Shriram Group, an Indian asset financing company, has deployed a number of Fortinet's solutions in an effort to secure its data centre and 400 branch offices across India.
As many of Shriram Group's branches are in cities where Multiprotocol Label Switching (MPLS)/ Virtual Private Network (VPN) connectivity is not feasible, it is difficult to secure and control applications at those branches. The huge data load passed onto the gateway firewall also resulted in low throughputs from the data centre.
To reduce network and application latency, separate firewalls were provided for the Shriram Group's internet gateway and MPLS connection. This was done through the deployment of a FortiGate-3040B cluster at the data center; FortiGate-1000A, FortiGate-600C, FortiGate-310B and FortiGate-300C appliances at the corporate offices; and more than 400 FortiGate-60C and FortiGate-40C boxes at the branch offices.
All the routers at the branches were replaced by a security architecture that was deployed as a two-layer firewall with data centre zoning. This helped Shriram Group's branches provide secure network access and internet connectivity via 3G modems plugged into the USB ports of the FortiGate appliances.
To distribute loads across multiple internet service provider connections and increase the firewall throughput, the Shriram Group is using the FortiGate 3040B. The FortiAnalyzer-1000C, on the other hand, centrally performs network analysis and reports on network anomalies.
In terms of security, the FortiManager virtual appliance helped the Shriram Group to centralise policy management and control the endpoints via the FortiClient software installed at the branch offices. The group also used FortiClient's web filtering and application control features to restrict internet and web-based application access at a granular level.
Sign up for Computerworld eNewsletters.