The Client

The client is a global IT solutions and services organization with diverse IT infrastructure in 14 sites across the globe. These sites are connected by high-speed data links. The client has an e-commerce infrastructure, which includes firewalls, routers etc. and they wanted to implement an Intrusion detection system to proactively monitor potential intrusions/ intrusion attempts into the company's internal resources.

The Challenge

The client's business critical applications and servers cater to business services and applications like Web server, e-mail, SAP, human resources applications and online learning portals.

Although IT security aspects were in place by use of different security measures such as Security Policy, Firewalls, Antivirus, log analysis on security products etc., there was no proactive monitoring in place. The client wanted an Intrusion Detection System, which could provide 24*7 real time monitoring of network intrusion attempts and 24*7 real time monitoring on critical hosts for intrusive attempts. We had to install an automated Incident handling mechanism and database update mechanisms along with centralized monitoring and management.

The Solution

The security experts from Wipro reviewed the present architecture and had discussions with the client to identify critical hosts and network segments which need to be monitored for intrusion. After doing an analysis by considering business criticality aspect for 14 locations across the globe, the security team has selected a best of the breed Intrusion detection product i.e. RealSecure IDS to satisfy the client's need.

In the first phase, Wipro carried out deployment of network sensors [to monitor business critical network segments] and hosts' sensors [to monitor business critical hosts].

In the next phase we fine-tuned the signature set used for monitoring the list of intrusion detection attempts on every sensor. Based on the nature and expected intensity of intrusion attempts, Wipro security experts have configured the automated responses through RealSecure management console.

In the third step, Wipro security experts recommended necessary changes in network traffic flow to achieve desired level of security.

The Benefits