ClearDay Systems

Company Details

ClearDay Systems
Colorado Springs, CO 80920
United States

Contact
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Web: www.cleardaysystems.com

For a project inquiry, the contact form is the quickest way to reach us.

Services

Eight areas of work, three ways to engage. Pick the one that fits the job, and combine them as your needs change.

Fixed-scope project

A defined piece of work with clear deliverables and an agreed price: a gap analysis, a firewall upgrade, a policy set.

Prepaid support hours

Buy a block of hours and use it for anything on this list. Work that isn't a fixed-scope project, such as questions and unexpected issues, is drawn from your block. Top up when it runs low.

Ongoing advisory

A recurring engagement for steady, executive-level security guidance for a fraction of the cost of a full-time hire.

ServiceFixed-scope projectPrepaid support hoursOngoing advisory
Security response
Alert review & triage (business hours)–✓✓
Incident investigation & root-cause analysis✓✓–
Incident response support–✓–
Vulnerability scanning✓✓✓
Patch management✓✓✓
Email, endpoint & identity protection solutions✓✓–
Cisco security solutions & firewalls
Needs-based solution design & licensing guidance✓✓–
Installation & configuration✓––
Hardened, pre-planned firewall configuration for small business✓––
Firewall management (Cisco Secure Firewall / FTD)–✓✓
Best-practice & rule-base review✓✓–
High availability & health checks✓✓–
Firewall upgrades & migrations✓––
Ongoing support & tuning–✓✓
VPN & remote access
VPN design & hardening review✓✓–
IPsec VPN✓✓–
Remote access VPN, including split-tunnel policy✓✓–
PKI & certificate lifecycle management✓✓–
Support & troubleshooting (uses prepaid hours)
Site-to-site VPN troubleshooting: tunnel negotiation and handshake failures, restoring a tunnel that stopped working–✓–
Working with the other end of the link: your remote sites, partners, carriers and vendors–✓–
Remote access VPN troubleshooting: connection, authentication and performance problems–✓–
Firewall troubleshooting: traffic flows, NAT and rule problems, issues after a change–✓–
Certificate problems: expired or mismatched certificates breaking VPN and TLS connections–✓–
Cloud and hybrid connectivity troubleshooting (AWS, Azure)–✓–
Performance, latency and packet-loss investigation–✓–
Work outside business hours, by arrangement, at a premium rate–✓–
Emergency support, by arrangement, at a premium rate–✓–
Cloud security management
AWS secure architecture & account setup✓✓–
AWS identity, network & hybrid connectivity security✓✓–
Azure secure subscription setup & configuration review✓✓–
Azure network & hybrid connectivity security✓✓–
Multi-factor authentication for cloud access✓✓–
Ongoing cloud security support and tuning–✓✓
Governance, risk & compliance
Security & compliance gap analysis✓––
NIST compliance aid (CSF for small business, SP 800-37, 800-53, 800-207)✓✓✓
Risk assessments & risk registers✓––
Policy & procedure development✓––
Audit readiness support✓✓–
Virtual CISO advisory–✓✓
Zero trust access
Zero trust design & roadmap, aligned with NIST SP 800-207✓✓–
Zscaler deployment & policy design (internet and private access)✓✓–
Cisco zero trust deployment (Duo, Secure Access)✓✓–
Migration from VPN to zero trust access✓––
Ongoing zero trust support and tuning–✓✓
OpenClaw agentic assistant (coming soon)
Installation & initial setup✓––
Simple and custom task configuration✓✓–
Hardened on-premise firewall plan for OpenClaw, with backup configuration, upgrades & patching✓✓✓
Configuration & interface training✓✓–
Additional task configuration & training–✓–
Ongoing support–✓✓

Response work is performed during business hours. Work outside business hours, including emergency support, is available by arrangement at a premium rate. Cisco products are purchased through Cisco's authorized partners; we help you choose, deploy, and support them. Microsoft and Azure are trademarks of the Microsoft group of companies. AWS and Amazon Web Services are trademarks of Amazon.com, Inc. or its affiliates. Zscaler is a trademark of Zscaler, Inc. Cisco, Duo, and related product names are trademarks of Cisco Systems, Inc. and/or its affiliates.

