Zero Trust · Infrastruktura · Managed IT

Siguran pristup. Stabilni sustavi.

Secure access. Stable systems.

Kick IT projektira, uvodi i održava IT sustave za tvrtke kojima su sigurnost, dostupnost i usklađenost svakodnevni zahtjev. Iza svakog projekta stoji više od 20 godina rada u financijskom sektoru, industriji i high-tech okruženju.

Kick IT designs, deploys and runs IT systems for organisations where security, availability and compliance are everyday requirements. Every project draws on more than 20 years in finance, manufacturing and high-tech.

ztna · access decisioneu-central
requesta.horvat → erp.internal:443
identity✓ Entra ID · MFA
device✓ posture compliant · SES
context✓ HR · 09:41 · known location
inspect✓ DLP · threat inspection
policyALLOW app-level, no network access
20+godina u enterprise IT-uyears in enterprise IT
Broadcom Knightcertificirani stručnjak za ZTNAcertified ZTNA specialist
ISO 27001 · TISAXiskustvo u uvođenjuimplementation experience
100+javnih predavanjapublic talks
KompetencijeExpertise

Od arhitekture do svakodnevnog održavanja

From architecture to day-to-day operations

Radimo na cijelom životnom ciklusu sustava: procjena, dizajn, implementacija, održavanje i, kad dođe vrijeme, kontrolirano gašenje. Isti ljudi koji dizajniraju rješenje ga i uvode.

We cover the whole system lifecycle: assessment, design, implementation, operations and, when the time comes, controlled decommissioning. The people who design the solution also deliver it.

SSE / ZTNA

Zero Trust i siguran pristup

Zero Trust and secure access

Zamjena VPN-a pristupom na razini aplikacije. Provjera identiteta, uređaja i konteksta prije svake sesije, uz DLP i inspekciju prometa.

Replacing VPN with application-level access. Identity, device and context are checked before every session, with DLP and traffic inspection.

  • Symantec ZTNA
  • Cloud SWG
  • DLP
  • Email Security.cloud
ENDPOINT

Uređaji i service desk

Endpoints and service desk

Zaštita i upravljanje Windows i Apple uređajima: distribucija softvera, patchiranje i praćenje licenci. Uz to postavljamo service desk s katalogom usluga, SLA pravilima i bazom znanja.

Protection and management for Windows and Apple devices: software distribution, patching and licence tracking. We also set up the service desk, with a service catalogue, SLA rules and a knowledge base.

  • Symantec SES
  • ITMS 8.8
  • Jamf Pro
  • ManageEngine ServiceDesk Plus
  • Symantec CBX
NETWORK

Mreže i vatrozidi

Networks and firewalls

Dizajn i sigurnosni pregled mreža, segmentacija, zone-based politike, routing i siguran udaljeni pristup dobavljača.

Network design and security reviews, segmentation, zone-based policies, routing and secure vendor remote access.

  • Palo Alto
  • Fortinet
  • MikroTik
  • UniFi
  • BGP
COMPUTE / STORAGE

Virtualizacija, kontejneri i pohrana

Virtualisation, containers and storage

Virtualizacijske platforme, Docker kontejneri za aplikacije i interne servise, serveri i enterprise storage: od dijagnostike i zamjene diskova do reinstalacije cijelih klastera.

Virtualisation platforms, Docker containers for applications and internal services, servers and enterprise storage, from diagnostics and disk replacement to full cluster reimaging.

  • VMware ESXi
  • Docker
  • Dell PowerEdge
  • PowerScale / Isilon
  • Synology
IDENTITY / M365

Microsoft 365 i identitet

Microsoft 365 and identity

Hibridni identitet, upravljanje tenantom, sigurnost e-pošte (SPF, DKIM, DMARC) i SQL Server okruženja.

Hybrid identity, tenant administration, email security (SPF, DKIM, DMARC) and SQL Server environments.

  • Entra ID
  • Entra Connect
  • Exchange Online
  • SQL Server
CLOUD / COMPLIANCE

Privatni cloud i usklađenost

Private cloud and compliance

Privatni cloud s podacima u Hrvatskoj, managed IT za manje timove te sustavi i dokumentacija spremni za reviziju.

Private cloud with data kept in Croatia, managed IT for smaller teams, and systems and documentation ready for audit.

