CheckPoint Software > Case Studies > E-REDES Enhances Substation Security with Check Point's Next-Generation Solutions

E-REDES Enhances Substation Security with Check Point's Next-Generation Solutions

Technology Category

Networks & Connectivity - Gateways
Networks & Connectivity - Routers & Bridges

Applicable Industries

Electrical Grids
National Security & Defense

Applicable Functions

Logistics & Transportation

Use Cases

Cybersecurity
Tamper Detection

Services

Cybersecurity Services
System Integration

About The Customer

E-REDES, formerly known as EDP Distribuição, is the primary energy distribution system operator in mainland Portugal. The company operates and maintains more than 99% of Portugal's energy distribution power grid, connecting over six million Portuguese customers through 220,000 kilometers of lines, approximately 500 substations, and 60,000 secondary substations. E-REDES has a dedicated team of 3,000 employees committed to delivering high-quality services. The company's infrastructure is vast and diverse, with many existing substations built and deployed over 20 years ago and new ones planned for the future.

The Challenge

E-REDES, the primary energy distribution system operator in mainland Portugal, faced a significant challenge in securing its vast and diverse infrastructure. The company operates and maintains over 99% of Portugal's energy distribution power grid, connecting more than six million customers through 220,000 kilometers of lines, approximately 500 substations, and 60,000 secondary substations. With the increased digitalization of its infrastructure, E-REDES recognized the heightened cybersecurity risk. The company needed a solution that could provide detailed visibility of all network traffic within substations to identify and analyze abnormal behavior. Additionally, it was crucial to segment zones at each substation, separating the engineering zone used by employees for remote access to systems from the operational technologies dedicated to critical power distribution functions. Lastly, E-REDES required security assets that could detect, identify, and prevent threats from affecting either zone.

The Solution

E-REDES identified Check Point as the best solution for its requirements. The company implemented Check Point 1200R Rugged Appliances in three substations, each with a different technology environment, as part of a successful proof of concept. The Check Point Rugged Security Gateway delivers Next Generation Threat Prevention for critical infrastructure and industrial control systems, securing Supervisory Control and Data Acquisition (SCADA) protocols and operational technology equipment with Firewall, IPS, Application Control, Antivirus, and Anti-Bot protection. E-REDES initially deployed the rugged gateways in 68 of its most critical substations. Administrators use Check Point R80 Smart Console for integrated security management across all deployments. Check Point R80 SmartView centralizes viewing through a friendly interface, allowing the E-REDES team to easily configure and monitor network activity and rugged gateway performance. Monitoring and logging data is delivered to the E-REDES Security Operations Center (SOC), where it is analyzed, correlated, and acted on if necessary.

Operational Impact

The implementation of Check Point's solutions has significantly enhanced E-REDES's ability to secure its critical infrastructure. The company now has detailed visibility into all traffic, enabling it to identify and respond to any suspicious activity. The centralized implementation of firewall rules and building profiles according to the different substation environments has given the E-REDES team control over its network traffic. The substation security initiative has become a flagship project for E-REDES, and the company is deploying the Check Point solution in 200 more substations. With first-time security visibility into all substations, the company gained peace of mind and significantly mitigated risk to mission-critical operations. In the event of a detected threat, the team can respond in seconds to prevent threats from entering critical zones.

Quantitative Benefit

Achieved visibility to see exactly what is happening in traffic across diverse substation environments
Assured controllability and enforcement through digital twinning of traffic and up-to-the-minute monitoring
Managed 500 devices with a click through centralized firewall rules and substation profiles