©2018 Check Point Software Technologies Ltd. All rights reserved.

February 12, 20181

Low Cost Airline Takes Cloud Security to New Heights with Check PointAirline Grounds Cyber Threats with CloudGuard Advanced Security

“Check Point stopped a ransomware attack on our network that disabled a major courier services delivery company.”— Information Security Manager, Low Cost Airline

OverviewLow Cost Airline From America’s favorite small cities to world-class destinations, this airline makes leisure travel affordable and convenient.

Business ChallengeOn Board for VirtualizationThis airline focuses on delivering affordable air travel while also offering related products, such as hotel rooms and rental cars. With 85 aircraft and 350 scheduled routes across the United States, this low cost airline flies out of 120 airports. Across all of these airports, this airline's IT and information security teams manage network traffic for business-critical systems such as reservations and flight schedules.

In the past, the airline had supplied laptops for staff and deployed physical firewalls at each of their locations. Because traffic was shared over a common network, any security or network problem at one airport could potentially affect all locations. The infrastructure also was costly and difficult to manage consistently. As the threat landscape intensified, the airline’s team wanted to simplify their network design as well as bring more automation into their releases while increasing their ability to prevent attacks across an increasingly virtualized infrastructure.

Customer ProfileAmerican low cost airline that operates scheduled and charter flights

Challenge• Secure a virtual desktop

infrastructure environment across 120 locations

• Tailor security policies to micro-segments of the network

• Ensure consistent security provisioning, workflow, and protection across all airports

Solutions• Check Point CloudGuard IaaS

• Check Point SandBlast Zero-Day Protection

• Check Point R80.10 Security Management

Benefits• Extended robust, consistent

threat prevention security to protect east-west traffic in virtual data center environment

• Stopped ransomware that took down a major courier services delivery company

• Simplified and increased management efficiency with concurrent administration capability

C U STO M E R CA S E ST U DY

©2018 Check Point Software Technologies Ltd. All rights reserved.

February 12, 20182

“Check Point R80.10 Security Management is awesome. Having unified policy across all of our environments with the flexibility to tailor provisioning and workflow is a huge time-saver."— Senior Analyst, Low Cost Airline

The airline chose to deploy VMware NSX in their datacenter and implement a virtual desktop infrastructure (VDI) delivered over Internet links to all airports. This dramatically simplified network management, delivered greater agility, and enabled the team to micro-segment traffic with policies specific to each segment for higher resiliency. To secure this dynamic environment, the airline chose Check Point CloudGuard for VMware NSX.

SolutionsExtending Protection for Virtual Coverage“We’ve implemented the Check Point Infinity architecture to help us consolidate and unify security across our networks,” said the airline's Information Security Manager. “In addition to Check Point CloudGuard for NSX, it includes Check Point firewalls, Check Point SandBlast Zero-Day Protection, and Check Point R80.10 Security Management. Together, these solutions have made our lives much easier and our network more secure.”

Check Point Infinity uses unified threat intelligence and open interfaces to protect the airline's environments against targeted attacks. With Check Point R80.10 Security Management, the team consolidated security management across all network environments into a single pane of glass. Check Point CloudGuard for VMware NSX delivers a multi-layered defensive posture to protect east-west traffic in their VMware-deployed datacenters. CloudGuard transparently enforces security at the hypervisor level and between virtual machines, automatically quarantines infected machines for remediation, and provides comprehensive visibility into all virtual network traffic trends and threats.

BenefitsAutomated Protection, Tailored PoliciesWhen the airline deployed Check Point CloudGuard for VMware NSX to secure its VDI environment, Check Point SandBlast network protection was extended to the new infrastructure. The VDI environment’s micro-segments now enable the team to contain any service-affecting problem to only one airport. And they can now micro-segment consistently with micro-permissions from Check Point CloudGuard and the R80.10 management platform.

“Check Point CloudGuard for NSX gave us advanced protection for our east-west data traffic between virtual machines,” said the Information Security Manager. “It automatically provisions services as our virtual machines move, making it simple to achieve consistent security everywhere. For instance, at one airport, Check Point stopped a ransomware attack on our network that disabled a major courier services delivery company.”

C U STO M E R CA S E ST U DY

©2018 Check Point Software Technologies Ltd. All rights reserved.

February 12, 20183

For more information, visit: https://www.checkpoint.com/products/cloud-security/

“We have so much flexibility. I can tailor policies per NSX cluster for granular control...And it’s fast—we edited and pushed multiple policies to 56 firewalls in less than eight minutes."— Senior Analyst, Low Cost Airline

Awesome Control and Flexibility"Check Point R80.10 Security Management is awesome,” said a Senior Analyst at the airline. “Having unified policy across all of our environments with the flexibility to tailor provisioning and workflow is a huge time-saver.”

A single platform enables the airline to manage security across its infrastructure efficiently and consistently. Centralized provisioning uses profiles to automate device configuration, deploy new devices, and easily roll out changes. Workflow automation now enforces editing, reviewing, approving and auditing policy changes to reduce errors and facilitate policy compliance.

“We have so much flexibility,” said the Senior Analyst. “I can tailor policies per NSX cluster for granular control. With concurrent administration, admins at different airports can work simultaneously on the same policy without a problem. And it’s fast—we edited and pushed multiple policies to 56 firewalls in less than eight minutes.”

Next StepsThe airline develops many of its own internal applications and platforms. Currently the DevOps team is working on a new internal flight system application, leveraging the powerful compute, storage and networking services of AWS for their development. Check Point’s robust CloudGuard cloud security portfolio also extends the same level of automation, security, visibility and control to the airline’s AWS development environment, giving their developers the ability to spin up and tear down servers as needed while ensuring security.

“With Check Point CloudGuard, we can give our developers what they need while maintaining security,” said the Senior Analyst. “That means we can help accelerate development of solutions that give us new efficiencies and greater competitive advantage.”

C U STO M E R CA S E ST U DY