Overcoming Network Segregation Challenges

Industry – Global Investment

A global investment company manages investment portfolios for clients worldwide, providing diverse financial products and services to help clients achieve their investment goals and grow their wealth.

Objective – Company needs Comprehensive Visibility Across all the Sites

  • The company faced the need to achieve comprehensive visibility into its corporate network and ensure compliance with network access control requirements. I
  • It aimed to address security vulnerabilities present in its corporate IT infrastructure while gaining visibility and control over endpoints across different sites.
  • Gain unified visibility into all connected assets across global sites.
  • Strengthen compliance with internal security and regulatory frameworks.
  • Minimize risks associated with unmanaged or rogue devices.

Challenges – Carrying Out Actions

  • Implementing control actions with the Juniper-MIST platform posed challenges due to the need for network segregation for both wired and wireless connections.
  • The complexity arose from distributing the network super-subnet across multiple sites, requiring careful planning and coordination to ensure seamless connectivity and security across the distributed infrastructure.

Solution - Forescout Comprehensive Asset Discovery Solution

  • The company deployed Forescout’s Extended Module (EM) on Azure Cloud, along with physical and virtual appliances across its branch locations. 
  • This setup enabled seamless visibility into all connected assets, ranging from laptops, printers, and mobile devices to IT/OT and network equipment, across multiple sites.
  • Forescout not only identified unmanaged or previously unknown devices but also streamlined compliance by enforcing multiple endpoint policies.

Benefits - Forescout Asset Discovery Solution

  • By deploying Forescout's Extended Module (EM) in Azure cloud and physical/ virtual appliances at branch locations, the organization achieved comprehensive asset discovery, including laptops, printers, IT/OT devices, mobile devices, network devices, and more.
  • Forescout's solution facilitated the detection of devices not listed in their inventory, enabling proactive management.
  • The establishment of multiple compliance policies ensured endpoint alignment with internal IT policies, while control policies were implemented to prevent non-corporate endpoints from accessing the corporate network.

Technologies Used

  • Forescout EM - Enables real-time asset visibility and control\
  • Azure Cloud - Provides secure, scalable cloud infrastructure.
  • Juniper-MIST Platform - Delivers AI-driven network management.
  • Network Segmentation Policies - Isolate networks to enhance security.

References

Want to experience next-gen security in action? Connect with us to learn how we can help secure your business, or email us at: info@cybersecit.net

Table of Contents


Your Security Journey Begins - Connect with our Experts

We offer the finest cybersecurity services and solutions across the globe, safeguarding businesses from emerging threats with innovative and proactive security measures.