Montreal's Secure Voter Registration: A Case Study on Check Point VPN

技术

网络安全和隐私 - 应用安全
网络安全和隐私 - 端点安全

适用行业

城市与自治市
国家安全与国防

适用功能

物流运输
质量保证

用例

智慧城市运营
篡改检测

服务

测试与认证

挑战

蒙特利尔市面临着重大挑战，当时它需要与周边 28 个郊区合并，此举遭到了相当大的反对。这导致了只要有足够的选民登记参加公投，就可以通过公投推翻合并的承诺。为了促进这一过程，该市需要建立临时选民登记中心，这需要一个安全有效的系统来管理敏感的选民信息。市政府必须确保这些敏感数据的全面安全，为这些临时中心提供快速设置，并提供高效的安全管理。由于需要实时更新集中选民名单，减少纸张数量，并比之前收集纸质表格以供后续数据输入的手动过程节省时间，这进一步加剧了挑战。

关于客户

蒙特利尔市最初是 1600 年代中期的一个小型毛皮贸易定居点，现已发展到人口超过 180 万，成为加拿大魁北克省最大的城市。该市在一个由 25,000 名用户组成的网络上运行政府业务，该网络受到七个 Check Point FireWall-1 防火墙的保护。九百名用户远程工作，通过 VPN-1 Power 网关和 SecuRemote 客户端软件安全地访问城市网络。该市一直在寻找能够使政府运作更加高效和安全的新技术。

解决方案

为了加快公投进程，蒙特利尔市首次在选举场景中使用互联网上的虚拟专用网络 (VPN)。他们开设了 28 个临时中心，公民可以在那里登记参加公投。在这些办公室，集中选民名单通过 ADSL 连接到互联网进行实时更新。为了确保敏感选民信息的安全，使用无盘电脑来防止任何机密数据保留在临时位置。 Check Point UTM-1 Edge 设备用于创建安全的站点到站点 VPN，以将办公室与城市注册商连接起来。该市的安全顾问 GoSecure 推荐 UTM-1 Edge 作为此类快速、大规模和短期部署的最安全、最具成本效益的解决方案。这些设备在几分钟内即可完成设置，并提供最高级别的安全性，以保护敏感选民信息通过始终在线的 ADSL 连接的传输。

运营影响

The use of Check Point UTM-1 Edge appliances proved to be a successful solution under the high pressure of the demerger referendum. The appliances are now an established fixture in the City of Montreal’s election process. The security provided by the Edge devices was highly praised, as it incorporated Check Point FireWall-1 technology with encryption, instilling the highest confidence in Check Point security. The fast deployment of the devices was crucial under the time pressure for the referendum. The City was able to generate a certificate for each site, install them on the Edge appliances, and connect to the VPN-1 gateway already in use for remote access. The process was simple and efficient, with the total time from decision to citywide deployment taking only one week. The UTM-1 Edge appliances are centrally managed through the same SmartCenter console used to manage the City’s seven firewalls and its remote access VPNs, streamlining management and requiring very little extra effort from the security staff.

数量效益

The City of Montreal was able to set up 28 temporary voter registration centers quickly and efficiently.
The centralized voter list was updated live in real time, significantly reducing paper volume and saving time over the previous manual process.
The UTM-1 Edge appliances were set up in minutes, providing a rapid solution for a large-scale, short-term deployment.