate firewall, from £3.50 per endpoint per month, supporting Cyber Essentials remote-working controls.

What we cover

Zero-trust access, done for you

Secure connectivity for every device, wherever your team works.

Always-On VPN

A secure tunnel that connects the moment a device starts — nothing for staff to switch on.

Zero Trust access (ZTNA)

Verify every connection and grant access only to what each user needs.

Managed FortiGate firewall

Enterprise Fortinet security, configured and managed by us.

Learn more →

Any device

Consistent, secure access from laptops, tablets and phones.

Cyber Essentials controls

Meets the remote-working requirements of Cyber Essentials.

Learn more →

Fully managed & monitored

We run it and watch it around the clock.

Learn more →
20
years supporting GM business
130+
organisations supported
24/7
monitoring & response
CE+
Cyber Essentials Plus certified
“They feel like our own IT department — quick to respond, and always a step ahead of problems.”
— Illustrative testimonial placeholder
Property Alliance GroupRussell WBHOMoya ColeDr Kershaw’s HospiceKingfisher Learning Trust

Pricing

Simple per-endpoint pricing

Scaled to the number of devices you protect.

Pricing

Simple per-endpoint pricing

One managed, ticketed line item — no hidden bundles. Scaled to the size of your team.

Team sizeMonthly price
5–14 endpoints£4.50 / endpoint
15–49 endpoints£4.00 / endpoint
50+ endpoints£3.50 / endpoint
20 endpoints
550100150200+
Per endpoint£4.00
Estimated monthly£80

Minimum £75 / month so even small teams are fully covered
One-off onboarding from £795 — get in touch for larger projects
Onboarding includes EMS policy build, certificate / SSO configuration, Always-On tunnel policy and a pilot rollout
Requires a Foresight-managed FortiGate — we can provide and manage one if you don’t already have it

Prices are a guide, correct at the time of publication (July 2026), exclude VAT and are subject to change. Every deployment is scoped to your environment — ask us for a tailored quote.

FAQs

Your questions, answered

What is an Always-On VPN?
It’s a secure connection that switches on by itself. As soon as a device starts up, it connects back to your network through an encrypted tunnel and stays connected — so your team is always protected without having to turn anything on.
How is it different from a normal VPN?
A traditional VPN relies on people remembering to connect, which often gets skipped. Always-On connects automatically at start-up and reconnects if the link drops. It also uses Zero Trust Network Access (ZTNA), verifying both the device and the user’s identity before granting access.
Do my team need to do anything?
No. Once we’ve deployed it, it runs quietly in the background. There’s nothing for staff to remember, toggle or log into separately.
Do we need a FortiGate firewall?
Yes — the service runs alongside a Foresight-managed FortiGate. If you don’t already have one, we can provide and manage it as part of setting the service up.
Will it slow our internet down?
For everyday work there’s no noticeable impact. Traffic is encrypted and routed efficiently, and we size the firewall and licences to match your team so performance stays smooth.
How does it help with Cyber Essentials?
It supports the remote-working and secure-configuration controls Cyber Essentials looks for, making sure off-site devices connect back securely rather than over an open network — a common sticking point for schools and healthcare organisations.
Can we combine it with device security?
Yes. It pairs with our Vulnerability Management as a “Secure Remote Workforce” bundle: the VPN secures the connection, while vulnerability scanning keeps the devices themselves patched and monitored.

Let’s secure your remote team

Talk to a Greater Manchester team that has looked after growing organisations for 20 years.

Get a quoteBook a call