Case studies

Work we can point to.

Each note is a real engagement, anonymised to its sector. What the client faced, how we ran it, and what changed afterwards.

Virtualisation & HCI

2 case notes

Insurance

Sangfor VMP to HCI migration: consolidating VMware VMs, VDI, and remote apps on one cluster

An insurance operation running 50 Sangfor VDI seats, published remote apps, and a VMware estate across multiple sites needed its Sangfor platform brought to current-generation HCI. We upgraded VMP to HCI, walked VDC through its required release path, deployed SCP, and migrated the existing VMware VMs — Active Directory included — so the client now runs VMs, VDI, and remote apps together on one platform, with zero data loss.

Read case note →

Fashion & Lifestyle

One project, the whole stack: VMware workloads onto a two-node Sangfor HCI cluster, with edge firewall, Wi-Fi 6 switching and a Veeam backup platform rebuilt underneath a running business

A designer fashion and lifestyle house running on aging virtualisation hosts, a firewall at the end of its useful life, and a Symantec Backup Exec estate that had outlived its owner rebuilt its entire infrastructure in one project: a two-node Sangfor HCI cluster with a witness appliance for the compute layer — with the existing VMware VMs migrated onto it — a Sangfor next-generation firewall at the edge, Huawei CloudEngine switching and AirEngine Wi-Fi 6 across the floor, and a Veeam backup platform on new Lenovo and Synology hardware, while Active Directory and the file server were rebuilt underneath the live business.

Read case note →

Security & Networking

2 case notes

Multi-sector

PHP2Shell response across the client base: every managed estate checked server by server, patched where updates existed, and unpatchable devices taken off the internet

When PHP2Shell (CVE-2026-109618 / CVE-2026-109619) landed — critical, unauthenticated PHP remote-code-execution flaws with exploitation reported in the wild — we swept the managed client base end to end: every server, service, and device of every client on a maintenance agreement was checked against the advisory, everything with a vendor update got patched, and devices without one were taken out of external reach, hardened, and put on an upgrade waiting list. Clients we don't hold a maintenance agreement with received an email reminder about the vulnerability. Every system we checked came back clean.

Read case note →

Manufacturing

No single point of failure at the edge: two Sangfor firewalls load-balancing three broadband lines, two FortiGates in HA segmenting everything inside

A manufacturer running its site through firewalls the vendors were about to stop supporting — a Check Point 770 at end of life, a SonicWall NSA2650 following it a year later — rebuilt the whole network edge as a two-tier design: a pair of Sangfor NGAFs outside, protecting and load-balancing three broadband lines, and a pair of FortiGate 60Fs inside, in high availability, enforcing segmentation and policy. Managed Ruijie switching under both tiers removed the remaining single points of failure, and every device went onto five-year security and support coverage.

Read case note →

Business Systems

1 case notes

Financial Services

Exchange Server 2010 to Office 365: a hybrid mailbox migration with directory modernisation

A 60-user financial-services organisation moved from on-premises Exchange Server 2010 to an existing Office 365 tenant. The project modernised the domain-controller environment, configured Exchange hybrid, moved the mailboxes, and switched mail routing during an out-of-hours cutover.

Read case note →

Network Infrastructure

2 case notes

Education

A whole primary school, designed and built in one contract: fibre to every classroom across eight floors, with firewall, wireless and structured cabling delivered as one system

A brand-new school occupying an eight-floor campus (G/F to 7/F) put its entire wired and wireless network out as one design-and-build: a new fibre backbone from the 2/F server room to every floor, fibre-to-the-classroom for every classroom and special room, Cat6 structured cabling for the rest, a next-generation firewall with content filtering, and 430 network points for data, phones, IP cameras, PA speakers and access points. We carried the whole chain — design, supply, install, configure, test, document — built the campus inside the one-month summer window, and stayed accountable through acceptance and a six-month support period.

Read case note →

Financial Services

One evening on site: bringing eleven Aruba devices current — gateways and nine APs upgraded in staged batches with coverage never fully down

A financial-services client's office Wi-Fi ran on two HPE Aruba 9004 gateways acting as local controller with nine AP-515 access points, several firmware generations behind. We executed a one-time on-site upgrade in a single out-of-hours window: full configuration backups first, gateways moved to the vendor's mature AOS-10.7.2.4 release, then the APs in controlled batches of three, with SSIDs and client connectivity verified between batches — landing the estate on current security patches plus the release's known AP-515 client-stability fixes.

Read case note →

Managed IT

1 case notes

Youth Development & Community Services

A mixed Hyper-V and VMware estate under one cloud backup platform — with restores drilled, not assumed

A youth-development organisation running a mixed Hyper-V and VMware estate put the whole virtualisation platform under Acronis Cyber Protect Cloud: image-based protection of every hypervisor host and every guest VM, daily incremental plus weekly full schedules, three-generation (grandfather-father-son) retention, AES-256 encryption to cloud storage, and — before handover — real restore tests at file, whole-VM and whole-hypervisor level, with recovery steps and RTO documented and the customer's own IT team trained to run a restore.

Read case note →

Business Continuity

1 case notes

Charity & Social Services

A disaster-recovery site in Azure, and the H3C core that feeds it: IRF-redundant switching under twelve production servers, ASR replication to the cloud

A charity and social-services organisation carrying its operational estate — domain controller, ERP, HRIS, file, print, document-management and device-management servers — on a single site got a proper second one: a disaster-recovery site in Azure built on Site Recovery replication with failover and failback, an Azure-hosted domain controller replicating with the on-premises one, a VPN gateway tying the two networks together, Traffic Manager ready to re-route users, and Azure Backup retaining data alongside the replication. Underneath it, the core network was rebuilt on H3C — S6805 core switches and S5590 server-access switches in a phased design that delivered the functional upgrade first and added IRF clustering for full redundancy second.

Read case note →

Ready to fix your IT challenges?

Whether it’s a critical server issue or a long-term digital transformation project, our team is ready to assist. Reach out and experience ITR’s expert support that actually works.