The project's client is a large international manufacturing company specializing in the production of medical devices and consumables for healthcare institutions. The organization's Russian branch provides supplies and service support throughout the country, including to medical centers, clinics, and pharmacy chains.
After separating from its global office, the company needed to create an independent infrastructure with its own security and communications tools in Russia.Previously used international solutions, including Exchange Online, ceased to function locally, posing risks to stability and information security. Therefore, the primary objectives became protecting email and endpoints, and implementing domestic alternatives to existing information security tools while maintaining user-friendliness. The company turned to ICL Services for this task.
The new infrastructure needed to ensure complete autonomy and include workstations, corporate laptops and desktops, mobile devices, and services to enhance employee productivity and collaboration.
Key Challenges
- Ensure the protection of the company's information security infrastructure within the framework of separation from the global office, while maintaining the level of protection of the mail gateway and endpoints.
Implemented our solution
-
Project Progress
The first stage was the migration of the mail system: Exchange Online was replaced with Exchange Server deployed in a cloud infrastructure. Kaspersky Secure Mail Gateway was deployed as an edge gateway, configured as a fault-tolerant system with two nodes—primary and secondary.
All mailboxes and domains were migrated using a dedicated automated migration tool, with mandatory testing to verify proper message delivery and security. In parallel, the team deployed and configured Kaspersky Security Center servers and a web-based management console.
On test devices, specialists tested security policies, then implemented web control mechanisms and data encryption using BitLocker. Following this, detailed security policy adjustments were made, and operational issues related to managing client devices and mail flows were resolved.
The ICL Services team also developed and implemented corporate email filtering rules, ensuring protection against spam and phishing threats. As the infrastructure was configured, continuous stability testing of services and email routing was performed until full functionality was achieved.
The team contacted the vendor to include the client's software in the signatures; after updating the database, false alarms ceased.
During data migration, the directory structure changed, which created additional triggers: for example, directory changes (for example, for Exchange servers), which prevented standard exclusions from working, requiring manual re-implementation. However, the ICL Services team resolved the issue without affecting system stability.
Support Phase
After completing the main phase, the project was transferred to support mode. The team logs incidents, monitors events in the Kaspersky antivirus system, performs signature updates, and enforces configured policies.
The client received not only a new infrastructure but also a sustainable support model, guaranteeing long-term stability and security.
Products and technologies
- Kaspersky KSMG
- Kaspersky KEDR
Results
- Migrated a foreign email system to a domestic cloud-based Exchange Server, including email addresses and domains.
- Provided comprehensive 24/7 antivirus protection for the company's information security system.
- Implemented mobile device management for employees.
- After completing the bulk of the work, we took over 24/7 support for the information security infrastructure.
- Following the migration project, the client transferred the management of the information security system to ICL Services, thereby reducing operational costs and expenses, freeing up the time of its specialists for strategically important tasks.