Kenya Plant Health Inspectorate Service (KEPHIS) Nairobi, Kenya
KEPHIS Depends on Cyberoam for Internet Security
About Kenya Plant Health Inspectorate Service (Kephis), Government/PSU

Kenya Plant Health Inspectorate Services (KEPHIS) is a state corporation whose mission is to provide an effective and efficient science based regulatory service for assurance on quality of agricultural inputs and produce thereby promoting sustainable economic growth and development.

It's main function is to coordinate all matters relating to crop pests and disease control and undertake inspection, testing, certification, quarantine control, variety testing and description of seeds and planting materials.

Content filtering was one of the foremost factors when deciding on a security solution, which was required to protect the staff from accessing unproductive or dangerous websites.

Ms. Nancy Wambugu
ICT Support Analyst

According to Ms. Nancy Wambugu, ICT Support Analyst at KEPHIS, the company was facing the following security and connectivity challenges related to its business activities.

Access Control and Intrusion Prevention

The organization needed a firewall and an intrusion prevention solution. The combination of both the solutions was needed to protect the network against intentional and unintentional intrusion attempts, and Denial of Service attacks.

Web URL Filter & Choked Bandwidth

Organizations are faced with a constant battle to police large, distributed, networks where it is impossible to have a responsible person overseeing all employees' activity online. Organizations have a duty of care to provide a safe Internet experience for all their staff and need to demonstrate reasonable and effective measures to control access to the Internet. Content filtering was one of the foremost factors when deciding on a security solution, which was required to protect the staff from accessing unproductive or dangerous websites.

In case of blended threats, Ms. Wambugu was looking for a solution that could block all unauthorized download over the Internet. All Phishing, Pharming and malicious Websites need to be plugged. The company faced additional challenges with non-academic surfing, gaming, shopping, instant messaging and e-mails. There was no system in place to monitor or restrict surfing, which choked bandwidth and ruined organization's resources. Authorities needed a strong and flexible solution that would cater to the organizations need for content filtering, and manage bandwidth and provide them with total visibility of all network events.

The Cyberoam Solution

KEPHIS had experimented with Microsoft ISA server, which failed to do any sort of web content filtering and was also a tedious manual process. Reducing exposure to inappropriate web content at work was a key reason why KEPHIS was in need of a good content filtering solution.

Taking a careful view of the existing products in the market, Ms. Wambugu decided to deploy Cyberoam UTM. She deployed One (1) CR500ia appliance at Head Office in gateway mode.

  • Firewall and Intrusion Prevention

    Cyberoam firewall is ICSA and Checkmark certified - provides granular access controls over Internet traffic and the network resources. Coupled with Intrusion Prevention module, Cyberoam UTM can counter any Denial of Service attack. Mr. Wambugu now felt the network is secure.

  • Safe, Productive Surfing Unleashed

    Cyberoam UTM's web content filtering feature controls Internet access in the entire organization by blocking inappropriate and unsafe Web content, including phishing and other malware-laden sites. This is done through a constantly updated database of millions of sites divided into 82+ categories including pornography, P2P, entertainment and job search. Moreover, Cyberoam's identity-based filtering allows sets individual user Internet access policy, surfing quota, time limits and bandwidth restrictions.

  • Round it Off

    Summarizing her Cyberoam experience, Ms. Wambugu said, "Cyberoam is termed as an excellent product that delivers exceptionally high performance and I would strongly back it as - reliable security."