Challenge
- Integrate connectivity, security and surveillance for a new retail complex with national and local tenants.
- Design a single network serving internal operations and tenants without compromising PCI compliance.
- Enable visitor Wi-Fi with the complex's branded captive portal and behavior metrics.
Outcome
- Zero security incidents during the first year of operation.
- 100% of tenants connected with their own SLAs and unified monitoring from our NOC.
- Mean tenant incident resolution time ≤ 30 minutes.
Context
Paseo Central is a retail complex with national and local tenants, shared service areas and 24×7×365 operation. The network had to support customer traffic, administrative systems and CCTV without any of them compromising the others.
Design
We adopted a single Fortinet perimeter with per-tenant and per-system L3 segmentation. The guest Wi-Fi was completely isolated from back-of-house, and CCTV was integrated under a dedicated VLAN with central NOC monitoring.
- FortiGate as the complex's NGFW with auditable policies.
- FortiSwitch on every level to reduce inter-store latency.
- High-density FortiAP in corridors and common areas.
- Axis and Hikvision for CCTV with auditable retention.
Operation
The complex went live with the network already under NOC monitoring. Each tenant received documented onboarding, their VLAN and their egress rules. Incidents are handled from the NOC with a per-tenant-type runbook.
Outcome
After the first year, no security incidents were reported. The network held through Black Friday and holiday-season peaks without degradation. Multi-tenant availability averaged 99.97% monthly.
“The first Black Friday went by without a single network alert. That's the metric that matters.”