Bakhresa Group of Companies, Tanzania,
Cyberoam UTM Solution Selected for Price, Performance, and
Reliability at Bakhresa Group
About Bakhresa Group, Conglomerate
Bakhresa Group is one of the leading Industrial Houses in Tanzania, East Africa. Started in
a humble manner with a small restaurant in the Port City of Dar Es Salaam, Tanzania, in
mid seventies, it has now emerged as a respected business group in the Region.
The Group has its operations spread in Tanzania, Zanzibar, Uganda, Kenya, Malawi,
Zambia and most recently in Mozambique. The group now boasts of a turnover of more
than Three Hundred Million United Sates Dollars and is a proud employer of more than two
thousand employees associated directly. There are several companies under its umbrella
and have investments mainly in Food and Beverage Sector, Packaging, Logistics and Real
The network covered sensitive
information which was under
constant threat from spyware and
DoS attacks. So they needed a
strong Firewall and IPS solution.
Mr. Raju Mudunuri
The challenges faced by Bakhresa Group are as follows:
- Protecting the Network Periphery & Tough IPS
Locked offices and buildings cannot protect information if the computers holding it are open
to everyone on the network. The Bakhresa Group contains public servers, such as e-mail
and web, which are exposed to the outside world in order to perform their function. The
company contains the contract document and other client sensitive information and data
that can be possibly targeted by attacks from external entities and outside access
attempts. However, at the same time, the authorities have a responsibility to protect users
from network threats, and keep the network up and running. A top security priority was to
establish a private network to keep confidential information safe from unauthorized users,
hackers, and other threats. Consequently, Mr. Raju Mudunuri, the IT Manager at Bakhresa
Group wanted a gateway firewall for protection of their entire network.
Also, the sensitive servers were under constant threat from spyware, DoS attacks,
fragmented and malformed packets, blended threats and more. Therefore, they needed a
strong IPS solution which would be proficient in retorting these threats.
- Controlling Surfing Practices
Unmanaged Internet access presents many challenges and introduces unnecessary risk.
With unmanaged internet access, employees were distracted by non-work related or
unproductive activities. The organization needed to know who was accessing what sites
and as such needed an identity based filter and reporting system that would include the
users‘ online behavioral audit.
Also, the use of bandwidth- intensive applications such as streaming media or the
downloading of music or videos by few employees would slow or shut down entire
organizational networks. Installing a content filtering solution can eliminate these problems
- Business Continuity Concerns
Bakhresa Group has evolved into an organization with independent networks at remote
sites supporting many users. The primary challenges for Bakhresa Group were to provide
access to sensitive data across a more secure and stable VPN. Internet is relied on
profoundly to allow remote sites VPN access back to the main office.
Another, major issue was the connectivity problem. "If Internet was down our business
activities would come to a halt," Mr. Mudunuri said. To avoid a single point of failure,
multiple locations had multiple ISP links. So, multiple ISP links load balancing, and failover
is also a critical need.
The Cyberoam Solution
Bakhresa Group looked into a number of security products in order to address their
business challenges. The search was on for an appliance which would take care of their
all above requirements. The company then deployed One (1) 200i & One (1) 100i in Dar
Es Salaam at the Head Office, Three (3) 25i in Zanzibar at the branch office, and One (1)
50i has been kept as stand by. All the appliances were deployed in Gateway mode.
The challenges faced by Bakhresa Group are as follows:
- Firewall & Stopping Intrusions
Bakhersa Group operates Cyberoam‘s ICSA and Checkmark Certified Perimeter Firewall
between the Internet and the organization‘s network to establish a secure environment
for the organisation‘s computer and network resources. The Perimeter Firewall is a key
component of the Bakhresa‘s network security architecture. This Perimeter Firewall
policy governs how the Perimeter firewall will filter Internet traffic to mitigate the risks and
losses associated with security threats to the Bakhresa Group network.
This policy is designed to protect employee computers from hacking and virus attacks by
restricting access to computers on the Bakhersa Group‘s network and provides granular
access controls over Internet traffic and the network resources. Coupled with Intrusion
Prevention module, Cyberoam UTM can counter any Denial of Service attack. Mr.
Mudunuri now felt the network is secure.
- Web Content Filtering
Cyberoam‘s 82+ category tough Web Content filtering technology kept the organization‘s
internet resources effectively focused. The Content filtering feature makes sure that all
P2P and Instant Messengers are blocked and that there is no breach of data. Cyberoam
helps manage employee access to websites, minimizing lost time on the internet, and
lowering operating costs. It also helps enforce internet usage policies based on
bandwidth needs to prevent business losses and other issues that result from limited
access to mission-critical applications.
- Flexible Internet Connectivity
The IPSec VPN solution of Cyberoam bridged the geographical distances between the
organization‘s branch and head offices. This now ensures that the user can connect
securely from any location and use the organization‘s resources. Highly encrypted traffic
enforced security over the Internet and ensures that no malware sneaks through.
Cyberoam‘s Multilink manager increases the overall network performance by load
balancing the network traffic between all their four (4) ISP links terminating on them,
delivering continuity in security. In case of failure, the load is automatically transferred to
the other ISP link, which leads to 100% Internet uptime, and round the clock connectivity
to their employees.
- To Conclude
“Comprehensive Reporting is one of Cyberoam‘s most significant features. I am very
impressed with the on-appliance reporting tool that displayed all vital statistics
graphically, which allows quick checks of overall network conditions,” said Mr. Mudunuri.
With Cyberoam in place, they have the confidence of a secure and protected