McNally Bharat Engineering Co. Ltd India, Asia
Cyberoam Offers Safe and Sound Internet Access to McNally Bharat Engineering Company
About McNally Bharat, Manufacturing
Founded in 1961 & headquartered at Kolkata, McNally Bharat Engineering Company Ltd. (MBE) is one of the leading Engineering Companies in India engaged in providing turnkey solutions in the areas of Power, Steel, Aluminium, Material Handling, Mineral Beneficiation, Pyroprocessing, Pneumatic Handling of powdered materials.
MBE manufactures a wide range of products required for its various projects through its subsidiary company McNally Sayaji Engineering Ltd. (MSE), to whom it provides the requisite technology and design to manufacture the products. MSE product range includes crushing, screening & milling equipment, pressure vessels, material handling equipment, steel plant equipment, process equipment like flotation cell, thickeners, slurry pumps etc.
MSEL has absorbed technology over the years through various strategic alliances and has established a strong R&D and Design & Development team to provide optimum and cost effective solutions to customer needs.
McNally Bharat contract documents and sensitive servers are under constant threat from spyware, and DoS attacks. So they were in need of Gateway firewall and Intrusion Prevention solution for protection of their entire network.
Mr. Udayan Lahiri
Assistant Manager, IT
McNally Bharat Engineering
Constant Internet Connectivity: McNally Bharat has its head office at Kolkatta and branch offices at Mumbai, Ernakulam, Baroda, Nagpur, Chennai, Secunderabad, Visakhapatnam, Vijaywada, Bangalore, & Asansol. The varied business requirements of Internet are as follows:
- Research & Development Team: The trained and experienced engineers depend on the Internet to access competitive information and latest industry updates.
- Confidential Information: Securing the clients’ contractual and confidential data which reside on their network was also a high priority for them.
- Design section: A team of designers require uninterrupted Internet connectivity to enable web transfer of huge CAD files containing parts and assemblies.
- VPN connectivity: Internet is relied on heavily to enable remote sites VPN access back to the main office.
Techniche is the support provider for McNally Bharat. According to System Engineer, Techniche, “Unremitting Internet connectivity with no collapse or downtime was the most imperative necessity of our client. Apart from that, we also had to tackle these additional business challenges.”
Protecting the Network Periphery & Tough IPS
The McNally Bharat network basically comprised of web and mail servers, design, construction and project with no focused doorway security outline. The company contains the contract document and other client sensitive information and data that can be possibly targeted by attacks from external entities and outside access attempts. The organization, therefore, needed a gateway firewall to regulate user authentication and access control.
Also, the sensitive servers were under constant threat from spyware, DoS attacks, fragmented and malformed packets, blended threats and more. Therefore, they needed a strong IPS solution which would be proficient in retorting these threats.
Controlling Malware & Spam Numbers
For Mc Nally Bharat, a regular virus attack in the network, particularly in a fluxed form, would translate into a lot of unwelcomed problems – corrupt files, defaced web pages, PDF, design documents and huge downtime. The spam problem was even more serious as a large number of unwanted mails would crash the server.
Web URL Filter
The organization needed to know who was accessing what sites and as such needed an identity based filter and reporting system that would include the user’s online behavioral audit. It would also be required to block harmful spyware/malware infested sites. One of the most important vectors of worry was the employee productivity. The productivity might be affected while spending precious time in unproductive surfing and messaging. They needed strong web filtering solutions which could control all Internet access and give informative reports on Internet usage.
Throttled Bandwidth – Sharing Internet
Internet access was given by default to everyone in McNally Bharat. Company’s mail access was given to everyone but selected employees & specific departments were given access to specific Websites. Some users required access to certain sites such as music, video, social networking, youtube etc to help them in their work. Opening up access to these sites for all users resulted in bandwidth getting “choked”. So they defined security and bandwidth management policies after taking the user’s identity and professional profile into account. Bandwidth needs to be managed and prioritized to achieve maximum business advantage. They wanted to ensure fruitful use of bandwidth.
