Transcription
CASE STUDYFitas Flax Brazil, a well-knownmanufacturer of adhesives tapes andpacking materials, migrated its firewallsecurity from Microsoft TMG to SophosUTM for more comprehensive protection,better management and control, andgreater flexibility for remote users.Customer-at-a-GlanceFitas Flax Indústria e Comércio Ltda.BrazilIndustryManufacturingSophos SolutionsSophos UTM Software Appliance for250 users with FullGuard(Rio de Janeiro Factory)Sophos UTM Software Appliance for 25users with FullGuard (Manaus Factory)Sophos Access Points AP50 (3) and AP10(5) distributed company-wideSophos Remote Ethernet Device (RED50) –remote office in Rio de JaneiroSophos Remote Ethernet Device (RED10) –remote workers at fixed locationsSophos Endpoint Protection for 100 usersSophos Mobile Control for 30 usersFitas Flax Indústria e Comércio Ltda. A customer success story
Founded in 1992, Fitas Flax is a leading Brazilian manufacturer of adhesivetapes and other packing materials. The company is based in Rio de Janeirowith a separate manufacturing site in Manaus, Brazil in addition to anothersmaller remote office in Rio de Janeiro.“Sophos UTM makes iteasy for our employeesto use networkservices anywhereand at any time overa variety of links.Users benefit fromgreater productivityand an uncomplicatedprocess.”WILLIAM REDIGIT ManagerFitas Flax BrazilBusiness ChallengePreviously, Fitas Flax relied on MicrosoftForefront Threat Management Gateway(TMG) to provide firewall security for 100end users in Rio de Janeiro and another 25in Manaus. Fitas Flax needed the ability tocontrol multiple internet uplinks and reporton user activity, all on a very tight budget.With the announcement that Microsoft wouldno longer support TMG, Fitas Flax sought areplacement that could be more than a securefirewall. “In addition to firewall security, wealso needed better controls on Internet usageand improved protection for our network andusers,” explains William Redig, IT manager. “Itwas important that we had a firewall solutionthat could easily manage multiple internetuplinks, and that could efficiently interconnectall our locations.”With a reduced budget for security and a scaled-down IT staff,the company required a unified firewall solution that could beeasily managed. Fitas Flax also wanted to avoid the high cost ofInternet links for interconnecting the two factories. “Our limitedresources do not allow for the use of multiple point products,each with their own training requirements, or a solution thatwould require an on-site security expert. A solution thatcould be realistically utilized by our current resources wouldgenerate the most productivity – we have 2 IT guys supportingaround 150 endpoints in 3 physical locations and approximately30 smartphones or tablets, and 10 notebooks connectingdirectly to our network and services. Consequently, a securitysolution that could utilize our existing resources would allowour organization to take a proactive approach to security,”Redig remarks.Fitas Flax Indústria e Comércio Ltda. A customer success story
Technology SolutionsTo address these challenges, Fitas Flaxchose the software version of Sophos UnifiedThreat Management (UTM) with FullGuard,which includes the complete set of securitysubscriptions consisting of Network, Web,Email, Web Server, VPN, and Wireless.Through the centralized UTM interface,the company is able to manage two otherkey components of the firewall solution:Sophos Wireless Protection uses UTM asa wireless controller to centralize securityand manage users of the company’s threeWi-Fi networks. In addition, Sophos RemoteEthernet Device (RED) provides secureaccess from the company’s remote locationsto the LAN over a reliable VPN link and usingstandard ADSL uplinks.The main reasons for selecting Sophos were the RED devices,the easy-to-establish VPN, the intuitive dashboard, and theability to use and manage multiple internet links. Being able totest everything using existing hardware was also a huge benefitbecause Fitas Flax did not have to spend any money to test thesolution. ”With Sophos security, we found it much easier to getthe job done!” declares Redig.With Sophos UTM, Fitas Flax was able to create a set ofnetwork objects and user profiles based on the firewall rulesand policies in place from its previous TMG deployment –therefore reducing typo errors, while speeding deployment andeliminating re-work. “Deploying Sophos UTM was extremelysimple, and we didn’t have to change the way we managedour firewall security,” Redig notes. “Since we did not have tomanually re-create groups, add users, or maintain anothersubset of configuration objects, we were able to migrate ourFitas Flax Indústria e Comércio Ltda. A customer success storyfirewall almost immediately to UTM. Following the migration,the flexibility afforded by Sophos’ multiple configurationoptions enabled us to tweak and fine-tune the UTM toprovide the optimal protection for our users and networkassets. Available reports and online monitoring make it easyto discover configuration errors, look for inadequate useractivities, and observe the internet use practically in real time,being an enormous aid.”Business ResultFlexible and Secure Remote AccessLike many companies with distributedoperations, Fitas Flax has approximately 30smartphones or tablets and 10 notebooksand about 10 users needing access to thecorporate network via their laptops or mobiledevices from remote locations. The SophosUTM solutions have provided the idealsecurity platform for the company to improveconnectivity between the manufacturingplants and remote office, and to controlremote access via Wi-Fi or VPN.“Sophos UTM makes it easy for our employees to use networkservices anywhere and at any time over a variety of links.Our employees even have the ability to access our telephonesystem over VPN using VoIP clients on their smartphones,”Redig adds. “Users benefit from greater productivity andan uncomplicated process. As an organization we’re ableto protect the network by ensuring that employee accessis controlled by set policies and established user profiles.We were able to accomplish all these enhancements to ournetwork using our very small IT Staff and, on a daily basis,there is less work to do, while accomplishing far more.”
