Case Study: Private Non-stock Corporation

The Client:
A private non-stock corporation

Business Challenges:
The top management of the leading non-stock corporations in the Philippines decided to upgrade its current network infrastructure with the below challenges in mind:
Existing firewall reached its end of support (EoS) status and subscription has expired
Current network infrastructure offers a non-redundant design causing longer business down time during a hardware or link failure and also presents a high availability concern
Current network infrastructure does not have a dedicated application delivery controller (ADC) 
Current security defense does not have a dedicated solution to protect web services from threats 

What ICS Did:
ICS recommended a best of breed next generation firewall having a road map of at least 5 years before its end of support. These devices have a full suite of network protection such as URL filtering, Application control, Gateway anti-virus, IPS, DNS protection, and more. The company also proposed the use of a redundant network.

The Solution:

  • 2x FG-201F, 18 x GE RJ45, 8 x GE SFP slots, 4 x 10GE SFP+, 480GB onboard SSD
  • 2x Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, Web Filtering, Antispam Service, 24 x 7 Forticare)
  • 6x 1GE SFP SX transceiver module for all systems with SFP and SFP/SFP+ slots
  • 3x 10GE SFP+ transceiver module, short range for all systems with SFP+ and SFP/SFP+ slots
  • 2x Aruba 2930M 24G 1-slot switch
  • 2x HPE 3Y FC NBD Exch A 2930M 24G Swt SVC
  • 4x Aruba X371 12VDC 250W Power Supply
  • 2x Aruba 2930 2-port Stacking Module
  • 2x Aruba 3810M/2930M 4SFP+ MACsec Module
  • 2x Aruba 2920/2930M 0.5m Stacking Cable
  • 6x Aruba 1G SFP LC SX 500m MMF Transceiver
  • 1x LoadMaster LM-X15 hardware appliance with 16x 1GbE + 4x 10GbE ports, 32GB RAM, Redundant PSU, Redundant Disks
  • 1x 3 Year Enterprise Subscription for LoadMaster LM-X15. Includes new features and software updates, unlimited 24x7 Customer Support, In advance hardware replacement, Edge Security Pack(ESP) - Authorization, Authentication & Single Sign On, Kemp 360 Vision managed service for Application Monitoring & Preemptive Alerting, Kemp 360 Central Centralized Management and Orchestration software
  • 3x SFP+ SR Transceiver 10GBASE-SR 850NM UP TO 300m

Outcome:
The client is now equipped with 5 years of reliable and efficient operation in terms of network and security functionalities. With the Unified Threat Protection (UTP) license, internal and remote users are now protected from advanced malwares, bad URL domains, viruses from gateway levels, proxy avoidance applications, DDoS attacks, and Intrusions.