Book a free consultation

About ClearDay Systems

ClearDay Systems is led by Noel Stanford Oveson, Security Consultant, who has spent more than ten years designing, deploying, and troubleshooting enterprise firewalls and VPNs for commercial, public-sector, and classified-network customers.

Noel OvesonNoel worked at Cisco Systems for several years as a firewall subject-matter expert and Designated Services Manager. He has led customer engagements, coordinated specialist engineering teams, contributed to large-scale high-availability firewall architecture projects, and delivered MFA-enabled remote access for thousands of users. His approach is disciplined and practical: clear runbooks, collaborative no-ego troubleshooting, and security controls mapped to standards including NIST, HIPAA, and PCI DSS. The goal is a secure, reliable production environment that works for both the security team and the business.

Enterprise firewall operations

ASA, FTD, and FMC, HA and clustering, NAT, and access control. Well-versed in both software and chassis upgrades.

VPN & identity

Site-to-site IPsec, AnyConnect remote access, MFA, RADIUS, and TACACS+.

Detection & troubleshooting

Splunk and QRadar, packet captures, flow analysis, and EDR.

Delivery

Proofs of concept, greenfield and cutover projects, STIG-aligned builds, and detailed procedures with backout plans.

Get in touch   Back to home

NEWOpenClaw agentic assistant, coming soon Chase Away the Dark Clouds

Security that lets you see clearly, and sleep soundly.

ClearDay Systems helps small and mid-sized businesses with hands-on security response, Cisco security solutions, and practical compliance guidance, without the enterprise price tag or the jargon. We specialize in on-premise and hybrid environments, and we secure the cloud tools you already use.

Book a free consultation Explore services
Incident response support Cisco security solutions Gap analysis & risk assessments Built for SMBs
ClearDay Systems logo: a shield with a padlock rising over a sunrise
New · Coming soon

OpenClaw agentic assistant

AI assistants that can act on your behalf need careful setup. We're preparing a service to help small businesses deploy them with sensible access controls and oversight.

Installation & setupSimple and custom tasksTraining you on your new assistantHardened on-premise firewall planBackup, upgrades & patchingOngoing support

Ask about it

Why ClearDay

Straight answers. Right-sized protection.

On-premise and hybrid first

Your firewalls, servers, and data stay under your control. We design security for on-premise and hybrid setups, then extend it to cloud apps like ERP, accounting, and project tools.

Built for small business

You get real security expertise without hiring a full in-house team or buying tools you don't need.

Plain English

No fear tactics or acronym soup. We explain risks, options, and trade-offs so you can make informed decisions.

Tools and process together

Technology without policy leaves gaps, and policy without technology is just paper. We do both.

What we do

One partner for technology, operations, and compliance

Most small businesses juggle a vendor, an IT provider, and a consultant. We bring that expertise together so your tools, response plans, and policies actually line up.

Security Response

Hands-on security response

Business-hours alert review and incident response, so suspicious activity gets investigated and contained quickly.

  • Alert review & triage (business hours)
  • Incident investigation & root-cause analysis
  • Vulnerability & patch management
  • Email, endpoint, and identity protection solutions
  • Incident response support
Cisco Security Solutions

The right Cisco tools, deployed right

We help you choose, design, deploy, and support Cisco security solutions sized to your environment and budget.

  • Needs-based solution design
  • Licensing guidance
  • Installation & configuration
  • Prepaid support hours for ongoing help and tuning
  • Hands-on deployment and handover
Support & Troubleshooting

Help when something stops working

When a tunnel drops or a firewall change breaks something, we work the problem with you until it's back, using your prepaid support hours.

