CLAAS is one of the world's largest manufacturers of agricultural machinery, founded more than 110 years ago in Germany. The company holds a leading position in the production of combine harvesters, forage harvesters, tractors, balers and other equipment for efficient farming. The company employs more than 11,000 people worldwide.
In Russia, CLAAS is represented by two key companies: CLAAS LLC in Krasnodar is a modern full-cycle enterprise for the production of combine harvesters, opened in 2003. CLAAS Vostok LLC is a sales company responsible for developing a wide dealer network and promoting CLAAS equipment in Russia.
Legislative requirements and the development of IT services and products in the Russian market have required Russian companies to adapt their IT infrastructure architecture. This led to the decision to localize IT infrastructure and information systems.
It was necessary to ensure a high level of fault tolerance, security, and quality of solutions. Business interests, IT support teams, and information security requirements were taken into account.
Import substitution and increasing the transparency of events within the corporate infrastructure were also a priority: it was necessary to track illegitimate actions of employees, identify attempts of external hacking and incidents within a single security perimeter.
To solve these problems, there was a lack of sufficient resources and necessary competencies, as a result of which customers from Moscow and Krasnodar turned to ICL Services for consulting and technical support.Key Challenges
- Develop and agree on an infrastructure separation concept, including:
- Description of the current and future infrastructure
- Comparative analysis of software and hardware solutions available on the Russian market for each element of the localized infrastructure, and a technical and economic justification of the proposed solutions
- Roadmap for the localization project implementation
- Data and user migration plan to the new infrastructure
- Cost estimate of the necessary equipment, licenses, subscriptions, and work required to implement the concept
- Cost estimate for infrastructure support and information security services - Supply the customer with the necessary equipment, licenses, and subscriptions.
- In accordance with the concept, build the infrastructure, migrate data and users to it, and disconnect from the old services and infrastructure.
- Ensure centralized monitoring of user actions and external threats.
- Provide technical support.
Project launch
ICL Services experts analyzed the current infrastructure, reviewing existing documentation and conducting interviews with experts on the client's side.
They selected the most suitable solutions and technologies, described the concept of infrastructure separation, and successfully presented it to the client company CLAAS.
Project Progress
During the implementation phase, the necessary equipment, licenses, and subscriptions were provided, and a new infrastructure was built using both local computing resources and cloud technologies from Cloud4U:
— A virtualization platform based on Hyper-V and Storage Spaces Direct was deployed.
— Key components of the new domain infrastructure were configured to support employee operations:
- Active Directory directory service
- Public Key Infrastructure (PKI)
- VPN for employees working remotely
- External DNS and NTP servers
— Servers and data were migrated from the old infrastructure to the new one.
— Backup was configured.
— Processes, requests, and Service Desk integration were configured based on IntraService.
To manage the workstation and server infrastructure, ICL Services implemented its own Kolibri-ARM system, replacing the foreign Microsoft SCCM solution. This implementation significantly reduced migration time and personnel costs by automating the installation of operating systems and applications on user workstations.
Strengthening Cybersecurity
The work began with a detailed collection of requirements and an analysis of the current state of the infrastructure. After agreeing on the project solutions, the specialists developed the architecture and proceeded with a phased deployment.
In the next stage, tests were conducted, data migration was performed, and security policies were configured, including adding exceptions and activating application control.
In two locations – Moscow and Krasnodar – the solutions were adapted to the local infrastructure specifics.
Domestic products in the field of endpoint protection, event monitoring, and mobile device management were used for implementation.
Migration and Support
After the new infrastructure was ready and secured, ICL Services specialists successfully migrated data and users to it, supporting the client's employees throughout the entire process with regular communication, instructions, and consultations.
Upon completion of the project, the teams took over the support of the infrastructure services and are now providing information security support to CLAAS in Russia.
The project allowed the company to build a stable, transparent, and modern infrastructure based on domestic technologies. The implemented solutions increased the level of protection and ensured the independence of the infrastructure from external risks.
Products and technologies
- ICL MSSP SOC
- Colibri-UEM
- Ideco
- RedCheck
- Cloud4U
- Microsoft Server, Microsoft Hyper-V
- Zabbix
- PRO32 Connect
- IntraService
Results
- Reduction of company costs for infrastructure support.
- A unified information security system has been built, independent of foreign solutions.