Next-Generation Firewall for a MNC to Secure Resources and Communication between Locations

An enormus MNC comprised of diversified businesses with deep roots in the Middle East, North Africa, and Turkey (MENAT region). A leading corporate giant having solid roots in multiple industries namely, Transportation, Manufacturing, Financial Services, Land and Real Estate, Energy and Consumer Products.

Citrus Consulting Services Enables Next-Generation Firewall for a MNC to Secure Resources Hosted in Different Cloud Infrastructure and Communication between these Resource Locations.

• Foremost requirement was the security of the data at rest and transit.
• High Available Firewall following Active/Passive Mode
• Dynamic Routing and failover for all S2S VPN i.e. each VPN has active/passive VPN configured
• Enable authorized users to connect to the network from remote locations
• Gap Analysis for development phase.
• Policy building, management and enabling advance security services through next gen Palo Alto firewall.
• Ensure Optimum Security measures are taken, and dynamic threat updates are up-to date.

• Configuration of VM series of Palo Alto Networks as a Virtual Device hosted on a cloud.
• Configured various site to site VPN to secure communication between different datacenters to Cloud.
• Implementing Security Policies to allow only traffic from specific source to specific destination as per business need.
• Linked IDS/IPS policies to the security policies to detect and prevent against threats
• Configure DDOS protection policies and zone protection profiles on Palo Alto to mitigate risks from sophisticated new generation attacks
• Implementing dynamic updates and threat updates.

• Firewall providing secure Communication between on-prem and cloud using appropriate encryption levels and attaching security profiles created using best practices & aligned to compliance standard followed by the industry.
• Creating secure channel for employee working remotely to access the resources in the customer’s network.
• End to End configuration and troubleshooting support of cloud hosted firewall by in-house security experts.
• Review of each security policy and configuration to ensure it meets the pen-test standards.
• Embedded Inline threat and IPS/IDS