Simple Management of Highly Complex Firewall Infrastructure

As far as the security of data processing systems goes, the banking and financing sector marks the upper end of the requirement range. Outsourcing service providers for the banking industry like the IZB Informatik-Zentrum Muenchen-Frankfurt am Main GmbH & Co. KG must be able to guarantee the security and availability of the services provided according to rules—and, at the same time, ensure and optimize profitability. Customers of the IZB, a member of the Sparkassen-Finanzgruppe, include the BayernLB, Deka Bank, LBS Bayern, Deutsche Kreditbank AG, and the Sparkassenverband Bayern. Since 1994, the outsourcing specialist has provided a professional services portfolio ranging from the operation of high-performance computer centers and the management of decentralized client-server systems, mail and database hosting to IP-based voice communications.

Over the years, the IZB Informatik-Zentrum has built a highly complex firewall infrastructure to ensure the security of outgoing and incoming data traffic. More than one hundred gateways from well-known manufacturers were used in computer centers in Munich, Nuremberg, and Offenbach, as well as in additional server backbone locations and customer sites around the world. However, this infrastructure had reached its limits: Massive maintenance costs and the underlying system architecture have made troubleshooting virtually impossible. In addition, the associated management tool was not multi-client compatible—the provider offered this feature, but only via a cost-intensive add-on product. This situation had become unacceptable for economic considerations. Consequently, the team around Matthias Tauber, Department Manager Network Security at the IZB Informatik-Zentrum began to look for alternatives—developing a relationship with Barracuda Networks.

The Barracuda NG Firewall is the enterprise-grade network firewall that combines comprehensive, next-generation firewall capabilities—based on application visibility and user-identity awareness—with optimal efficiency and throughput. Coordinated WAN optimization, centralized management, and cloud-hosted content filtering and reporting are just a few of the key features supporting enterprise requirements. Barracuda NG Firewalls are recognized by the market for their suitability primarily in highly critical environments. But still, this argument did not fully convince Matthias Tauber saying, “I have to admit that I was very skeptical. Internationally renowned manufacturers were not able to offer the required management and troubleshooting functionality—so why should Barracuda be able to?“ An ISO-certified company, the IZB Informatik-Zentrum performs strictly defined processes in the context of “technical quality assurance before production“ which all new products have to pass. In addition, very high technology standards defined by the Sparkassen Informatik-Zentrum (SIZ) for all savings banks had to be considered. The team of the IZB Informatik-Zentrum evaluated Barracuda NG Firewall and two other identically configured firewalls within a test network for four months. Two Smartbit generators produced data traffic of up to two gigabits, while 500,000 sessions were generated to test the competing systems for real performance under load. Apart from the performance analysis, the tests primarily focused on the management and behavior in various failover scenarios which are extremely important for trouble-free operation. After completion of the tests, the result obtained was undeniable: Barracuda NG Firewall proved to be the best solution across all metrics and prevailed against competitors so that even Matthias Tauber was convinced.

• Following the decision for Barracuda NG Firewalls, the rollout was initiated and the majority of firewall products used to date were replaced. The objective will now be to successively convert 70 to 80 gateways to Barracuda NG Firewalls. Controlware, a long-time IT service provider based in Dietzenbach, will advise the IZB Informatik-Zentrum on all commercial aspects of the conversion.
• The ease of installation and maintenance of one single gateway does not play a role in large infrastructures anymore—as the sheer volume of systems results in an enormous expenditure of time and staff anyway. Barracuda NG Firewalls address this situation: All solutions are managed by dedicated and centralized servers allowing access to the full range of functionalities even at the operating system level.
• Based on the benefits provided by the Barracuda NG Firewalls for management, troubleshooting, and support, the IZB Informatik-Zentrum has drawn logical conclusions: Apart from a few exceptions, Barracuda NG Firewalls define the security standard in the IZB computer centers, server backbone locations, and customer installations. Matthias Tauber asserts that this will continue, “Especially with a view to upcoming business expansions, we are convinced that we have found the right partner in Barracuda. As far as the economic management of larger firewall structures or the reduction of operating costs through more efficient administration and troubleshooting is concerned, I can strongly advise companies to evaluate the Barracuda NG Firewalls. From our perspective, there is no better provider in these areas than Barracuda.”

• Reduced IT system maintenance by 1,000 hours per year.
• High ROI, reduction of operating cost through efficient administration and troubleshooting using Barracuda Central management.