CheckPoint Software > Case Studies > Xero's Successful Cloud Migration and Security Transformation with Check Point CloudGuard and AWS

Xero's Successful Cloud Migration and Security Transformation with Check Point CloudGuard and AWS

CheckPoint Software Logo
Technology Category
  • Infrastructure as a Service (IaaS) - Public Cloud
  • Networks & Connectivity - Gateways
Applicable Industries
  • Cement
  • National Security & Defense
Applicable Functions
  • Product Research & Development
  • Quality Assurance
Use Cases
  • Construction Management
  • Tamper Detection
Services
  • Cloud Planning, Design & Implementation Services
About The Customer
Xero is a global online platform for small businesses and their advisors, headquartered in Wellington, New Zealand. The company has built trusted relationships with 1.6 million subscribers, enabling them to thrive through better tools, information and connections. Innovation is fueling growth at a blistering pace. To support its growth, Xero did more than simply migrate to the Amazon Web Services (AWS) public cloud—it completed a massive transformation that wove security and agility into the very fabric of its product development, security engineering, and partner relationships, with AWS and Check Point as key partners.
The Challenge
In 2014, Xero, a global online platform for small businesses and their advisors, faced a challenge with its infrastructure and security. The company was managing a premises-based infrastructure that supported almost 700,000 subscribers but often found itself spending time and resources on controlling the environment, which limited the team's ability to fully support product innovation. Xero decided that only a public cloud infrastructure could provide the capabilities needed to support its next wave of growth. In addition to scaling to support millions of new customers, Xero wanted to reduce its cost of service delivery, ensure high infrastructure availability, and defend effectively against evolving cyber threats. Agility is fundamental to Xero. Hundreds of product-based teams release more than 1,200 product features and updates each year. Xero wanted to reduce the time it took to build out DevOps infrastructure from weeks, to days, to hours, to milliseconds. It also needed to support internationally recognized security standards, so the new infrastructure had to be secure by design.
The Solution
Xero chose AWS for its breadth of compute, storage, and networking services. The AWS Well-Architected framework helped Xero build a secure, high-performing, resilient, and efficient infrastructure for the company's applications. The AWS environment gave Xero the opportunity to reduce costs, avoid downtime, and support its growth goals. For security, Xero chose Check Point as a trusted enterprise security partner for securing internal and outbound traffic. The Xero team worked closely with Check Point to implement security at every level of the infrastructure stack. They deployed 130 Check Point Gateways across 100 different AWS accounts running Check Point CloudGuard IaaS to keep data and assets safe from even the most sophisticated threats. Check Point CloudGuard IaaS delivers automated, multi-layered, elastic security that scales with the dynamic AWS environment. Xero deployed Check Point CloudGuard IaaS using a Transit VPC-style architecture. This enables traffic to be directed to a defined “security zone” for security scrubbing based on any number of attributes—regulatory requirements, policy, type of traffic, and others.
Operational Impact
  • The successful migration to AWS and the implementation of Check Point CloudGuard IaaS transformed Xero's security culture. Developers were given ownership of their AWS accounts and the ability to make their environments more secure. The on-demand computing power of AWS enables developers to experiment with new features and products in ways that were not possible before. CheckPoint R80 Security Management gives the security engineering team deep visibility into the security posture of all AWS accounts. With visibility, security became less of a business hurdle to overcome, it's a capability woven into the fabric of the business that accompanies every other function. In Xero's agile environment, the security engineering team works to improve data protection, eliminate downtime, and deliver value-added services to the DevOps teams. With on-demand cloud and security infrastructure scalability, Xero can confidently ensure that peak usage periods deliver the high performance that customers expect. At the same time, during lulls in activity Xero is not paying for capacity that sits idle. The AWS cloud and Check Point enabled Xero to achieve its primary goals of reducing service delivery costs while assuring high service availability.
Quantitative Benefit
  • Moved 700,000 customers, 59 billion records, and $1 trillion worth of transactions to a secure, fully managed AWS environment in nine months
  • Transformed the company's security culture across security engineering, DevOps, and partnerships
  • Automated security without slowing development and extend security management-as-aservice features to DevOps teams

Case Study missing?

Start adding your own!

Register with your work email and create a new case study profile for your business.

Add New Record

Related Case Studies.

Contact us

Let's talk!
* Required
* Required
* Required
* Invalid email address
By submitting this form, you agree that IoT ONE may contact you with insights and marketing messaging.
No thanks, I don't want to receive any marketing emails from IoT ONE.
Submit

Thank you for your message!
We will contact you soon.