The system operator of the UES of Russia entrusted network protection to UserGate solutions

2025: Implementation of UserGate NGFW

The company UserGate and the system integrator "Technology Trajectory" have completed one of the stages of the project for the introduction of their next generation firewall (UserGate NGFW) in the joint-stock company "System Operator of the Unified Energy System." Based on UserGate solutions, a security system for the network perimeter of the central office and dozens of customer branches has been developed and put into commercial operation. UserGate announced this on April 25, 2025.

To protect its extensive extensive information infrastructure, CO UES used a productive firewall system from one of its foreign suppliers. The sanctions company made it impossible to use this equipment, both due to the termination of its support, and according to the requirements of legislation obliging companies to use solutions exclusively from domestic manufacturers.

The customer had very strict requirements for import-independent NGFWs. The solution not only had to be developed by a Russian company and had the necessary FSTEC certification - also important conditions were the reliable operation of the hardware platform, stable operation and technical support 24/7. This requirement is due to the need to ensure continuous protection of the company's infrastructure in more than 50 branches of the joint-stock company. The choice in favor of a solution from UserGate among other domestic solutions of the NGFW class was due to the additional advantages of the solution: the presence of a logical and simple user interface, the ability to organize centralized device management, the ability to train administrators in authorized centers according to manufacturer-certified programs.

The creation of a system for protecting the network perimeter of the UES SO is a complex complex project. We had to examine the infrastructures of the executive apparatus and the entire branch network of the customer, develop a project that takes into account all their features, create a centralized control system and carry out a transition from one hardware platform to another without changing the topology, that is, as seamlessly as possible, - said Sergey Davydov, presale engineer of the company "Technology trajectory. - One of the features of the project was the connection of all used hardware platforms in cluster execution to the UserGate Management Center (UGMC) management server and the preservation of the existing role model for managing devices and security policies.

On the basis of UserGate NGFW, JSC SO UES implements filtering of incoming and outgoing traffic, routing traffic and publishing resources, monitoring the system's operation in real time using event logs, as well as sending events INFORMATION SECURITY to the corporate class system, SIEM categorizing network resources Internet and filtering user access based on categories, filtering anti-virus verification of transmitted traffic, content including in SSL traffic. In addition, during the project, the role model for managing all elements of the firewall system was preserved and modernized. Finally, the project provided for the introduction of transparent authentications users and the development of a model of Internet traffic filtering policies for its centralized application through UGMC.