Gujarat Apollo Industries Limited, Ahmedabad, India
Cyberoam - A Single Box Solution Caters to the Multiple Security Needs of Gujarat Apollo
About Gujarat Apollo Industries Ltd, Manufacturing

Gujarat Apollo Industries Limited, an ISO 9001-2000 certified company, is India‘s no.1 manufacturer of road construction & maintenance equipment.

With 37+ years of experience in the design, manufacturing and after sales support of equipment for the road construction industry, the group offers the entire range of road construction equipments.

The company is also listed on BSE (Bombay Stock Exchange). Apollo as a group has diversified into Road building, Electronics, Software development, Industrial Finance and Environment protection.

The business need of internet is to converse, download and send information and, emails. As internet is a business enabler resource, its access needs to be well synchronized and logged.

“To take care of our Internet Security, Productivity and Connectivity concerns, we needed a hassle free single box solution. Cyberoam UTM finely fit the formula.”

Mr. Hemant Darji
System Admin
Gujarat Apollo Industries Limited

Explaining the organization‘s Internet security requirements Mr. Hemant Darji, the System Administrator at Gujarat Apollo said, “Gujarat Apollo faced Internet access and security issues related to spam mails, malware attacks originating from mail and Web, loss of productivity, bandwidth bottleneck and slow surfing. We were looking for a simple solution that could be unwrapped and deployed in the network - ‘Quick Configure and Fire One Box Solution‘.”

The Spam Pain

Spam was a huge problem. More than 75% of the total mail traffic was spam. Most of the time, the employees‘ inboxes were congested with unwelcome mails. These mails not only cost the organization in terms of storage space, but also wasted employee‘s valuable time and efforts in mail management. In case of malware infected mails, the problems simply compounded and the network suffered and so did the productivity.

Loss of Productivity

In the absence of a Web content filtering solution, the employees at the head office and branches often whiled away precious productive time in unproductive surfing and chatting. In many instances, unbridled and un-audited surfing, downloads, P2P usage and Instant Messaging applications ate into the precious bandwidth that powered the business critical applications. The organization needed to know who was accessing what sites and as such needed a content filtering solution that could provide audit data for users‘ online behaviour. The solution would also be required to block harmful spyware/malware infested sites too.

Throttled Bandwidth

Internet access was given by default to everyone in Gujarat Apollo. Company‘s mail access was given to everyone but selected employees needed to be given access to only specific Websites only. Some users required access to certain sites to help them in their work - music, video, social networking, etc. Opening up access to these sites for all users resulted in bandwidth getting “choked”. So they defined security and bandwidth management policies after taking the user‘s identity and professional profile into account. Full internet access is intended to be given to top management only. Bandwidth needs to be managed and prioritized to achieve maximum business advantage. They wanted to ensure productive use of bandwidth.

The Cyberoam Solution

Taking a careful view of the existing products in the market, Mr. Darji decided to deploy Cyberoam, One (1) CR250i appliances at Mehsana and One (1) CR100i appliance at their corporate office - Ahmedabad. They also procured Three (3) CR25i appliances for their branch offices at Hyderabad, Mumbai and Delhi respectively. Cyberoam is deployed as the gateway across all the locations.

Within the Firewall

Cyberoam firewall provided granular access controls over Internet and network resources. Driven by a unique Fusion Technology, the firewall provides a central point of control over the UTM features making the solution extremely user friendly. Mr. Darji used default IPS policies to identify and prevent any potential DoS attacks. Stable Internet connectivity, unclogged network and reduced the loss of data packets now prevents wastage of valuable working hours.

Intrusion Prevented

Cyberoam‘s intrusion prevention system protected the organization against any internal or external intrusion attempts. The solution provides powerful protection by blocking intrusion attempts, protecting against malware, Trojans, DoS attacks, malicious code transmission, backdoor activity and blended threats. The IPS feature of the UTM has flexibility to configure multiple policies on users or machines. This leads to business friendly security. The IPS feature of Cyberoam also supports multiple protocols - HTTP, FTP, SMTP, POP3, IMAP, P2P and IM - and hence automatically detects, blocks or drops suspicious traffic.

Malware and Spam Free Environment

Check Mark Premium certified anti-spam solution ensures that not a single spam mail made it to the internal inboxes. The spam is neutralized at the gateway. On Installation, the spam protection had instantaneous effect. Without any human intervention, the anti spam feature has fine tuned itself to optimum performance irrespective to the mail‘s language and attachment. Cyberoam gateway anti virus and anti spam ensures that all the mail traffic over the Internet is clean and no restricted files enter the network. Its antivirus solution which boasts the industry‘s best virus detection rate of 98% ensures malware free network. The anti virus even inspects all the compressed files for any hidden malware and restricted file are stripped off. The anti-spam solution is also tied by an additional security layer called Virus Outbreak Detection. This unique feature protects the organization against any mail-based Zero Day Attacks.

Web Content Filtering

Cyberoam‘s 82+ category strong Web Content filtering technology kept the organization‘s internet resources productively focused. Cyberoam is an identity-based UTM. This enables Mr. Darji to create customized user identity-based policies. With Cyberoam, he can now selectively provide Internet access and download rights according to the user‘s working needs. He can even specify the amount of downloads that a group of users are allowed and at what time. Web filtering module blocks inappropriate and unsafe Web content, including phishing and pharming sites. Cyberoam's granular controls filter out bandwidth-intensive downloads such as streaming media and reduces unproductive burden on the bandwidth. This ensures that the employees were always productively focused.

Virtual Private Network

Cyberoam‘s IPSec VPN solution bridged the geographical distances between the organization‘s branch and head offices. This now ensures that the user can connect securely from any location and use the organization‘s resources. Highly encrypted traffic enforced security over the Internet and ensures that no malware sneaks through. IPSec VPN is being used at Ahmedabad, Hyderabad and Delhi offices to connect branch offices and head offices.

Bandwidth Management

Cyberoam‘s full-functioned bandwidth management feature ensures that the total Internet bandwidth is not monopolized by a particular user or application. Using Cyberoam‘s bandwidth management feature, the administrator can prioritize the bandwidth usage as per the organization‘s Internet usage policy. The administrator can now control the amount of bandwidth each user uses. Gujarat Apollo divides the bandwidth between the surfing and mailing solutions. If required, individual upload and download limits can be specified. This ensures end-to-end connectivity for all the users. “Purchasing Cyberoam helped us solve multiple issues, known and unknown. In short, Cyberoam UTM really gave us the best value for money. We are also looking for future expansion.” Mr. Darji concluded.