brewery invests in continuous network monitoring to

2
Brewery Invests in Continuous Network Monitoring to Improve Their Cyber Resilience Case Study Project delivered in cooperation with

Upload: others

Post on 21-Oct-2021

4 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Brewery Invests in Continuous Network Monitoring to

Brewery Invests in Continuous Network Monitoring to Improve Their Cyber Resilience

Case Study

Project delivered in cooperation with

Page 2: Brewery Invests in Continuous Network Monitoring to

The Objective Analyze the assets, information flows and operations in its production networks in order to improve its security

and efficiency, and comply with national regulation and international standards and guidelines.

The Solution

eyeInspect (formerly SilentDefense) was initially

deployed for a network assessment and proof of

concept. The visibility and control over the network it

enabled convinced the customer to deploy it in its four

major production facilities. Implementation for three

additional sites was completed in 2018.

The Challenge• Large, complex and unstructured production networks

with more than 2000 endpoints and applications, and

limited network segmentation

• Multiple ICS vendors and a combination of proprietary

and standard protocols, including: Modbus/TCP,

Siemens’ and Emerson’s protocols

• Traditional IT protocols and applications in both server

and OT networks, such as: SSL, TeamViewer, SNMP,

HTTP, SMB, DNS, RDP, and DHCP

• New endpoints constantly added to the network

(including private laptops), and semi-unregulated

connectivity to the Internet

The ResultseyeInspect provided critical insights and

capabilities to enable the company to enhance

the underlying infrastructure and cybersecurity

posture of its production facilities, including:

• A detailed inventory of all active devices and

communications

• An overview of the existing misconfigurations,

vulnerabilities and exposure of the network to

cyber security threats

• Insights into the timing and sequence of

operations for maintenance and backup activity

• Support for definition of better network

segmentation

• Ability to define a baseline of desired network

communications, including hosts that can or

cannot communicate with the Internet

• Real-time alerts if the baseline or company policy

is violated

The investment was decided as a result of a successful proof of concept in their largest production plant, during which the company enjoyed the benefits of network monitoring in terms of visiblity and situational awareness.

Forescout Technologies, Inc.190 W Tasman Dr.San Jose, CA 95134 USA

Toll-Free (US) 1-866-377-8771Tel (Intl) +1-408-213-3191Support +1-708-237-6591

© 2020 Forescout Technologies, Inc. All rights reserved. Forescout Technologies, Inc. is a Delaware corporation. A list of our trademarks and patents can be found at https://www.forescout.com/company/legal/intellectual-property-patents-trademarks. Other brands, products, or service names may be trademarks or service marks of their respective owners. Version 08_20

Learn more at Forescout.com