icon image

1300 351 255

Online 24/7

icon image

[email protected]

Contact Us

SASE Remote Access Story (VPN Replacement)

iSecureX delivered seamless clientless secure application access and browser security for remote users of an E-commerce provider’s Private Data Centre network.

Client Details

This client is an Australian-based E-commerce provider operating state-of-the art Beauty Clinics  throughout Melbourne. Each clinic utilises a range of technologies to provide Beauty services with custom applications for Booking systems, LMS and Databases. The provider plans to scale their business to a franchise model throughout Australia.

  • Industry: Beauty
  • Client Size: 50+ developers.
  • Location: Victoria, Melbourne.

Requirements and Challenges

Requirement

The Data Centre infrastructure comprised of Juniper Internet facing firewalls, Cisco L2/L3 network switches, VMware ESXi servers and QNAPP NAS Storage system.

The remote development team comprising  50+ Application  programmers developing 100+ applications, required Secure Clientless access to the applications and the DC  infrastructure with next generation security capabilities at a low price point.

Challenges

The current Data Centre Juniper firewalls contain a basic feature set to setup Remote Access VPN for limited users, no support for clientless access and require additional license purchase to implement Next Gen firewall features such as A-V, Threat prevention etc. The firewalls need complex implementation of SSL VPN for Remote access and Site-to-Site IPSec tunnels to communicate SIP traffic from remote branches to Data centre.

Following the best advice, the E-commerce provider decided it was time to abandon their legacy VPN deployment for a more flexible, cloud-based solution for Private Access. That’s where iSecureX stepped in.

iSecureX  Solution

iSecureX  initially commenced working with this client to provide a converged network and security solution which can be very quickly deployed, improved Security for developers remote access

The solution included Check Point Harmony SASE (aka P81) Cloud-based platform with capabilities for Private VPC style setup using Redundant Gateways (Melbourne and Sydney), clientless ZTNA Authentication and On-Device profiling and Browser protection for Remote access users.

Additionally, for SIP comms from Branch offices to HQ, lightweight Wireguard Lan-to-Lan tunnel configurations was proposed.

iSecureX rolled out Cloud delivered Security controls from Harmony SASE and also Harmony Browse nano agents for Remote users,  that protects users from malware, credential loss and data leakage, preventing users from accessing zero-day phishing sites, reusing corporate passwords. The Harmony SASE portal  proactively monitors and detects security incidents across the client network and user base 24×7. Any alert is proactively triaged and managed by iSecureX  Australian-based Security operations team.

Outcome

iSecureX designed a Secure Access Services Edge (SASE) solution – Full mesh distributed network – supplied  by Check Point Software to deliver an optimised SASE network for all users and branch locations to access DC apps as well as Voice comms.

This solution provided seamless access for Remote developers to access apps from  a single application portal, which dramatically increased and improved productivity along with robust security. The Harmony SASE Private access solution was deployed and integrated with Data Centre infrastructure comprising  Juniper firewalls, Cisco Switching and VMWare ESX, in a record time to the satisfaction of the customer.

Traditional VPN solutions need complex implementation of SSL VPN for Remote access and Site-to-Site IPSec tunnels , moreover requires additional license purchase to implement Next Gen firewall features such as A-V, Threat prevention etc.

iSecureX  also rolled out a Check Point  Harmony Browser Security solution into users browsers to proactively prevent users browsing to malware/ phishing sites, which delivers best-in-class defence against common and emerging cyber threats.

The outcome is a fully managed Network and security platform allowing staff and branch locations to connect to any application from any network location – quickly and securely. Finally, iSecureX delivered  a 24×7 managed security service to quickly onboard new developers and also ensure any threat is proactively managed using iSecureX Australian based team of cyber security experts.

Client Testimonial

We are highly impressed with iSecureX. They took the time to understand our unique business needs and collaborated closely with us to deliver a simple, effective converged modern SASE solution tailored to our operations.

With seamless clientless access, our user experience and productivity have significantly improved. Their robust security measures protect against threats across physical and virtual environments, ensuring our data remains secure and compliant.

The scalable, cloud-native SASE solution adapts to our evolving needs and simplifies management, allowing us to focus on our core business. We wholeheartedly recommend iSecureX as an innovative SASE Managed Security Services Partner.

IT Manager, Ecommerce Provider