Local Government

Local Authoruty

Helping a Local Authority with Application Delivery

Overview

Our client, a local authority, sought expert assistance in enhancing their remote access services and implementing safe application delivery methods Having successfully utilised F5 products for approximately a decade, they needed an F5 specialist to help maintain application lifecycle and security while maximising return on investment and delivering powerful new digital services. As the UK’s most certified F5 specialist and F5 Gold Partner, FullProxy was chosen to determine the right solutions, deliver optimal configurations, and provide operational support.

The Challenge

The local authority faced a complex set of cyber security challenges, underscored by the alarming statistic that more than two million attempted cyber attacks were made against UK councils in 2022. This surge in cyber threats targeting local authorities and governments necessitated a comprehensive approach to protect employees, users, and data.

The authority’s primary challenge was to enhance their existing remote access services while simultaneously ensuring safe access to both internal and external web services. This needed to be achieved without causing operational disruption, a critical consideration given the vital nature of web services and data for council tenants, employees, and social care partnerships.

Another significant challenge was improving the protection of public-facing web services against an ever-evolving landscape of cyber security threats. This required not only robust defensive measures but also the ability to adapt to new types of attacks as they emerged.

Network segmentation presented an additional challenge. The authority needed to implement a system that would allow users access only to the resources they required, a crucial step in minimising potential damage from any security breaches.

While the authority had been using F5 products successfully for about a decade, they faced the ongoing challenge of maintaining optimal configuration and ensuring continued return on investment. This required a delicate balance of leveraging existing infrastructure while implementing new solutions to address emerging threats and service needs.

Working closely with the local IT team, our expertise and agility at FullProxy have allowed us to deliver complex, time dependent and secure IT solutions. In turn this has enabled the local authority to provide scalable and secure digital services for their staff, service partners and constituents alike.  At FullProxy we regard our working relationship with the local authority as a key partnership.  We envisage the partnership growing stronger, whilst continuing to deliver value added services for the foreseeable future.

Stephen Mellon, Technical Consultant
FullProxy

FullProxy's Solution

To address these challenges, FullProxy implemented a comprehensive solution:

F5 Advanced Web Application Firewall (AWAF)

Implemented to provide web application security for common applications like Microsoft Office, offering protection against DDoS attacks, bot defence capabilities, API protection, and signature-based attacks.

F5 Access Policy Manager (APM):

Added to create a secure environment for users to remotely access applications in the infrastructure while preventing data leaks.

F5 BIG-IP Local Traffic Manager (LTM):

Enabled the authority to securely and efficiently route web traffic to a third-party cloud web proxy provider.

Fortinet FortiGate:

Delivered a web filtering solution using this next-generation firewall, providing high-level threat prevention and protection.

Comprehensive Support:

Provided full consultation, design, planning, implementation, and operational support for all F5 solutions within the authority’s infrastructure.

Results and Benefits

Our partnership with the local authority yielded significant improvements:

  1. Secure Web Environment: The authority now delivers a secure and robust web application and remote access environment.
  2. Consistent User Experience: Provided consistent user experience and access to data while protecting against threats.
  3. Enhanced Network Security: Implemented a highly segmented and secure network environment, ensuring that employees, tenants, students, and service partners receive access only to required resources.
  4. Improved Cyber Threat Protection: Strengthened defences against common cyber security threats, including the OWASP top 10.
  5. Efficient Traffic Management: Enabled secure and efficient routing of web traffic to third-party cloud web proxy providers.

Are you interested in finding out more about the products mentioned in this case study? If the answer is yes, why not arrange a chat with one of our consultants today who can talk through F5 and Fortinet solutions that are right for your network.

Why FullProxy?

FullProxy proved to be the ideal partner for this local authority due to several key factors. As the UK’s most certified F5 specialist and an F5 Gold Partner, we brought unparalleled knowledge and experience to the project. Furthermore, out solutions addressed both immediate security needs and long-term infrastructure goals.

Our expertise in upcoming projects, such as cloud hosting, positioned the authority for future technological advancements.

By choosing FullProxy, the local authority not only enhanced their current security posture but also positioned themselves for continued technological agility.

NHS Lothian had discovered their F5 appliances were sailing with improper configurations, leaving their network vulnerable to malicious intruders. With the spectre of cyber threats looming large, including the ominous prospect of patient data breaches, the need for swift and decisive action was paramount.
In today's cyber security landscape, universities face the dilemma of providing seamless yet secure remote access to their staff and students, irrespective of their geographical locations. For a prestigious UK top 20 university with a sprawling network encompassing thousands of individuals dispersed across the UK and beyond, this challenge was particularly daunting.
A prominent gaming company approached FullProxy seeking expertise in reviewing and implementing firewalls to strengthen their cybersecurity infrastructure. As a rapidly growing outfit in the games sector, they manage substantial volumes of sensitive customer data, making robust security measures paramount to their operations.
A financial institution was facing challenges with automation, config consistency and security posture and planned projects for open banking initiatives. They sought FullProxy’s consultancy services to address these issues and improve their current cyber security infrastructure and overall network traffic management of the F5 products they were using.