Business ResultCentralized Management and ControlSophos UTM provides a central dashboardfor Fitas Flax to control remote users’ accessto email and other internal applicationsusing reverse proxy. “Through Sophos UTM’sHTML5 VPN Portal, we’re able to configureeverything the remote users need and that canbe triggered from a single location – the UserPortal. Access to remote desktops, corporateweb-mail, security cameras, and terminalservers are all there, available via a singlemouse click and from a single location,” Redigexplains. “And with Sophos Wireless Protection,we have total control over how the network’sbeing accessed via Wi-Fi and by whom.”With Sophos’ centralized security management, the Fitas FlaxIT team is able to configure and troubleshoot each remotesite from headquarters with minimal involvement fromsatellite employees. “We definitely require some flexibility.We may need a remote employee to unplug and then re-pluga power adapter or to read display lights. Everything elsecan be configured by the IT staff from anywhere, using theUTM’s single Web-based admin interface. With Sophos this iseasy. With other solutions we previously used, we frequentlyhad to ask non-technical users to log on to routers, executecommands, and perform other procedures that were alwaysextremely time-consuming and complicated for the averageuser. Sophos provides us comprehensive security withsimplified deployment and management without placing anyburden on our users,” states Redig.Redig discloses that Sophos UTM’s reporting and onlinemonitoring capabilities have greatly increased the informationavailable to the IT team and Fitas Flax management. Thesystem automatically routes regular usage reports todepartment managers, removing the burden of controlling andmanaging user behavior from the IT group.The multipath rules in Sophos UTM make bandwidthmanagement effortless. By creating browsing groups linkedto MS Active Directory, Fitas Flax is able to determine whichFitas Flax Indústria e Comércio Ltda. A customer success storyInternet link will be used by a group of users or computers,and for what services. “If an Internet link is slow or not workingproperly, we simply have to select another WAN link and assignit to the rule,” Redig asserts. “We can also view, in real time, alltraffic going through the firewall to determine which servicesare using the most bandwidth. Viewing traffic in real time isdefinitely valuable to us.”Business ResultComprehensive Security and ScalableFirewall ProtectionFor Fitas Flax, Sophos UTM has proven to bean ideal replacement product for MicrosoftTMG. In fact, the capabilities of SophosUTM go far beyond the previous solutionthat Fitas Flax had in place. “The ability tosupport multiple WAN interfaces and tocontrol and protect our users’ Web usagewere our primary goals. With Sophos UTM’sWeb-based management interface, we arenow able to fully cover the security needs ofour growing infrastructure – in both size andcomplexity,” Redig concludes. “Additionally,Sophos is continually adding features to UTMand improving the UTM solution with eachnew release. There is no doubt that Sophosis helping us keep up to date with currentthreats. Most importantly, we’re able to accessthese new versions at no additional chargethrough a simple software upgrade, which iscompletely different from Microsoft.”Furthermore, Fitas Flax runs Sophos security on the company’sendpoints and mobile devices. With Sophos, Fitas Flax seesthe value of comprehensive security that can scale to thecompany’s business requirements. With remote users andinformation becoming increasingly more mobile, security thatfits the company’s needs are key. “Considering our satisfactionwith Sophos UTM, we decided to use additional Sophos
Fitas Flax Indústria e Comércio Ltda. A customer success story“With SophosUTM’s Web-basedmanagement interface,we are now able tofully cover the securityneeds of our growinginfrastructure.”WILLIAM REDIGIT Managersolutions with Endpoint Protection and Mobile Control. Oncewe deploy version 9.2 of Sophos UTM, we will be able tocontrol web security on smartphones and endpoints usingthe same Web-based admin console, keeping users protectedeverywhere, and with every device,” conveys Redig. The easeof management with increased functionality only enforcesthe fact that Fitas Flax and Sophos are a natural fit.In summary, Fitas Flax knows Sophos is the ideal solutionfor the needs of the organization. To outline all the effects,Redig states, “With Sophos UTM, we can now say thatour network traffic and connectivity is completely undercontrol. Our employees can use the Internet safely andworkstation deployments are more sustainable because theyare completely protected from Web- or email-transmittedthreats. Sophos UTM has had a significant and positiveimpact on our organization.”Fitas Flax BrazilSee how we can protect yourorganization with a free 30-day trial.Visit www.sophos.com/free-trialsUnited Kingdom and Worldwide SalesTel: 44 (0)8447 671131Email: sales@sophos.comNorth American SalesToll Free: 1-866-866-2802Email: nasales@sophos.comOxford, UK Boston, USA Copyright 2014. Sophos Ltd. All rights reserved.All trademarks are the property of their respective owners.14.04.RP.cs.simpleAustralia and New Zealand SalesTel: 61 2 9409 9100Email: sales@sophos.com.auAsia SalesTel: 65 62244168Email: salesasia@sophos.com
(TMG) to provide firewall security for 100 end users in Rio de Janeiro and another 25 in Manaus. Fitas Flax needed the ability to control multiple internet uplinks and report on user activity, all on a very tight budget. With the announcement that Microsoft would no longer support TMG, Fitas Flax sought a replacement that could be more than a .
