Illumio > Case Studies > Ixom Achieves Secure Segmentation Across Environments with Illumio

Ixom Achieves Secure Segmentation Across Environments with Illumio

Illumio Logo
Company Size
1,000+
Region
  • Pacific
Country
  • Australia
Product
  • Illumio’s Adaptive Security Platform (ASP)
Tech Stack
  • Software Defined Wide Area Network (SD-WAN)
  • Multi-Protocol Label Switching (MPLS)
Implementation Scale
  • Enterprise-wide Deployment
Technology Category
  • Cybersecurity & Privacy - Cloud Security
  • Cybersecurity & Privacy - Network Security
Applicable Industries
  • Chemicals
Applicable Functions
  • Discrete Manufacturing
Use Cases
  • Cybersecurity
Services
  • Cloud Planning, Design & Implementation Services
  • System Integration
About The Customer
Ixom is a leading industrial chemical manufacturer based in Melbourne. The company has a portfolio of global businesses across various geographies. Ixom's IT infrastructure includes cloud data centers, on-premise servers, and brownfield applications. The company was facing challenges in securing its legacy applications that require unsupported platforms for continued operations. Additionally, Ixom wanted to harden its critical IT infrastructure to decrease the risk from vulnerabilities. The company had recently transitioned from Multi-Protocol Label Switching (MPLS) routing to a Software Defined Wide Area Network (SD-WAN), which allowed its core IT team to decouple controls from the network for more agility and effectiveness.
The Challenge
Ixom, a leading industrial chemical manufacturer based in Melbourne, faced multiple IT challenges securing legacy applications that require unsupported platforms for continued operations, as well as the desire to network harden critical IT infrastructure to decrease the risk from vulnerabilities. With a portfolio of global businesses across geographies, cloud infrastructure was critical to gaining efficiencies. Yet governing cloud environments posed its own security challenges. A transition from Multi-Protocol Label Switching (MPLS) routing to a Software Defined Wide Area Network (SD-WAN) allowed Ixom’s core IT team to decouple controls from the network for more agility and effectiveness. Adopting a Zero Trust security approach, they sought a whitelisting solution to limit exposure by preventing unauthorized access to any system. But manual methods proved untenable, both to architect and maintain.
The Solution
Ixom chose SaaS-based Illumio ASP to enforce Zero Trust across environments, allowing them to safely ringfence vulnerable applications from their other systems and gain visibility and control in the cloud. Deployment of the agent took two days. Ixom first locked down standard traffic before looking for anomalous behavior and working with application owners to remediate; they then modeled policy changes prior to enforcement in order to avoid any disruption. “We change behavior, install the new way, and easily find the people not adopting it before we turn things off. The visibility into policy modeling prevents risk because we know the impact of changes before we enforce.”
Operational Impact
  • Visibility across environments: The IT team can govern policy across data center, cloud, legacy, and other applications – whatever they are and wherever they run – from a single view using the real-time application dependency map.
  • Application ringfencing with Zero Trust confidence: Illumio ASP’s granular segmentation and whitelisting capabilities ensured prevention of unauthorized access.
  • Ease of use in policy management: Lowering the administrative burden to quickly and visually see anomalies or vulnerabilities made it ideal for outsourcing operations.
  • SIEM and technical management support: Ixom is now looking to integrate Illumio ASP with SIEM for Security Operations and ServiceNow to true up its CMDB.

Case Study missing?

Start adding your own!

Register with your work email and create a new case study profile for your business.

Add New Record

Related Case Studies.

Contact us

Let's talk!
* Required
* Required
* Required
* Invalid email address
By submitting this form, you agree that IoT ONE may contact you with insights and marketing messaging.
No thanks, I don't want to receive any marketing emails from IoT ONE.
Submit

Thank you for your message!
We will contact you soon.