INLINE Technologies completed the project on upgrade of information infrastructure of production company "Alioth
Customers: Alioth Moscow; Electrical equipment and microelectronics Contractors: ITG (INLINE Technologies Group) Product: Cisco Network Admission Control (NAC)Project date: 2011/04
|
The project was executed with the purpose to provide data protection, given to Alioth company by her customers, and to bring IT infrastructure of the enterprise into strict compliance to requirements of international payment systems of Visa and MasterCard.
The project provided expansion of an information security system (cybersecurity) and reconstruction of the data network (DN).
The information security system of Alioth company was expanded at the expense of the solution based on Cisco Network Admission Control (NAC) technology providing control of connection of users and their interaction with corporate network according to requirements of information security policy.
Are among the main opportunities of the solution Cisco NAC:
- guarantee execution of security policies on border network – the user;
- preserving of information on providing access to network: time, place of connection, user's parameters;
- assessment of the connected workstations and servers on compliance to corporate politicians of software and to security settings;
- automation of the procedure of reduction of workstations in compliance with politicians of cybersecurity;
- access restriction to network for the users who are not satisfying to politicians of cybersecurity;
- automation of providing appropriate level of access depending on the user's rights;
- creation of a segment of the increased security for users wireless or VPN access;
- automatic providing a guest access on the basis of developed the politician.
The solution allows to control connection of jobs to network infrastructure at the level of the switch port, at the same time each of connections provides passing of authentication and check of compliance to security requirements. As obligatory existence of an active antivirus, with the latest version of updating and also the set updates and patches for Windows systems specified by the customer is provided.
In other words, the solution Cisco NAC protects corporate network from damage caused by the staff of the company which, according to the statistics, exceeds the damage caused from the outside.
It should be noted that, despite popularity of NAC technology in the Russian market of IT security, its practical use meets quite seldom. The solution on the Cisco NAC platform implemented by INLINE Technologies for the PC of Alioth LLC – nearly the only thing in our country. It is explained not by technology difficulties of implementation, and it is connected, as a rule, with insufficiency of the formalized provisions on cybersecurity, control over their execution and absence in the organizations of clear policies of security regarding connection of users to network infrastructure.
The implementing solution Cisco NAC at the plant on production of plastic cards of Alioth company became possible that at the enterprise are developed and information security policies which including are checked for compliance to requirements of Visa and MasterCard payment systems within the carried-out audits are strictly observed.
The organization of communication of its such segments as was result of reconstruction of SPD of Alioth company: public segment, office network, network of data processing and personalizatsionny network. It in turn allows to automate production process of production of plastic cards and to automate tasks of production management.
SPD is upgraded using the equipment and the software of Cisco, Juniper Networks and Palo Alto Networks.
The project on upgrade of information infrastructure – not the first project implemented by INLINE Technologies for Alioth company. So, at the beginning of 2010 information and technology infrastructure was created and the system of physical security which underwent audit of Visa and MasterCard without the uniform note is constructed.