Xero 借助 Check Point CloudGuard 和 AWS 成功实现云迁移和安全转型
技术
- 基础设施即服务 (IaaS) - 公共云
- 网络与连接 - 网关
适用行业
- 水泥
- 国家安全与国防
适用功能
- 产品研发
- 质量保证
用例
- 施工管理
- 篡改检测
服务
- 云规划/设计/实施服务
关于客户
Xero 是一个面向小型企业及其顾问的全球在线平台，总部位于新西兰惠灵顿。该公司已与 160 万订户建立了值得信赖的关系，使他们能够通过更好的工具、信息和联系来蓬勃发展。创新正在以惊人的速度推动增长。为了支持其发展，Xero 所做的不仅仅是迁移到 Amazon Web Services (AWS) 公共云，它还完成了一项大规模转型，将安全性和敏捷性融入到其产品开发、安全工程和合作伙伴关系的结构中，并与 AWS 合作和 Check Point 作为主要合作伙伴。
挑战
2014 年，面向小型企业及其顾问的全球在线平台 Xero 面临基础设施和安全性的挑战。该公司正在管理一个支持近 700,000 个用户的本地基础设施，但经常发现自己花费时间和资源来控制环境，这限制了团队全面支持产品创新的能力。 Xero 认为，只有公共云基础设施才能提供支持下一波增长所需的功能。除了扩展规模以支持数百万新客户之外，Xero 还希望降低服务交付成本、确保基础设施的高可用性并有效防御不断变化的网络威胁。敏捷性是 Xero 的基础。数百个基于产品的团队每年发布 1,200 多个产品功能和更新。 Xero 希望将构建 DevOps 基础设施所需的时间从几周、几天、几小时、几毫秒缩短。它还需要支持国际公认的安全标准，因此新基础设施的设计必须保证安全。
解决方案
Xero 选择 AWS 是因为其广泛的计算、存储和网络服务。 AWS Well-Architected 框架帮助 Xero 为公司的应用程序构建了安全、高性能、弹性且高效的基础设施。 AWS 环境使 Xero 有机会降低成本、避免停机并支持其增长目标。出于安全考虑，Xero 选择 Check Point 作为值得信赖的企业安全合作伙伴，以确保内部和出站流量的安全。 Xero 团队与 Check Point 密切合作，在基础设施堆栈的各个级别实施安全性。他们在 100 个运行 Check Point CloudGuard IaaS 的不同 AWS 账户中部署了 130 个 Check Point 网关，以确保数据和资产免受最复杂的威胁。 Check Point CloudGuard IaaS 提供自动化、多层、弹性的安全性，可随着动态 AWS 环境进行扩展。 Xero 使用 Transit VPC 式架构部署了 Check Point CloudGuard IaaS。这使得流量能够根据任意数量的属性（监管要求、策略、流量类型等）定向到定义的“安全区域”进行安全清理。
运营影响
数量效益
Case Study missing?
Start adding your own!
Register with your work email and create a new case study profile for your business.
相关案例.
Case Study
System 800xA at Indian Cement Plants
Chettinad Cement recognized that further efficiencies could be achieved in its cement manufacturing process. It looked to investing in comprehensive operational and control technologies to manage and derive productivity and energy efficiency gains from the assets on Line 2, their second plant in India.
Case Study
Data Capture for Afghanistan Forces
Electronic equipments on the field of Afghanistan provided information on the status of the vehicle and to identify potential threats surrounding it to the British Force. The monitoring and interpretation of this data requires robust and sophisticated digitization for data capture and communication.
Case Study
Digital Transformation of Atlanta Grout & Tile: An IoT Case Study
Atlanta Grout & Tile, a Tile, Stone & Grout restoration company based in Woodstock, Georgia, was facing challenges with its traditional business model. Despite steady growth over the years, the company was falling behind the web revolution and missing out on the opportunity to tap into a new consumer base. They were using independent software from different vendors for each of their department information and workforce management. This resulted in a lot of manual work on excel and the need to export/import data between different systems. This not only increased overhead costs but also slowed down their response to clients. The company also had to prepare numerous reports manually and lacked access to customer trends for effective business decision-making.
Case Study
Enhancing Security and Compliance in Remitly's Global Money Transfer Service with Fastly
Remitly, an online remittance service, was faced with the challenge of securing its proprietary global transfer network. The company needed a security solution that could meet PCI requirements and protect customers' sensitive transactions through its mobile application. The solution had to be capable of defending against new and emerging attack types without impacting performance. Remitly also had to deal with irregular traffic patterns, such as a sudden spike in account transfers from a small network segment on the Pacific coastline of South America. The company needed to determine in real time whether such traffic indicated an attack or valid requests. A traditional web application firewall (WAF) would not be able to distinguish this traffic, potentially leading to customer frustration if the IP was blacklisted.
Case Study
Major Aerospace Company Automates Asset Management
The O&M division of an aerospace and global security company was using spreadsheets to manually track more than 3,000 assets assigned to students and staff. Maintaining audit trails for this high volume of equipment became increasingly time-consuming and challenging. The chore involved knowing precisely what equipment was on hand, what had been issued, its location and the name of the custodial owner of each item. Every aspect of this task was carried owner of each item. Every aspect of this task was carried out by individuals with spreadsheets. Manually documenting the full lifecycle of each asset added to the burden. This included tracking maintenance requirements and records, incidents and damages, repairs, calibrations, depreciation, and end-of-life data.
