Instituto Nacional das Comunicações de Moçambique, Mozambique, Africa
INCM Deploys Cyberoam NGFW to Sieve Internet Traffic and Establish Secure VPN Tunnels
About Armoni Pazarlamaz,Government - Telecom and Postal

INCM, a Regulatory Authority for Postal and Telecommunication sector in Mozambique has grown by leaps and bounds since its establishment in 1992. Its prime objective is to grant commercial privileges to potential representatives of the Postal and the Telecommunication sector.

With its central office located in the capital of Mozambique, Maputo and provincial offices located Nampula Beira, and Tere provinces, INCM reaches out over Mozambique. Over time, it has established itself a strong and highly respected entity of its domain.

"Cyberoam gave us a solution that armoured our organization from unproductive use of the Internet and from virus attacks and Spams. It helped us induct Identity based bandwidth management into our system. Provincial Office users can seamlessly authenticate and access Head Office resources over a secure VPN tunnel"

Mr. Renis Machawana
IT Manager

INCM Deploys Cyberoam to Sieve Internet Traffic and Wipe VPN Woes

Pondering on the organization's Internet security requirements, Mr. Renis Machawana, IT Manager of Instituto Nacional das Comunicações de Moçambique (INCM) needed, "A solution that can allow us to keep a check on data entering and leaving the network parameter. Spam and Virus attacks had become painfully regular. A secure VPN connection between Head and Provincial Office(s) was also required."

To summarize the requirement, INCM was looking for a one-stop solution that could:

Shield the Network Periphery and Keep Malicious Attacks at Bay

VPINCM has come a long way since 1992. The more the telecommunications industry grows in the country the company grows and stretches its limbs far and wide; more is its vulnerability to Internet threats and attacks. Simply locked offices and buildings cannot protect information held by computers. Public servers, such as Email and web are very vulnerable to attacks over the Internet. Mr. Renis wanted a solution that would control and monitor the entire Internet traffic flowing to and from the Head Office, the Provincial Office(s), and the outside world. Prevention from threats becomes an essential aspect of this.

Need for Internet Traffic Control and Filtering

In the absence of a Web content filtering solution, productivity and precious internet bandwidth was dented due to unrestricted access to irrelevant websites. A generous chunk of bandwidth was also eaten up by exhaustive torrent applications. Internet bandwidth is the driving force of any organization's critical applications. Hence, there was a need to monitor Internet access and a need of a content filtering solution that could audit data for users' online behaviour.

VPN Woes

At INCM, the Provincial Offices always need to access the resources configured at the Head Office. Security is very critical in this case as non-secure flow of data can easily be tapped by an intruder. This needs a secure VPN connection that caters to internal communication and application access over Internet.

The Cyberoam’s On-Cloud Management Service Solution

After scouring the market for the correct solution, INCM purchased Four (4) Cyberoam Appliances. Two (2) appliances, CR100ia and CR100iNG were deployed in Gateway mode at the Head Office in Maputo and two (2) CR35wiNG appliances which were deployed in gateway mode at their Provincial Office(s) at Nampula and Biera respectively.

The business benefits were as follows:

  • Firewall

    Interloop operates Cyberoam's ICSA and Checkmark Certified Perimeter Firewall between the Internet and the organization's network to establish a secure environment for the organization's computer and network resources. The Perimeter Firewall is a key component of the INCM network security architecture. This Perimeter Firewall policy governs how the Perimeter firewall will filter Internet traffic to mitigate the risks and losses associated with security threats to the INCM network.

    This policy is designed to protect employee computers from spam, virus and other malicious attacks by restricting access to computers on the INCM network and provides granular access controls over Internet traffic as well as network resources. The Anti Spam feature has cut down the level of Spam that enters the network to half.

  • Regulated Internet Usage

    Cyberoam's Multilink manager increases the overall network performance by load balancing the network traffic amongst the Three (3) ISP links that terminate in the company network, delivering continuity in security.

    On failure, the load is automatically transferred to the other ISP link, which leads to 100% Internet uptime, ensuring affluent connectivity to their employees.

  • Effective Filtering

    The Web is a critical research resource for INCM. It recognized its responsibility to both ensure the productive use of this valuable resource, and to provide a safe online working environment.

    INCM installed Cyberoam to minimize the risk of other web security threats. In addition, they chose Cyberoam to help improve employee productivity and save network bandwidth. Cyberoam's granular controls filter out bandwidth-intensive downloads such as streaming media and Internet video thus reducing unproductive burden on the bandwidth. This ensures that the employees are always productively focused.

    Cyberoam's content filtering database has more than 44 million sites neatly categorized into more than 82 categories. "In addition, we are able to customize the Filtering Policy based on our requirement at both, the Head Office and the Provincial Offices. The Cyberoam-AD Server integration was non-patchy and Identity based policies as per usage and requirement can easily be assigned." Mr. Renis added.

  • Establishing a Secure Site to Site VPN Connection

    We no longer have to worry about data leakage issues when a Site to Site or an IPSec VPN Connection is established between our Head and Provincial Offices. Cyberoam seamlessly allows our employees to create secure VPN tunnels and access the network servers." an emphatic Mr Renis added.

  • To Conclude

    Mr. Renis signs off by describing Cyberoam as "A value for money product that provides a holistic solution to more than one network security concerns. ROI is handsome and exceeds my expectations." Cyberoam helped INCM to install a security appliance to effectively filter Internet content and establish a secure VPN connection between offices. Additional benefits include implementation of Identity based Management and Multi Link Management."