Secure Remote Access

Secure Remote Working

Secure, always-on connectivity for your remote and hybrid team — every device protected automatically, wherever they work. Built on Fortinet Zero Trust Network Access and a fully managed FortiGate firewall.

Get a quote

Overview

Your team, secure — wherever they work

Hybrid and remote working is now the norm, but a laptop on a home or public network is only as safe as the connection behind it. An Always-On VPN takes away the guesswork: the moment a device powers on, it connects back to your network through a secure, encrypted tunnel — automatically, with nothing for the user to switch on or remember. We build it on Fortinet’s FortiClient (Zero Trust Network Access) and a Foresight-managed FortiGate firewall, and we run the whole thing for you — policies, deployment, updates and support.

Pricing

Simple per-endpoint pricing

One managed, ticketed line item — no hidden bundles. Scaled to the size of your team.

Team sizeMonthly price
5–14 endpoints£4.50 / endpoint
15–49 endpoints£4.00 / endpoint
50+ endpoints£3.50 / endpoint
20 endpoints
550100150200+
Per endpoint£4.00
Estimated monthly£80

Minimum £75 / month so even small teams are fully covered
One-off onboarding from £795 — get in touch for larger projects
Onboarding includes EMS policy build, certificate / SSO configuration, Always-On tunnel policy and a pilot rollout
Requires a Foresight-managed FortiGate — we can provide and manage one if you don’t already have it

Prices are a guide, correct at the time of publication (July 2026), exclude VAT and are subject to change. Every deployment is scoped to your environment — ask us for a tailored quote.

What’s included

Fully managed, end to end

Always-on encrypted tunnel — auto-connects, no user action needed
Zero Trust Network Access (ZTNA) — verifies device and identity before granting access
Managed FortiClient EMS — policy, deployment and updates handled for you
Managed FortiGate firewall — configured and maintained via FortiManager
Certificate & SAML single sign-on integration
Pilot group rollout, then a smooth full deployment
Ongoing management, monitoring & UK support
Supports Cyber Essentials remote-working controls

Better together

A secure remote workforce

An Always-On VPN secures the connection — pair it with vulnerability management and you protect the devices too.

Together they make a “Secure Remote Workforce” bundle: every laptop connected safely and continuously scanned for weaknesses, mapping neatly to Cyber Essentials remote-working controls. It’s a popular combination with our school and healthcare clients, where keeping data safe off-site is essential.

ZTNAZero Trust access
Always-onNo user action needed
Cyber EssentialsRemote-working aligned
130+Organisations protected

Related

Works hand-in-hand with

Vulnerability Management

Continuous scanning of your devices and network — £35 per asset per month.

Explore →

Connectivity

Business broadband, leased lines, Starlink and managed networks.

Explore →

Cyber Security

Our full Cyber Resilience Programme — SOC, monitoring, testing and compliance.

Explore →

FAQs

Always-On VPN questions, answered.

It’s a secure connection that switches on by itself. As soon as a device starts up, it connects back to your network through an encrypted tunnel and stays connected — so your team is always protected without having to turn anything on.
A traditional VPN relies on people remembering to connect, which often gets skipped. Always-On connects automatically at start-up and reconnects if the link drops. It also uses Zero Trust Network Access (ZTNA), verifying both the device and the user’s identity before granting access.
No. Once we’ve deployed it, it runs quietly in the background. There’s nothing for staff to remember, toggle or log into separately.
Yes — the service runs alongside a Foresight-managed FortiGate. If you don’t already have one, we can provide and manage it as part of setting the service up.
For everyday work there’s no noticeable impact. Traffic is encrypted and routed efficiently, and we size the firewall and licences to match your team so performance stays smooth.
It supports the remote-working and secure-configuration controls Cyber Essentials looks for, making sure off-site devices connect back securely rather than over an open network — a common sticking point for schools and healthcare organisations.
Yes. It pairs with our Vulnerability Management as a “Secure Remote Workforce” bundle: the VPN secures the connection, while vulnerability scanning keeps the devices themselves patched and monitored.

Secure your remote team the easy way

Get a scoped Always-On VPN quote for your team — no obligation.

Get a quote