  • Site-to-site and remote access VPN troubleshooting
  • Firewall traffic, NAT, and rule problems
  • Certificate problems
  • Cloud and hybrid connectivity issues
  • Performance and packet-loss investigation
GRC Advisory

Governance, risk & compliance

Plain-English guidance to find your gaps, prioritize fixes, and prove your security posture to customers and auditors.

  • Security & compliance gap analysis
  • Risk assessments & risk registers
  • Policy and procedure development
  • Audit readiness support
  • Virtual CISO advisory

See the full services matrix

How we work

A simple path from uncertain to secure

Assess

We learn your business, map your assets, and run a gap analysis to establish a baseline.

Plan

You get a prioritized roadmap with realistic costs, so the biggest risks get fixed first.

Protect

We deploy and configure the right tools, Cisco and otherwise, and align policies to match.

Respond & improve

Alert review during business hours, incident support when something happens, and periodic reassessment as you grow.

Security engineering

Hands-on engineering, not just advice

Good security lives in the details: rule bases, failover, VPNs, and logs. We design, build, and fix the infrastructure that holds your defenses up.

Firewall deployment & upgrades

Greenfield builds, cutovers, and software upgrades for next-generation firewalls and their management platforms, with documented method-of-procedure and backout plans.

Migrations

Moving off legacy or end-of-life firewalls, including rule translation, testing recommendations, and a safe cutover.

High availability & health checks

HA and clustering design, failover testing, and configuration and health reviews that find problems before outages do.

VPN & remote access

Site-to-site and remote-access VPN design with multifactor authentication, built to scale from a handful of users to thousands.

Policy & rule-base review

Clean up bloated, overly permissive, or undocumented firewall policies. Tighten access control and NAT while keeping the business running.

Troubleshooting & log analysis

Packet captures, flow tracing, and SIEM correlation to find the real cause of production issues and suspicious activity.

Hardening and policy work can be aligned with NIST, HIPAA, and PCI DSS requirements, and with DISA STIG guidance for government-adjacent environments.

Cisco security portfolio

Enterprise-grade protection, right-sized

Cisco's security platform covers the network, identity, endpoint, and cloud. We help you pick only what you need and make it all work together.

Secure Firewall

Next-generation firewall and threat defense for your network edge and data center.

Duo

Multi-factor authentication and device trust to stop credential-based attacks.

Secure Access

Cloud-delivered DNS security, secure web gateway, and zero trust access.

Secure Endpoint

Prevention, detection, and response on laptops, desktops, and servers.

Cisco XDR

Correlated detection and response across network, endpoint, email, and cloud.

Zero Trust

Verify every user, device, and connection. Duo, Secure Access, and segmentation work together to enforce least-privilege access.

Secure Email

Advanced protection against phishing, business email compromise, and malware.

Splunk

Security analytics and observability for visibility into what's happening.

Cisco, Duo, Splunk, and related product names are trademarks of Cisco Systems, Inc. and/or its affiliates.

Support & troubleshooting

When something stops working, we help you bring it back

Not the initial setup, the "it was working yesterday" call. Buy a block of prepaid hours and use it whenever a problem comes up, for as long as it takes to get to the cause.

Site-to-site VPN tunnels

Negotiation and handshake failures, mismatched settings, and tunnels that dropped. We work through it with the people on the other end until both sides talk again.

Remote access VPN

Users who can't connect, authenticate, or get decent performance once they do.

Firewalls

Blocked traffic, NAT and rule problems, and things that broke after a change.

Certificates

Expired or mismatched certificates that quietly break VPN and TLS connections.

Cloud and hybrid links

Connectivity problems between your network and AWS or Azure.

Performance

Latency and packet-loss investigation, from the first symptom to the root cause.

Support is delivered during business hours. Work outside business hours, including emergencies, is available by arrangement at a premium rate.

