At a glance
- Client
- A services company with a largely remote workforceName withheld for confidentiality
- Focus area
- Remote Workforce
- Scope
- SASE design, rollout and VPN retirement
The challenge
All remote traffic went through a central VPN, even when employees were using cloud applications like email and CRM. The VPN was congested, video calls dropped, and staff found ways around it.
Security teams had little visibility into what remote devices were accessing.
Our approach
Map applications and users
We identified which applications each group needs and how sensitive each one is.
Deploy SASE
A cloud security service checks identity and device health, then connects users straight to the app.
Apply consistent policy
Web filtering, data protection and threat prevention apply wherever staff work.
Retire the VPN
Users migrated in groups until the legacy VPN could be switched off.
The solution
Remote employees now connect directly and securely to the applications they need, with no VPN bottleneck. Security policies apply equally at home, in the office and on the road.
IT sees who is accessing what, from which device, in one place.
Results
- Direct-to-cloud access without VPN congestion
- Identity and device checks on every connection
- Consistent security wherever staff work
- Legacy VPN retired
Technology used
- SASE
- Zero-trust network access
- Secure web gateway
- CASB
- Identity provider integration
Facing a similar challenge?
Tell us what you are working on. We will walk you through how we would approach it, with no obligation.