Customer success stories
"With AlgoSec, not only did we improve visibility of our security policy and device configurations, but we were also able to gain tremendous operational savings by automating many of these processes."
Background
Worldline is the European leader in the payments and transactional services industry. Worldline delivers new-generation services, enabling its customers to offer smooth and innovative solutions to the end consumer. A key actor for B2B2C industries, with over 40 years of experience, Worldline supports and contributes to the success of all businesses and administrative services in a perpetually evolving market. Worldline offers a unique and flexible business model built around a global and growing portfolio, thus enabling end-to-end support.
Challenge
Worldline’s network is secured with more than 20 firewalls and routers from vendors such as Check Point and Cisco. Even with over 30 employees in the security and networking group, the company was spending a lot of time manually performing security management tasks such as monitoring and tracking security policy changes, conducting risk analysis, validating network schemas, and preparing for PCI-DSS and SAS70 audits. Additionally, while Worldline had a documented process for implementing firewall changes, there was little visibility into what was actually occurring, and enforcing the process was not trivial.
“Manually trying to maintain control of our firewall and router policies was complex because we lacked the proper visibility of the firewall configurations and all of the changes that were occurring,” said Massoud Kamran, Senior Security Consultant at Worldline.
Solution
Worldline selected the AlgoSec Security Management solution to automate security policy operations, streamline audit preparation and validate security changes that were being processed. “We chose AlgoSec over other options because the solution leverages the routing information and the topology of firewalls to give us the most reliable visibility into what’s going on with network traffic and the security policy,” said Kamran.
Results
AlgoSec provides Worldline with an intelligent solution that enables Kamran and his team to find and asses risky rules and easily clean up their rule bases. Inaddition, Worldline leverages information from AlgoSec’s reports to enhance their Security Information and Event Management solution.AlgoSec’s comprehensive reporting gives Worldline continuous visibility into the firewall change process as well as provides evidence for PCI audits. “WithAlgoSec, we’ve improved our visibility into the current infrastructure and reduced the time spent on compliance audits, configuration management and change monitoring,” said Kamran. “In particular, time spent preparing evidence for PCI and SAS70 audits has been cut significantly. Assuming on average we make 700 security policy changes per year, we now save many man hours just by following AlgoSec’s change process and ensuring that the changes don’t introduce any risk,” concluded Kamran.
