RSS
Логотип
Баннер в шапке 1
Баннер в шапке 2
Project

Russian Railways ordered large projects for import substitution of software from Astra and Positive Technologies

Customers: Russian Railways (RZD)

Moscow; Transport



Project date: 2024/01

Russian Railways ordered large projects for import substitution of software from Astra and Positive Technologies. They became known in early January 2024.

According to CNews with reference to the roadmap "New System-Wide Software," Astra will develop a directory service management and centralized administration system for Russian Railways. The project worth 499 million rubles assumes:

  • Integration with mail and PKi server
  • development of a mechanism for end-to-end authorization in the systems of organizations and two-factor authentication;
  • development of a mechanism for synchronizing accounts with MS AD (Microsoft Active Directory);
  • finalizing the mechanism for working with group policies;
  • Developing a tool for experienced administrators
  • Create new Group Policy settings
  • Development of a policy migration mechanism from MS AD
  • Develop new group policy settings development of a mechanism for bilateral trust relations with MS AD and FreeIPA and support for the MS AD domain forest.

Russian Railways ordered large projects for import substitution of software from Astra and Positive Technologies

As for the Positive Technologies project, it involves the development of the following functions:

  • intercept/collect network traffic at high speed;
  • Basic protocol support (BGP, OSPF, etc.)
  • classification, as well as signatures and definitions of each type of protocol currently relevant;
  • MITM disconnect IPS/IDS through the prism of vendor expertise;
  • proactive impact on customer infrastructure to improve security settings.

At the first stage, the contractor will have to establish communication between branches, regions, data centers, settings for routing rules, firewall data between them will be made. In the second phase of the project, perimeter protection and perimeter firewall shall be provided. As part of the third stage, traffic processing will be accelerated to HW levels.[1]

Notes