The Cyberoam Solution
McNally Bharat looked into a number of security products including Fortinet & Juniper in order to address their business challenges. The search was on for an appliance which would take care of their all above requirements. The company then deployed One (1) 250i and Two (2) 1000i in High Availability mode. All the appliances were deployed at the head office in Gateway mode.
The business benefits were as follows:
- Identity based Security
Cyberoam UTM delivered unforeseen value additions such as the award-winning identity-based security feature which provides full visibility of user activities in the network. To elaborate, after integrating Cyberoam into the McNally’s Bharat network infrastructure, Mr. Udayan Lahiri, Assistant Manager, IT at McNally Bharat used its Active Directory Services (ADS) to include all McNally Bharat Internet users in the database so their online activities could be further monitored.
- Flexible Internet Connectivity
The IPSec VPN solution of Cyberoam bridged the geographical distances between the organization’s branch and head offices. This now ensures that the user can connect securely from any location and use the organization’s resources. Highly encrypted traffic enforced security over the Internet and ensures that no malware sneaks through.
Cyberoam’s Active-Active HA increases the overall network performance by load balancing the network traffic between two Cyberoam appliances. These appliances act as the gateway, with all their ISP links terminating on them, delivering continuity in security. In case of failure, the load is automatically transferred to the other Cyberoam appliance, which leads to 100% Internet uptime, and round the clock connectivity to their employees.
- Firewall & Intrusion Prevention
“They have employees & client records that contain a great deal of private information related to designs, drawing, projects and other data. We also have to safeguard our own business assets and administrative records” says Mr. Lahiri.
Cyberoam firewall is ICSA and Checkmark certified - provides granular access controls over Internet traffic and the network resources. Coupled with Intrusion Prevention module, Cyberoam UTM can counter any Denial of Service attack. Mr. Lahiri now felt the network is secure.
- Comprehensive Protection from Viruses and Spam
Cyberoam UTM’s Gateway Anti-Virus and Anti-Spyware solution ensures a third level real-time protection for McNally Bharat network by delivering clean web and mail traffic. Viruses, worms, Trojans, keyloggers, spyware and more are the past and business downtime is slipshod.
Cyberoam’s Gateway Anti-Spam solution has a spam catch rate of over 98% and sucks up a huge segment of junk mails at McNally Bharat with its IP reputation filters before they strike the mail servers. Subsequently, Cyberoam’s RPD-based content-agnostic anti-spam solution blocks spam in any language regardless of the content, e.g. image, audio, video or zip-based spam. The anti-spam feature is also equipped with Virus Outbreak Detection. This protects the organization against any zero day attack.
- Filtering Solution & Bandwidth Management
McNally Bharat installed Cyberoam not only to manage employee Internet access, but to minimize the risk of other web security threats, help improve employee productivity and save network bandwidth. McNally Bharat uses Cyberoam to block access to specific category of websites.
Cyberoam’s content filtering database has more than 44 million sites neatly categorized into more than 82+ categories. This large number of categories permits a high degree of specificity in designing an organization’s Internet use policy. Mr. Lahiri continues, “In addition, we are able to set up policies for different work groups. Cyberoam makes it easy for us to set up policies based on specific job requirements within our organization. Also I can now prioritize the organization’s bandwidth usage as per business requirements with more effective controls on which user consumes how much bandwidth (upload and download limits) during any time of the day”, said. Mr. Lahiri. This helped the organization in controlling the user behavior on the Internet.
- Knowing Who is Doing What?
“Comprehensive Reporting is one of Cyberoam’s most significant features,” said Mr. Lahiri.
The On-Appliance reporting module includes features like Traffic Discovery, Internet Bandwidth Usage Monitors, Top Accessed Categories and Google Search Reports, which enhanced the visibility of a user’s online behavior. The active alerts and comprehensive reports help Mr. Lahiri to keep a tab on the Internet usage trends.
- To Wrap it Up
Discussing regarding his Cyberoam experience, Mr. Lahiri commented, “We are more than happy with the service which has been provided. Cyberoam is a solid product with some exceptional features - very trouble-free to set up and direct.”