1905 N Sherman Street, Suite 200 – PMB #2242, Denver, CO 80203

Zero Trust Network Modernization for a Mid-Atlantic County Government

The challenge

A county government serving 380,000 residents was operating on a flat network architecture with no internal segmentation. Following a ransomware incident at a neighboring jurisdiction that caused a 3-week service outage, county leadership commissioned an urgent network modernization to prevent lateral threat movement and protect citizen services including online tax payments, permit applications, and court records access.

Our solution

SYNCXELL conducted a comprehensive network security assessment, then designed and deployed a Zero Trust Network Access (ZTNA) architecture with Palo Alto NGFWs at all perimeter and internal chokepoints, dynamic micro-segmentation separating critical departments, and a centralized Grafana monitoring stack with 24/7 alerting. We also migrated the county's identity management to Azure Entra ID with conditional access policies enforced across all devices.

The outcome

The county now operates with full network visibility across 47 departments and 2,400 endpoints. A penetration test conducted 60 days post-implementation confirmed zero exploitable lateral movement paths across department boundaries. The county's cyber insurance premium was reduced by 22% upon presenting the new security posture documentation. Citizen-facing services maintained 100% uptime throughout the migration.

Key results

Technologies used

Palo Alto NGFW Azure Entra ID Zscaler ZTNA Grafana Prometheus Ansible

Compliance frameworks

NIST CSF CIS Controls v8 CISA Zero Trust Maturity Model