  • Nextcloud
  • ISO 27001
  • TISAX
ČlanciArticles

Pišemo o tehnologiji s kojom radimo

We write about the technology we work with

Objašnjenja, iskustva s terena i novosti iz Broadcom/Symantec svijeta i šire, bez marketinškog šuma.

Explainers, field notes and news from the Broadcom/Symantec world and beyond, without the marketing noise.

ProjektiProjects

Što smo napravili

What we have delivered

Izbor nedavnih projekata. Klijente ne navodimo imenom, a detalje rado prođemo na sastanku.

A selection of recent work. We don't name clients; we are happy to go through details in a meeting.

Endpoint Državna institucijaPublic institution u produkcijiin production

Centralno upravljanje softverom i zakrpama

Central software and patch management

Symantec ITMS platforma uvedena u fazama i danas u produkciji. Svaka faza dala je upotrebljiv rezultat prije sljedeće.

A Symantec ITMS platform rolled out in phases and now in production. Each phase delivered a working result before the next one started.

  • SQL i ITMS serveri
  • Distribucija softvera: po politici, po zadatku i self-service portal
  • Patchiranje Microsoft OS-a, Microsoft aplikacija i aplikacija trećih strana
  • Praćenje iskorištenosti licenci za 10 aplikacija
  • SQL and ITMS servers
  • Software delivery: policy-based, task-based and self-service portal
  • Patching for Microsoft OS, Microsoft applications and third-party software
  • Licence usage tracking for 10 applications
Symantec ITMSSQL ServerPatch Management
InfrastrukturaInfrastructure Tehnološka tvrtka u međunarodnom vlasništvuInternationally owned tech company dugoročno održavanjelong-term operations

Cijeli IT sustav, od nule do svakodnevnog rada

An entire IT estate, from zero to daily operations

Izgradili smo infrastrukturu na više lokacija u Hrvatskoj i Njemačkoj i preuzeli njezino dugoročno održavanje. Pristup aplikacijama ide isključivo kroz ZTNA.

We built infrastructure across several sites in Croatia and Germany and took over its long-term operation. Application access runs entirely through ZTNA.

  • Više od 130 aplikacija objavljeno kroz Symantec ZTNA, bez klasičnog VPN-a
  • VMware virtualizacija na Dell storageu, oko 40 virtualnih poslužitelja
  • Palo Alto vatrozid i Microsoft 365 za dvije zemlje
  • 130+ applications published through Symantec ZTNA, with no traditional VPN
  • VMware on Dell storage, around 40 virtual servers
  • Palo Alto firewall and Microsoft 365 across two countries
Symantec ZTNAVMware ESXiDellPalo AltoM365
Endpoint Srednja tvrtka, ~50 uređajaMid-sized company, ~50 devices završenocompleted

ITMS na suvremenoj platformi

ITMS on a current platform

Nova instalacija ITMS 8.8 na Windows Server 2025 i SQL Server 2022, sa servisnim računima bez lozinki (gMSA), backupom i politikama nadzora.

A fresh ITMS 8.8 install on Windows Server 2025 and SQL Server 2022, with passwordless service accounts (gMSA), backup and monitoring policies.

ITMS 8.8SQL Server 2022gMSA
MrežeNetworks Više klijenataSeveral clients završenocompleted

Sigurnosni pregledi mreža i vatrozida

Network and firewall security reviews

Pregled MikroTik routera i SES vatrozidnih politika. Pronašli smo nezaštićeni input chain, nesigurne upravljačke servise (Telnet, HTTP, SNMP) te propuste kod IPv6 i DoS zaštite, i zatvorili ih.

Reviews of MikroTik routers and SES firewall policies. We found an unprotected input chain, insecure management services (Telnet, HTTP, SNMP) and gaps in IPv6 and DoS protection, and closed them.

MikroTik CCRSymantec SESUniFi ZBF
MrežeNetworks Ugostiteljski objektHospitality venue završenocompleted

Pristup dobavljača bez javne IP adrese

Vendor access without a public IP

Lokacija na satelitskom internetu (CGNAT) bez mogućnosti otvaranja portova. Dobavljač opreme dobio je siguran tunel samo do svog sustava, bez pristupa ostatku mreže.

A site on satellite internet (CGNAT) with no way to open ports. The equipment vendor got a secure tunnel to its own system only, with no access to the rest of the network.

