Specifications/Technical Information
Menlo Security
Menlo Security
Fukoku Mutual Life Insurance Co.
Demanded by the financial and insurance industries
while meeting high security requirements
Ensuring user convenience
Point of introduction
- Meets stringent security requirements of the financial and insurance industries
- セキュリティを確保しながらユーザーの利便性を大幅に向上
- Effectiveness demonstrated in post-implementation penetration tests
Fukoku Mutual Life Insurance Co.
General Manager, Business Planning Department
Hideizumi Komiya
Fukoku information system company
ICT Infrastructure Service Dept. ICT Infrastructure 3rd Group Manager
Mr. Goro Shimizu
Founded in 1923, Fukoku Mutual Life Insurance Co. is the only insurance company that has consistently adopted the mutual company form since its foundation. The company has a concept called "THE MUTUAL" for the 100th anniversary of its founding in 2023, but this is the next generation that evolves for the next 100 years based on empathy, connection, and mutual support. means "mutual aid".
The company believes that the most important responsibility of an insurance company is to “pay insurance claims without fail, no matter what happens”, and pursues growth to protect customers rather than excessive growth. there is In addition, we have continued to increase dividends for the ninth consecutive year, believing that our mission is to reduce the substantial insurance premium burden on customers through further enhancement of dividend returns.
Strict security requirements imposed on the financial and insurance industries
In order to ensure the advanced security measures required by financial and insurance institutions, the company has adopted a policy of not connecting PCs that connect to internal systems to the external Internet. If users need to connect to the Internet for information gathering, etc., they need to use several dedicated PCs prepared in the department. These PCs are connected to the outside via a completely different network from the in-house system, so there are two independent networks in the company, but this configuration is called "physical separation". is not uncommon in the financial and insurance industry.
From the point of view of security, this can be said to be a very strong measure, but end users cannot connect to the Internet from their desk PCs, and when doing business that accesses the Internet, they have to move to a PC for external connection each time. convenience was sacrificed.
Seeking to improve user convenience
Hideizumi Komiya, General Manager of the Business Planning Department of the company, said, "We knew that it was necessary to tighten security requirements, but it is clearly inconvenient that end users cannot connect to the Internet from their desks. There was also the problem of installation space, so I was always wondering if there was a way to do it,” he recalls. “Additionally, maintaining two networks is difficult and costly to manage, and can lead to so-called ‘shadow IT,’ where users try to connect to the outside world with their own devices.” (Mr. Komiya)
At that time, I attended a seminar on Menlo Security's isolation technology. After witnessing a technology called isolation that can reliably reduce risk without changing the user's environment, Mr. Komiya thought, "This will allow us to improve convenience while ensuring security. It's perfect." .
Consideration began immediately, but the most difficult part was persuading the company. “It took a long time to get people to understand because it was a technology that had never existed before,” says Mr. Komiya. However, Menlo Security's solution has been introduced at many major financial institutions, and there were also recommendations from companies that had already introduced it, so the introduction was finally approved.
Implementation went smoothly
Compared to the hardships leading up to the decision to introduce the system, the installation process itself went smoothly. Mr. Goro Shimizu, Manager of ICT Infrastructure Group 3, ICT Infrastructure Service Department, Fukoku information system company, Ltd. said, "Since it's a cloud service, we didn't need to set up the service itself. We had to do it here, so we couldn't just let it go." However, he also added that there were cases where it was necessary to set the connection destination separately because there are some devices in the company that cannot go through Menlo Security, such as devices that require a client certificate.
In this way, about 6,000 in-house employees, part-time employees, and affiliated company employees began using MenloSecurity's solution. Mr. Shimizu says, "There was no major confusion during the introduction, and we have not heard any complaints from users." One of Menlo Security's features, ``not being noticed by the user,'' is probably showing its effectiveness. I'm sure you feel that way," he added.
Effectiveness demonstrated in post-implementation penetration tests
Menlo Security's solution is originally a solution that isolates risks and prevents breaches, but Mr. Komiya said at the first stage, ``This solution cuts off connections with external C&C servers, etc. I thought it might be useful.” The correctness of Mr. Komiya's predictions was proved by the penetration test conducted after the introduction.
Penetration tests conducted by a third party tested whether communication would be made to an external server if compromised, but the attempt was unsuccessful. Mr. Komiya laughs, "I was happy to hear that the effectiveness of MenloSecurity was proven by an outside expert. I also got to know the upper management."
The next step is Email isolation and Mobile Isolation
Thus, almost all access to the website went through Menlo Security, except for some devices. And the company is considering Email isolation as the next step. The company is currently preparing to migrate its groupware environment to Microsoft 365 and plans to start using Email isolation as soon as the migration is complete, and the iPads used by sales staff will be Mobile isolation They are considering using it.
Solutions that can flexibly respond to future changes
Mr. Komiya said, "Working styles will change in the future due to the impact of COVID-19, and more offices will become free-address, but even if devices move around, Menlo Security can handle it." Trust in Menlo Security's solutions for
With Menlo Security, we would like to meet those expectations by further expanding functions and improving reliability.
User Profile
| Fukoku Mutual Life Insurance Co. | |
|---|---|
| location | 2-2-2 Uchisaiwaicho, Chiyoda-ku, Tokyo |
| Introduction time | April 2021 |
| URLs | https://www.fukoku-life.co.jp/ |
Inquiry/Document request
In charge of Macnica Menlo Security
- TEL：045-476-2010
- E-mail：menlo-sales@macnica.co.jp
Mon-Fri 8:45-17:30
