The customer of the project was one of the leading Russian research institutes – the All-Russian Research Institute of Metrological Service (VNIIMS).
The Institute performs the functions of the scientific and methodological center of the Russian calibration system and the system of certification of measuring instruments of the center of metrology and metrological maintenance of measuring systems. VNIIMS conducts research and development in the field of accreditation of measuring laboratories and provides methodological and technical assistance to industry in carrying out these works.
The key task of the institute was to replace the existing network equipment of a Western manufacturer with a domestic solution, which was extremely necessary due to the requirements of the law on the transition of state-owned companies to software and hardware of Russian production.
ICL Services' competence in the field of modernization of network infrastructure using advanced domestic technologies capable of satisfying the requirements for information security and efficiency became one of the important advantages in the eyes of the customer, and therefore the team began work.Key Challenges
- Replace existing Western equipment with domestic equipment in accordance with the law
- Increase the level of information security
- Optimize traffic management
- Implement a system for controlling employee access to the Internet
Having analyzed the client's needs, the team proposed the optimal solution: to implement the Ideco NGFW hardware and software package from its partner, Ideco.
The selection criteria were high-quality technical support from Ideco, and the ability to quickly communicate with specialists via the web interface of the firewall significantly simplified the process of implementation and subsequent operation of the system, which became an additional advantage for the customer.
This domestic solution fully met all the customer's requirements and made it possible to solve the tasks. To ensure reliability and fault tolerance, two physical Ideco NGFW devices were installed, combined into a cluster.
The project was implemented in several key stages - this approach minimized risks and ensured a smooth transition to the new solution:
1. Collecting information and interviewing customer representatives;
2. Developing network infrastructure schemes (L1, L2, L3);
3. Preparing a technical project;
4. Step-by-step implementation and testing;
5. Complete switching of traffic to the new system;
6. Full implementation (July 2024).
Key features of the implemented solution
The project implemented functional capabilities, each of which is important in achieving the set goals of increasing the security and efficiency of the network infrastructure. Among them:
— Firewall with flexible access settings.
— NAT technologies for external access to internal resources.
— Intrusion prevention system (IPS).
— Content filtering.
— Application control.
— Integration with Active Directory.
— Detailed logging of user actions.
The implementation of the project not only allowed the institute to comply with legal requirements, but also significantly increased the level of security and manageability of the IT infrastructure.
Products and technologies
- Ideco NGFW
Results
- Creation of a fault-tolerant cluster ensured uninterrupted operation of the network.
- Traffic routing between providers has improved.
- The level of protection against external threats has increased significantly.
- A convenient monitoring and logging system has appeared.
- The institure has achieved compliance with legislative requirements for the use of domestic software.
YOU CAN ASK ME ANY QUESTIONS YOU HAVE AND GET CLOSE CONSULTATION ON OUR SERVICES.
expert in Network administration