See what support covers

Cloud security management

Your cloud, set up right and kept that way

Cloud accounts are quick to open and easy to leave exposed. We help you build and review AWS and Azure environments with sensible identity, network, and access controls, then keep them tuned as you grow.

Secure foundations

Account and subscription structure, least-privilege access, and a configuration review that finds what was left open.

Identity & MFA

Multi-factor authentication and sensible access rules, so one stolen password isn't the end of the story.

Hybrid connectivity

Secure links between your own network and the cloud, designed so your on-premise firewalls and your cloud work together.

On AWS, that includes

Identity & access management (IAM)Encryption key management (KMS)Hardware security modules (CloudHSM)Web application firewall (WAF)

See the cloud services

Governance, risk & compliance

Know where you stand before an auditor, insurer, or customer asks

A gap analysis is the fastest way to turn "are we compliant?" into a clear, prioritized roadmap.

NIST CSF 2.0NIST SP 800-37 (RMF)NIST SP 800-53NIST SP 800-207 (Zero Trust)CIS ControlsHIPAASOC 2PCI DSSCyber insurance readiness

Gap analysis

We compare your current controls against your chosen framework and deliver a findings report with severity ratings and a remediation roadmap.

Risk assessment

Identify assets, threats, and likelihood-versus-impact so you spend your budget where it reduces the most risk.

Policies & vCISO

Right-sized policies, incident response plans, vendor risk reviews, and ongoing executive-level security leadership for a fraction of the cost of a full-time hire.

Zero trust access

Verify every user, device, and connection

A traditional VPN trusts anyone who gets in. Zero trust gives each person access to only the applications they need, and only from a device you can vouch for. We design and deploy it with Zscaler or with Cisco's Duo and Secure Access, whichever fits you.

Plan the move

A zero trust design and roadmap aligned with NIST SP 800-207, so you know what changes first and what can wait.

Deploy it

Zscaler internet and private access, or Cisco's Duo and Secure Access, configured around how your people actually work.

Retire the VPN

Move remote access from broad VPN tunnels to application-level access, one step at a time and without a big-bang cutover.

See the zero trust services

FAQ

Common questions

What size businesses do you work with?

We focus on small and mid-sized organizations that need strong security but don't have a dedicated security team.

Do I have to buy Cisco products to work with you?

No. Our security response and GRC services stand on their own. We recommend Cisco where it's the best fit, and we'll tell you when it isn't.

Do you offer 24/7 monitoring?

Not at this time. ClearDay Systems provides alert review and incident response during business hours. If your business needs round-the-clock coverage, we will tell you plainly and can help you evaluate a 24/7 provider or tooling that fits.

What does a gap analysis involve?

We review your policies, configurations, and practices against a framework such as NIST CSF, HIPAA, or CMMC, then deliver a report that shows what's missing, how serious it is, and how to fix it in priority order.

Where do I buy Cisco products?

Cisco products are purchased through Cisco's authorized partners. We help you decide what you actually need, design and deploy it, and support it afterward.

Can you help us prepare for cyber insurance or a customer security questionnaire?

Yes. Insurers and customers increasingly ask for MFA, endpoint protection, backups, and documented policies. We help you close those gaps and answer questionnaires accurately.

Do you support cloud services, or only on-premise?

Our focus is on-premise and hybrid environments, where you keep control of your own infrastructure. We also secure the connections to cloud apps you already use, such as accounting, ERP, project management, and sales tools.

How do we get started?

Send us a note below for a free, no-obligation consultation. We'll talk through your environment and recommend a sensible first step.

Get in touch

Let's talk about your security goals

Tell us a bit about your business and what you're trying to achieve. We'll reply within one business day with a suggested next step.

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Location: Colorado Springs, CO

LinkedIn: ClearDay Systems

Send us a message

Use our secure contact form and we'll reply within one business day. Your email address is only used to reply to you.

Open the contact form

Prefer email? This email address is being protected from spambots. You need JavaScript enabled to view it.