Case Study: Transforming Network Security and Cost Efficiency for a Business Analytics Consulting Platform
Overview
Nettology recently collaborated with a Business Analytics Consulting Platform that serves Fortune 500 companies and mid-market clients. This platform, powered by Amazon Web Services (AWS), supports both their client-facing services and internal operations through a web-based three-tier application.
As the company expanded, it encountered several critical challenges that threatened its operational efficiency and security. Nettology stepped in to address these issues, leading to significant improvements in cost management and network security. This involved optimizing IP addresses allocation, enhancing operating system security measures, and implementing robust role-based access control mechanisms.
Additionally, Nettology bolstered the cyber security posture of the data center, ensuring high-level protection against potential threats. These interventions not only safeguarded business operations but also facilitated seamless integration with cloud services, fortifying the platform’s resilience in the face of evolving cyber threats.
The Challenges
1. Runaway Costs
With rapid growth, the platform’s infrastructure ballooned from 10 servers to 30 in a short span. While AWS’s flexibility had been a boon, the surge in infrastructure led to a quadrupling of monthly costs, straining the company’s budget.
2. Security Issues
The company had numerous servers accessible from the outside world. Despite having a strict password policy, traditional network security best practices were not followed during the initial design phase. This oversight left the company vulnerable to potential security breaches.
3. Consultant/Staff Key Management Processes
High consultant turnover resulted in misplaced passwords and security keys. This, coupled with the absence of a robust methodology for restricting access to AWS resources and managing privileged account credentials, heightened security concerns.
How Nettology Helped
AWS Billing Assessment and Cost Optimization
Nettology’s initial engagement involved a comprehensive AWS billing assessment. Through detailed analyzing, our team identified potential annual savings of $30,000 without requiring any upfront costs. The client realized these savings almost immediately upon engaging with our consultants.
Addressing Security Concerns
As the relationship developed, Nettology discovered several security concerns and critical design flaws within the client’s environment. Key actions included:
- Logging Capabilities: We enabled logging capabilities and found that multiple users were logging into the AWS console using the original admin ID and password. This was a significant security risk.
- User Identification and MFA Implementation: Working with the Client IT Director, we identified these users, created unique, traceable usernames, and implemented multi-factor authentication (MFA) for accessing AWS resources.
- Role-Based Security: We implemented role-based security measures to ensure that access keys were not embedded in applications, preventing potential compromises.
Redesigning Network Security
Despite the presence of a VPN, it was not being utilized effectively. Many servers were accessible on the public internet through various ports, including RDP, SSH, and Microsoft infrastructure ports. Nettology’s approach included:
- Network and Server Security Redesign: Starting with testing and staging environments, we overhauled the network security, ensuring no downtime for the client’s internet-facing application.
- Ensuring Secure Access: We restricted public access to servers and enforced the use of the VPN for secure connections.
The Outcome
As a result of Nettology’s interventions, the Business Analytics Consulting Platform experienced:
- Significant Cost Savings: The company realized substantial savings in their AWS account, easing their financial burden.
- Enhanced Security: The risk of security breaches was significantly reduced through the implementation of robust security measures.
- Improved Processes and Methodologies: The client now has effective processes and methodologies in place for managing AWS resources and ensuring secure access, positioning them for future growth.
By partnering with Nettology, this Business Analytics Consulting Platform has transformed its infrastructure to be more cost-efficient and secure, setting the stage for continued success and expansion.
