The ministry of information technologies, communication and digital development of Chelyabinsk region will protect more than 600 websites using PT Application Firewall

2020: Implementation of PT Application Firewall

On January 13, 2021 IT Enigma Group and global service IT-distributor Axoft announced implementation firewall of level of web applications PT Application Firewall of century Ministry of information technologies, communication and digital development of Chelyabinsk region. According to the results of the project the customer will be able to ensure safety more than 600 web resources placed in DPC Governments of the region, to minimize number of the incidents happening to websites of authorities and organizations subordinated to them.

In Chelyabinsk region departmental information systems and more than 600 websites of authorities, many of which have the high social importance, are placed in DPC of the Government of the region. Before Management of information security of organization there was a task to ensure their safety and to minimize number of the incidents occurring with web resources.

As the customer – public institution, among criteria when choosing the solution there were an existence of the certified FSTEC of the version and domestic origin of a product. Besides, a system had to differ in the high performance and a possibility of a clustering.

The IT Enigma company, system integrator of complex information security became the winner of an auction on delivery of the solution. The Axoft company acted as the IT distributor of the project. As a result of purchase execution to optimum answering all requests of the customer there was a firewall of level of applications (Web Application Firewall, WAF) from Positive Technologies ― PT Application Firewall company (PT AF). Implementing solution is implemented by IT specialists of the customer and technical experts of IT Enigma Group.

The implementation project consisted of several stages: during the solution, the first for the purpose of working off, the cluster of PT Application Firewall from two nodes was built. For this purpose specialists of the customer prepared the virtual machine with the website on which testing was held. On the next stage, after check of operability of the solution, the "fighting" cluster of PT AF from four nodes on which, according to the approved diagram, transfer of websites of executive authorities and local government authorities of Chelyabinsk region is performed was built.

The main result of implementation of the firewall of level of applications – security as for already existing, and created web resources of executive authorities and local government authorities of Chelyabinsk region. In further plans of the customer – carrying out piloting of add-on modules according to the analysis of the source code of web applications, finding of vulnerabilities and virtual patching (P-Code) of the module of ensuring antivirus protection (M-Scan).

Information security support is one of the most responsible areas of work of our ministry as in the state information systems storage and personal data processing of citizens is conducted. For data protection we use only the checked domestic developments conforming to all requirements set by the Russian legislation, – the First Deputy Minister of information technologies, communication and digital development of Chelyabinsk region Vasily Kokoryukin comments.

This project first of all was interesting by the complexity and the importance. Large-scale and diverse infrastructure of the customer, huge number of web resources, need to carry out works without stopping of services – all these factors gave specificity to the performed works, did the project extraordinary and interesting, – the technical director of IT Enigma Group Alexander Metalnikov notes.