Application for evaluation machine
- FAQ
Cato Networks
Cato Networks
Sapporo real estate development
- Insufficient security checks on commercial facility management contractors
- Due to physical problems in commercial facilities, it is difficult to set up a LAN configuration.
- It is difficult to request an environment that meets the company's standards because it was outsourced including infrastructure.
- A secure network environment is realized for each subcontractor of different scale regardless of location.
- Potential threats that were previously overlooked are now detectable
- Deepen mutual understanding with contractors regarding security and operations
Sapporo Real Estate Development Co., Ltd.
Corporate Planning Department
DX promotion group
Mr. Kenjiro Yamauchi
[Previous issues] Achieving a more secure environment by unifying network environments instead of relying on contractors for security operations
Sapporo Real Estate Development is responsible for the real estate business in the Sapporo Group, which has Sapporo Breweries as its core. The company develops, manages, and operates office buildings, rental apartments, share houses, etc., centered on large-scale complex facilities that can be called landmarks in the city, such as "Sapporo Factory" and "Ebisu Garden Place." In recent years, it has been working to expand new business areas that do not start with existing assets, such as developing PoC by utilizing equity investment and IoT beyond the framework of a real estate company.
The company outsources the operation of each commercial facility. However, since there were about 20 subcontractors and their scales differed greatly, it could not be said that they were able to grasp all operations in terms of security. Regarding this point, Mr. Kenjiro Yamauchi of the DX Promotion Group of the Corporate Planning Department says, "Some large contractors have built internal networks, and some small contractors use internet lines. Personal information and confidential information Regarding management, the department in charge of information protection led an annual audit, but it was only a written confirmation, and it could not be said that the check including clients and networks was sufficient." .
There is also the problem that it is difficult to require uniform security standards for each subcontractor. Since offices with a small number of people are scattered in the large premises of a commercial facility, it is difficult to set up a LAN configuration and the investment efficiency is poor. In addition, since the infrastructure was outsourced, it is not easy to request an environment that meets the company's standards because it involves investment by the outsourcee.
Therefore, in order to solve these problems fundamentally, the company started to study with the aim of realizing a network environment that is more secure and can be thoroughly managed.
[Product selection] The only option that can be used at the optimum cost for a scale of 40 clients
As mentioned above, it was difficult to take measures with a LAN configuration, so Sapporo Real Estate Development considered introducing a cloud security service. After comparing and considering the services of 3 to 4 companies, we decided to adopt "Cato SASE Cloud" proposed by NRI Secure Technologies, Inc. (NRI Secure).
“Competitors’ SASE products target at least 100 clients, which is too many for the Company scale (40 clients) and is completely unsuitable in terms of cost. In that sense, Cato SASE Cloud is the only option. In addition to NRI Secure, there were other companies that proposed Cato, but the initial cost was high at the time of introduction.We were well aware of NRI Secure's high technical capabilities. However, they also suggested ways to reduce the initial cost, so we chose them as a partner.” (Mr. Yamauchi)
The company decided to adopt Cato SASE Cloud in November 2021 and completed the introduction in January 2022. All installation work is done remotely. By sending the installation procedure manual to the subcontractor, issuing a registration code, and having them install it while referring to the manual, the work was carried out smoothly.
“Maybe because the applications we use are limited, there were no particular problems with the installation. The external free storage service that the contractor often used became unusable after installing Cato, so it was deleted because it was inconvenient.At this time, Sapporo After having the subcontractor understand that the use of such a service is prohibited under the Group's IT governance,
We solved the problem by having them use Rosoft's OneDrive and having them exit through a split tunnel." (Mr. Yamauchi)
[Effects of introduction] Detect potential threats that were previously invisible Deepen mutual understanding of security measures with subcontractors
Sapporo Real Estate Development deploys Cato SASE Cloud to each commercial facility it manages and operates. It is currently used by one site and 40 clients. Since its introduction, it has been operating without any major troubles.
It is said that he only had knowledge once.
Mr. Yamauchi says that the greatest effect of the introduction is that latent threats that were not visible before have been identified.
"There were four clients at a certain subcontractor, but IPS detected unauthorized communication. Upon investigation, it was found to be infected with malware. Therefore, although it is outside the Company control, We also checked other clients of that outsourced company and found that 25 out of 30 were infected with malware, which fortunately did not lead to an incident as we were blocking them with IPS. However, in the conventional environment, we would not have been able to notice such a threat, and I think it may have led to serious trouble.”
Another merit of this introduction is that the outsourcees are made aware of the possibility that careless actions can lead to threats, as in the case of the free storage service mentioned above. Mr. Yamauchi commented, "I believe that they understood the importance of security measures and proper operations. The introduction of Cato SASE Cloud was a good opportunity for us and our subcontractors to deepen their mutual understanding of cybersecurity risks." It must have happened,” he evaluates.
[Future development] Deploy Cato SASE Cloud in line with the increase in the number of subcontractors Consider using CASB to visualize usage status
Regarding the future, Sapporo Real Estate Development plans to proceed with the deployment of Cato SASE Cloud in line with the increase in the number of outsourcees. In addition, the optional feature CASB (Cloud Access Security Broker)
We are also considering the use of
"We would like to use CASB to help visualize the usage status of cloud services, analyze risks, and automatically shut down services," said Yamauchi.
Mr. Yamauchi also has the following to say about Macnica the primary domestic distributor of Cato SASE Cloud.
“I have been exchanging information with Macnica since I was appointed to Sapporo Real Estate Development in the fall of 2018.Through this, I was quickly informed about the concepts of Zero Trust and SASE, which led to the current implementation. I hope you will continue to provide new information and learn how to use Cato effectively."
User Profile
| Sapporo Real Estate Development Co., Ltd. | |
|---|---|
| location | Ebisu Garden Place Tower, 4-20-3 Ebisu, Shibuya-ku, Tokyo |
| Introduction time | January 2022 |
| URLs | https://www.sapporo-re.jp/ |
| Established in 1988 as a real estate company within the Sapporo Group. Since then, we have developed a real estate business centered on Ebisu, Ginza, and Sapporo, which are closely related to the Sapporo Group. From 2021, based on our new management vision, "Nurturing communities from people." there is | |
Inquiry/Document request
Macnica Cato Networks
- TEL：045-476-2010
- E-mail：cato-sales@macnica.co.jp
Mon-Fri 8:45-17:30
