Website browsing is essential for business, but conventional countermeasures are limited to rapidly increasing threats

Yusen Travel is mainly engaged in business travel that supports corporate business trips, as well as arranging group and theme trips, as well as cruise trips using the Asuka Ⅱ, a large cruise ship owned by a group company. In addition, we are also focusing on providing BTM (business travel management) solutions that aim to reduce expenses related to business trips, such as reservations for overseas business trips and overseas assignments for companies, emergency support, crisis management systems, and other services.

Ryowa Diamond Air Service belongs to the Nippon Yusen Kaisha、またはNYK Line Group like Yusen Travel, and its main business is business travel that supports corporate business trips. As part of the company's business, it is necessary to browse domestic and international websites, as it arranges hotels and gathers local information. However, in recent years, threats on the Internet have increased rapidly, and it is said that malware such as ransomware was installed in the website visited by employees. “We had taken measures such as web filtering and antivirus, but the Company were worried about whether we could deal with all the sophisticated threats of recent years. However, considering our responsibility as a company that provides services to many customers, we thought it was essential to further strengthen security," said Yusen Travel's Information Systems Department Information Systems Team. Mr. Nozomi Kamio looks back on those days.

Ryowa Diamond Air Service was similarly concerned.

“Since the Company uses ordinary PCs instead of VDI, if infected with malware, etc., there is a high possibility of suffering serious damage, and recovery is expected to take considerable time and effort. With threats increasing, we decided that this would be a bad idea, so we decided to review it in line with Yusen Travel's strengthening of security," said Keiichi Hayasaka, chief of information systems at Ryowa Diamond Air Service Management Department. speaks.

Highly rated unique isolation technology that reliably eliminates infections via websites

While gathering information, he attended a Macnica seminar in February 2016 and learned about Menlo Security. "We focused on a unique isolation technology that is different from conventional countermeasures. After hearing that the platform on the cloud loads and executes the website on behalf of the client, and only passes display information to the client, we decided to use this technology. We thought that we could definitely eliminate infections via websites.'' (Mr. Kamio)

In addition, because it is a cloud-based service, there is no need to install software on the client, which reduces the burden of installation, and its high cost performance was also evaluated. "Since Menlo Security is a new solution, we were concerned that there was little implementation experience, but the Company had previously implemented another solution from Macnica, so we felt confident and confident in the support." Mr. Kamio)

Yusen Travel later implemented PoC (Proof of concept/evaluation). Judging that it can adapt to the current environment, we decided to adopt it in June. For the introduction, we adopted a multistage proxy configuration with Menlo Security as the upper proxy and web filtering as the lower stage proxy, but the existing web filtering service did not support the multistage proxy configuration, so we decided to introduce a new web filtering service. decided. From June to August, we selected a new web filtering service, and after verifying whether it could be used in combination with Menlo Security, we proceeded with the setting and construction work. The deployment to some users started in October, and the migration work was completed in November.

In line with this, Ryowa Diamond Air Service also introduced Menlo Security. "In the Company case, we didn't have an existing proxy, so the introduction went smoothly. We conducted a trial operation on several PCs from September, but some websites could not be viewed. Although it was necessary to consider the exclusion settings, Yusen Travel, which started operation earlier, provided us with a list of websites, and we were able to reduce the workload." (Mr. Hayasaka)

Full-scale operation started in December 2016.

The effect of Menlo Security is strongly felt by accessing unauthorized websites

The effects of introducing Menlo Security were immediate. An employee reported that when he opened a website by doing a search in his browser, he was greeted with an unfamiliar warning screen and the client was beeping. I used another client to access the website, but was blocked by Menlo Security and could not open the page. “When I looked it up, it turned out to be a fraudulent website. The reason was that the employee’s client had been left out of the migration process. I did.” (Mr. Kamio)

Since Menlo Security is still a new product, they expected some inconveniences in its introduction and operation. Mr. Kamio also said, ``At first, the Company had a series of inquiries about not being able to connect to the website, but as the exclusion settings were enhanced, these problems were almost resolved. is an environment where you can use the Internet securely.In that sense, even if there are some inconveniences, I think it is a great merit that I have gained a sense of security."

I want to enhance the list of exclusion settings and strengthen the operation system

With this introduction, Macnica created and provided its own manual for users. We support smooth operation. Mr. Kamio said, ``Whenever we had an inquiry, we received accurate answers and advice, which was very helpful.We also switched the lower proxy at the same time, so I thought it might be difficult to isolate if a problem occurred. , my fears were unfounded.'' Mr. Hayasaka added, ``Since it was our first time implementing security measures, we had no knowledge or know-how, and we asked some fairly basic questions, but they answered quickly and thoroughly. ” and highly praised the response.

In the future, for some websites that had problems viewing, they would like to enhance the list of exclusion settings so that they do not interfere with business, share this information within the company, and strengthen the operation system. is.

User Profile