Implementation of a unified information security policy for all levels of network access with a single point of control and monitoring of connections to the bank's corporate network.
• Implementation of information security policies for remote access (VPN), wired and wireless connections.
• Organization of a single point of control and ensuring monitoring of network connection processes.
• Identification of the types of connected devices in the network according to different criteria.
• Ensuring the full lifecycle of guest access.
• Accounting and control of the connection of personal devices (BYOD).
The immediate implementation of the solution was preceded by the careful development of the work project by the VERNA engineering team, followed by the coordination of the developed solution with the specialists of the Cisco representative office.
Cisco's flagship product, Cisco Identity Services Engine (ISE) version 1.2, was chosen as a platform for providing comprehensive information security.
Key points of the developed project:
• Analysis of Wired, Wireless and Remote Access network infrastructure for compliance with bank requirements and Cisco ISE software capabilities.
• Development of HLD (High Level Design) — topology of Cisco Identity Services Engine software integration into the bank infrastructure.
• Building a fail-safe and productive solution.
• Agreeing scenarios for providing access to the corporate network:
- for corporate PCs via Wired and Wireless
- for corporate users via Remote Access VPN using Cisco AnyConnect
- for personal devices: PCs, smartphones, tablets via Wireless
• Agree scenarios for providing guest access via Wireless and Wired.
• Mechanisms of online monitoring, obtaining reports.
• Convenient system of administration and delegation of access powers.
• Providing detailed working documentation on the project.
VERNA specialists together with bank employees have developed requirements for security policies:
• providing corporate access using MS AD, MS CA attributes
• guest access management
• registration of personal devices using BYOD technology
• Implementation of 802.1X technology into the corporate network, enabling flexible security policies.
As a result of the project, a separate network security module was created, which allows you to monitor and take into account all network connections. Implemented 802.1X functionality, which allows flexible security policies for network connections. The connection of personal devices using BYOD (Bring Your Own Device) technology was also implemented.
“The project to create a data center IT infrastructure was successfully completed by VERNA.
An important advantage of the project was the possibility to further increase the capacity of the data center as the corporate network expands and new equipment is connected. Thus, it made it possible to use the created infrastructure with a margin of strength for the long term and to optimize further costs.
During the implementation of this project, VERNA demonstrated highly skilled work and deserves high praise.”
Serhiy Popov
Director of IT Platinum Bank
Platinum Bank— a specialized retail bank that since 2005 provides deposit and credit products for individuals through a network of branches and customer service points throughout Ukraine.
Зв'яжіться з нами, щоб отримати більше інформації про наші рішення та проєкти
