下载PDF
Low Cost Airline Enhances Cloud Security with Check Point
技术
- 网络安全和隐私 - 云安全
- 基础设施即服务 (IaaS) - 虚拟私有云
适用行业
- 玻璃
- 国家安全与国防
适用功能
- 产品研发
- 质量保证
用例
- 库存管理
- 篡改检测
服务
- 云规划/设计/实施服务
- 网络安全服务
挑战
这家美国低成本航空公司在 120 个地点运营定期航班和包机航班，在保护其虚拟桌面基础设施环境方面面临着重大挑战。该航空公司此前曾为员工提供笔记本电脑，并在每个地点部署了物理防火墙。然而，由于流量是通过公共网络共享的，一个机场的任何安全或网络问题都可能影响所有地点。基础设施不仅成本高昂，而且难以持续管理。随着威胁形势的加剧，该航空公司的团队希望简化其网络设计，在其发布中引入更多自动化，并提高其防止日益虚拟化的基础设施受到攻击的能力。该航空公司选择在其数据中心部署 VMware NSX，并实施通过互联网链接向所有机场交付的虚拟桌面基础架构 (VDI)。此举旨在简化网络管理，提供更大的敏捷性，并使团队能够使用针对每个分段的特定策略对流量进行微分段，以实现更高的弹性。
关于客户
该客户是一家美国低成本航空公司，在 120 个地点运营定期航班和包机航班。该航空公司专注于提供价格实惠的航空旅行，同时还提供酒店客房和租车等相关产品。该航空公司拥有 85 架飞机和 350 条横跨美国的定期航线，从 120 个机场起飞。在所有这些机场中，该航空公司的 IT 和信息安全团队负责管理预订和航班时刻表等关键业务系统的网络流量。该航空公司还开发了许多自己的内部应用程序和平台，DevOps 团队目前正在开发新的内部飞行系统应用程序。
解决方案
为了保护这种动态环境，该航空公司选择了适用于 VMware NSX 的 Check Point CloudGuard。 Check Point Infinity 使用统一的威胁情报和开放接口来保护航空公司的环境免受针对性攻击。借助 Check Point R80.10 安全管理，该团队将所有网络环境的安全管理整合到单一管理平台中。适用于 VMware NSX 的 Check Point CloudGuard 提供多层防御态势，以保护 VMware 部署的数据中心内的东西向流量。 CloudGuard 在虚拟机管理程序级别和虚拟机之间透明地加强安全性，自动隔离受感染的计算机以进行修复，并提供对所有虚拟网络流量趋势和威胁的全面可见性。当该航空公司部署适用于 VMware NSX 的 Check Point CloudGuard 来保护其 VDI 环境时，Check Point SandBlast 网络保护已扩展到新的基础设施。 VDI 环境的微分段现在使团队能够将任何影响服务的问题限制在一个机场。他们现在可以根据 Check Point CloudGuard 和 R80.10 管理平台的微权限进行一致的微分段。
运营影响
数量效益
相关案例.
Case Study
Data Capture for Afghanistan Forces
Electronic equipments on the field of Afghanistan provided information on the status of the vehicle and to identify potential threats surrounding it to the British Force. The monitoring and interpretation of this data requires robust and sophisticated digitization for data capture and communication.
.png)
Case Study
Discrete Manufacturing Industries (Fiberglass Pipe)
The implementation of ERP software in a Discrete Manufacturing organization needs to be strategic, irrespective of its size and capacity. The client had already implemented an ERP system which fulfilled their requirements but was not efficient enough. Efficiency here meant Synchronized Planning, Updating and Multisite Planning. Planning at client’s place was done outside the ERP system. Lack of proper synchronization to the ERP system paved way to huge delays in the changes getting updated in the system. These delays caused disruption in achieving delivery schedules. Multisite Planning is a solution to an organization which has multiple production units (may or may not be geographically separated) and thus needs planning across these units to synchronize production activities within them. The client also has multiple factories and hence Production Planning control is very essential in their case. Since Multisite planning was not possible with Baan ERP system, this was another bottleneck for the client.
Case Study
Major Aerospace Company Automates Asset Management
The O&M division of an aerospace and global security company was using spreadsheets to manually track more than 3,000 assets assigned to students and staff. Maintaining audit trails for this high volume of equipment became increasingly time-consuming and challenging. The chore involved knowing precisely what equipment was on hand, what had been issued, its location and the name of the custodial owner of each item. Every aspect of this task was carried owner of each item. Every aspect of this task was carried out by individuals with spreadsheets. Manually documenting the full lifecycle of each asset added to the burden. This included tracking maintenance requirements and records, incidents and damages, repairs, calibrations, depreciation, and end-of-life data.
Case Study
Securing a Large Data Center in the EMEA Region: An IoT Case Study
A leading data-center operator in the EMEA region, with multiple facilities spanning over 25,000 square meters, faced significant security challenges. The operator experienced interruptions in their internal IT network due to unsupervised work of third-party technicians. Despite having a high-end building control system that provided 24x7 monitoring and control to all the building’s infrastructure, the data center was vulnerable from a cyber perspective as it was connected to the IT network infrastructure. The operator launched an urgent OT cyber security project that included both IT-OT network segmentation and OT network asset mapping and anomaly detection. The main objectives were to harden the security of the server systems, secure the facility’s power supply and server cooling system, strengthen the segmentation between building and operational systems, create a visual OT network map, and set up a system for presenting supply-chain attacks that may threaten the data center through equipment vendors’ maintenance activities.
Case Study
Enhancing Security Precision with IoT: A Case Study of Guardsman Group
Guardsman Group, a leading security company in the Caribbean, faced a significant challenge in maintaining the security of its digital infrastructure. The company provides security equipment, personnel, and systems for various businesses across the region. However, one of its offices experienced a security incident that affected all communications at that location. The existing security tools were not sufficient to provide the necessary protection, and it took hours to identify the source of the issue. This incident highlighted the need for a dynamic solution that could proactively identify threats. The company's primary concern was any disruption to its business, as it manages a significant portion of Jamaica's money and cannot afford for its operations to go down.
Case Study
Asia Airfreight Terminal Enhances Operational Efficiency with CommScope's RUCKUS Solutions
Asia Airfreight Terminal (AAT), a leading cargo handling company based out of Hong Kong International Airport, was facing challenges with its Wi-Fi network, which was critical for the functioning of its automated Material Handling System (MHS) within the warehouse. Any interference or lost signals could directly impact their operational efficiency. AAT also had separate networks for their office and CCTV cameras, which made the job of their data center challenging. The company was in search of a Wi-Fi network configuration that could streamline their networks and reduce its network management workload. AAT was already running on equipment from a competing vendor, and the new solution needed to prove its worth in scalability and reliability.