Cloudflare TunnelStarlink
RazvojDevelopment Interni alatIn-house tool u upotrebiin use

Nadzorna ploča prijetnji za više klijenata

Multi-client threat dashboard

Vlastiti alat koji preko API-ja povlači detekcije iz Symantec SES konzola svih klijenata na jedan pregled. Podaci ostaju na EU endpointu.

Our own tool that pulls detections from every client's Symantec SES console into one view over the API. Data stays on the EU endpoint.

SES ICDm APIOAuth2JavaScript
Način radaHow we work

Četiri koraka, jedan odgovorni partner

Four steps, one accountable partner

Svaka faza završava dokumentiranim rezultatom, pa uvijek znate gdje je projekt i što ste dobili.

Every phase ends with a documented result, so you always know where the project stands and what you have.

Procjena

Assess

Inventura sustava, rizika i ovisnosti. Dobivate jasnu sliku stanja.

An inventory of systems, risks and dependencies. You get a clear picture.

Dizajn

Design

Arhitektura po mjeri poslovanja, s procjenom napora po fazama.

Architecture fitted to the business, with effort estimated per phase.

Implementacija

Implement

Planirano uvođenje uz minimalan utjecaj na rad i dokumentacija spremna za reviziju.

A planned rollout with minimal disruption, and documentation ready for audit.

Održavanje

Operate

Nadzor, zakrpe i podrška uz fiksni mjesečni paušal.

Monitoring, patching and support for a fixed monthly fee.

TehnologijeTechnology

Proizvođači s kojima radimo

Vendors we work with

Rješenja isporučujemo i kao partner za prodaju i kao implementator, pa jedan tim odgovara i za licencu i za rad sustava.

We act as both reseller and implementer, so one team is accountable for the licence and for the running system.

Broadcom · SymantecZTNA, SWG, DLP, SES, CBX, ITMS
Palo Alto NetworksNGFW, PAN-OS
SynologyNAS, Synology Drive, MailPlus
Dell TechnologiesPowerEdge, PowerScale
VMwareESXi, vSphere
MicrosoftM365, Entra ID, SQL
MikroTikRouterOS, CCR
JamfmacOS, iOS, iPadOS
ManageEngineServiceDesk Plus
Ubiquiti UniFiWi-Fi, preklopniciWi-Fi, switching
O namaAbout

Tko stoji iza Kick IT-a

Who is behind Kick IT

Kick IT je osnovao Dubravko, IT stručnjak s više od dvadeset godina iskustva u vođenju IT-a u reguliranim i poslovno kritičnim okruženjima.

Kick IT was founded by Dubravko, an IT professional with more than twenty years of leading IT in regulated, business-critical environments.

Prije Kick IT-a bio je IT direktor u Erste osiguranju, IT Manager u Rimac Automobilima, tehnološki specijalist za Broadcom u MBCOM Technologies te IT direktor u Vindiji. Kao certificirani Broadcom Knight za ZTNA specijaliziran je za Zero Trust arhitekture koje štite bez da korisnicima otežavaju rad. Kick IT spaja to iskustvo s brzinom male, fokusirane tvrtke.

Before Kick IT he was IT Director at Erste Insurance, IT Manager at Rimac Automobili, Broadcom Technology Specialist at MBCOM Technologies, and IT Director at Vindija. As a certified Broadcom Knight for ZTNA, he focuses on Zero Trust architectures that protect without getting in users' way. Kick IT combines that experience with the speed of a small, focused firm.

IskustvoExperience
  • Erste osiguranje (VIG)osiguranje i financijeinsurance and financeIT direktorIT Director
  • Rimac Automobiliautomobilska high-tech industrijaautomotive high-techIT Manager
  • MBCOM Technologiesdistribucija tehnologijetechnology distributionTechnology Specialist, Broadcom
  • Vindijaprehrambena industrijafood industryIT direktorIT Director
  • Kick IT d.o.o.IT konzaltingIT consultancyosnivač i direktorFounder and Director
KontaktContact

Imate projekt ili sustav koji treba pregled?

Have a project, or a system that needs a review?

Javite se i dogovorit ćemo kratak razgovor o vašem okruženju i ciljevima.

Get in touch and we will set up a short call about your environment and goals.

E-mailinfo@kickit.hr
TelefonPhone+385 99 600 20 62
AdresaAddressRakitska cesta 8, Rakitje