The World 1st Security L2 Switch, SG2024
A Government Organization

SG2024 was introduced to reinforce network security of the A Government Organization and district courts and to improve stability and reliability through internal security solution on all court network
The organization set up ‘21st legal development plan’ for the advancement of legal system, and has progressed an improvement of legal, institutional and customary practice for a strict application of the presumption of innocence. Sinc2006, it endeavors for a fundamental reformation under the maxim of serving people and jurisdiction with people. As a means of it, the organization employed SG2024 for an improved service and a stable internal network security.

Background

• “All SG2024” with an aim of cost reduction and stable security system”
In June 2007, the organization was attacked by a user who accessed via court network. The user was infected by ALMAN.C virus and did not recognize that infection. Thus, the attack on internal network was spread and network became broken down. It led to the stop of civil complaint work like reception of cases, and the organization suffered a heavy blow.

It warned the organization the severity of infringement and became to review its solution. Under the basic principles of low cost but definite security, they came to a conclusion to introduce SG2024 with L2 Switch and security and control system after a long discussion.

As such, they resolved the matters of low cost and stable security environment with SG2024.

Details of introduction

• High appreciation of its strict security in addition to basic switch function
It was in 2007 when the organization began to review specific internal security solution. Since the security accident, they aimed to introduce stable network solution by obstructing access level attack and harmful traffic which had no damage on work. However, there were not many solutions that were exclusively dedicated to access level attack and those were expensive. And, if they aimed to defense L2 attacking route, they had to change network structure. It was a huge burden to policy decision makers and managers. And, as expensive security equipments were not exclusive internal network solution, it was huge burden to control wide scope of access level. For this reasons, they began to review SG2024. The spokesperson said that they selected SG2024 because it does not require huge investment, can defend ARP Spoofing or DDoS attack which could not be detected in L2 level with lenient introduction as being L2 switch. The efficiency over investment, and leniency satisfied the them so that SG2024 was finally introduced.

Suggestions

• Internal security system with low cost and high efficiency
The company suggested the following 4 expectation effects.

Short-term construction with low cost
- Excellent performance over cot, and high reliability that can be constructed in a short time
- Easy introduction without changing the existing network

Publicity and reliability by reinforcing internal security function
- Publicity and reliability available as a public institution by reinforcing ability/system to protect harmful traffic, internal attack and hacking threat

Low operation load by introducing internal security solution
- Available of reducing operation load as it enables network resource (IP/MAC/Switch equipment) control and finding cause of trouble at simple VNM screen
- Low operation cost as it enables to have preemptive measurement by SG2024' self-running function

Project without risk
Highly unlike for equipment down as being L2 switch, and in case of introduction, it can secure basic value as L2 switch.

Solution

• Sound implementation from existing system, protection of internal network and realization of integrated management system
As being requested by the organization, the existing L2 Switch was replaced to SG2024 to block harmful traffic, and district courts also replaced L2 switch to SG2024 to protect network. Visual Node Manager Server was installed at the organization for an integrated access level management. They have equipped real-time monitoring system of network resources including hacking, equipment condition and traffic.

Result

• Realization of stable security condition and huge cost reduction
The security network and cost reduction are the characteristics of SG2024 solution. The previous system was vulnerable for hacking and attacking as the internal network security was dependent upon a user. However, now when there is any problem, SG2024 can create blocking harmful traffic promptly even without the engagement of administrator within few μm or ms. It means the system is not reacting after a trouble, but is preventing any trouble in advance. Thus it is evaluated to secure reliability as a public institution by preventing troubles like work suspending. And VNM, an integrated internal management system was installed in the organization, it is available to have centralized operation of the organization and other organizations. Accordingly, it can figure out trouble real-time to response it rapidly which reduces work load of an administrator to a great deal. And, it was not purchasing high price equipment, but was a simple change of L2 Switch without network change. It satisfied the customer in terms of lenient implementation.