About Us

Citrus Consulting Services is the Consulting and the Transformation Services arm of Redington Gulf.

Sunday – Thursday: 9:00AM–6:00PM (Sales), Sunday – Saturday: 24×7 / 365 (Support) E.O#3, Ground Floor, Building 01 Dubai Internet City, P.O Box 501 761 Dubai, UAE (+971) 04 516 1500
(+966) 11 462 5323
Image Alt

Next-Generation Firewall for a MNC to Secure Resources and Communication between Locations

Customer Introduction

An enormus MNC comprised of diversified businesses with deep roots in the Middle East, North Africa, and Turkey (MENAT region). A leading corporate giant having solid roots in multiple industries namely, Transportation, Manufacturing, Financial Services, Land and Real Estate, Energy and Consumer Products.

Citrus Consulting Services Enables Next-Generation Firewall for a MNC to Secure Resources Hosted in Different Cloud Infrastructure and Communication between these Resource Locations.

Challenge Overview

  • Foremost requirement was the security of the data at rest and transit.
  • High Available Firewall following Active/Passive Mode
  • Dynamic Routing and failover for all S2S VPN i.e. each VPN has active/passive VPN configured
  • Enable authorized users to connect to the network from remote locations
  • Gap Analysis for development phase.
  • Policy building, management and enabling advance security services through next gen Palo Alto firewall.
  • Ensure Optimum Security measures are taken, and dynamic threat updates are up-to date.

Solution Overview

  • Configuration of VM series of Palo Alto Networks as a Virtual Device hosted on a cloud.
  • Configured various site to site VPN to secure communication between different datacenters to Cloud.
  • Implementing Security Policies to allow only traffic from specific source to specific destination as per business need.
  • Linked IDS/IPS policies to the security policies to detect and prevent against threats
  • Configure DDOS protection policies and zone protection profiles on Palo Alto to mitigate risks from sophisticated new generation attacks
  • Implementing dynamic updates and threat updates.

Benefits Delivered to Customer

  • Firewall providing secure Communication between on-prem and cloud using appropriate encryption levels and attaching security profiles created using best practices & aligned to compliance standard followed by the industry.
  • Creating secure channel for employee working remotely to access the resources in the customer’s network.
  • End to End configuration and troubleshooting support of cloud hosted firewall by in-house security experts.
  • Review of each security policy and configuration to ensure it meets the pen-test standards.
  • Embedded Inline threat and IPS/IDS

Project Info