YC and team turned to Illumio Core™ and quickly realized it was “the easiest way to do micro-segmentation.” For one, the real-time application dependency map lets them see all connections between servers and what their applications are talking to. With that capability, they understand what needs to be protected and can take immediate action on flows to block them or authorize. And with 600 applications at stake, the team exceeded expectations.
The ability to run policies in test mode before going into enforcement played an essential role in the success of their deployment. This empowered ongoing collaboration between infrastructure and security teams and application owners. The results? A reliable, thorough process for enforcement that helped them beat their most pressing deadline.
“We partner with application owners to review flows and help define policies. You couldn’t ask them to read firewall rules, but Illumio’s App Owner View map and plain language labels make it infinitely easier for them to understand the flows and apply policy. We are confident that our applications are protected with the right level of segmentation – with no disruptions during enforcement.”
Not only do YC and team continue to use Illumio to bolster their internal defenses, but it is also helping solve another challenge: PCI DSS compliance. Securing cardholder data is of paramount importance to Cathay. With Illumio Core’s mapping and policy creation capabilities, they’re able to meet many PCI compliance requirements. The team is also leveraging SecureConnect on over 1,000 workstations for instant workload-to-workload encryption of data in motion.
The alternative route for this compliance initiative was installing tens of data center firewalls to shore up their call center offices, amounting to an estimated $5M. With far less effort and spend, they’re well on their way to PCI peace of mind.