C A S E ST U D Y Imperva Skyfence Secures Office 365 Access for Mobile Employees at Metro Bank
Metro Bank Ramps Up Employee Productivity and Collaboration with Secure Access to Office 365 Apps About Metro Bank Metro Bank is Britain s first new High Street bank in over 100 years. With a focus on the customer, Metro Bank provides unparalleled levels of service and convenience to its customers. Launched in July 2010, Metro Bank now has 27 stores across London and the South East and has plans to open up to 200 by 2020. When it comes to IT, Metro Bank is an innovator as well, with an emphasis on enabling its 1400 colleagues across the UK to communicate and collaborate effectively. Metro Bank puts the latest Microsoft software and services to work, including the complete Office 365 Suite for email, office productivity and business applications, Dynamics CRM and Yammer. Metro Bank manages its 500 corporate Windows and Apple mobile phones using AirWatch Mobile Device Management (MDM). Due to the vital importance of protecting bank and customer data, colleague access to Office 365 was limited solely to users accessing the Microsoft applications from the corporate network. Challenges Metro Bank wanted to improve employee productivity by enabling off-network access to Office 365 and Yammer, but even with MDM in place, felt that the move was too risky. Yammer is vital to the company s internal collaboration process allowing knowledge sharing to occur among colleagues easily and efficiently via social media. It was decided to look for a solution that would enable them to fully leverage their investment in cloud applications without increasing the risk of company data and confidential information getting into the wrong hands. As a first step, the Infrastructure Delivery Team s goal was to provide full access to Office 365 for corporate owned device users, on or off network, and to extend access to Yammer to personal device users as well. As a second phase, specific colleagues were to be given off-site access to the more-sensitive information within Dynamics CRM. Industry Banking and Financial Headquarters London, England Employees Over 1400 Requirement Security for Office 365 apps Office 365 Challenges Lack of endpoint access control including control for BYOD Monitoring actions of users and administrators across Exchange, Yammer, SharePoint, OneDrive, Dynamics CRM and the Administrator Portal Detecting malicious behavior and use of stolen credentials 2
C ASE STUDY We needed a solution that would provide secure, off-site access to our Microsoft cloud applications. It was important the solution was simple, straightforward and transparent for colleagues, while giving the IT team full control over access and complete visibility into usage, explained Luis Aguiar, Infrastructure Delivery Team Leader at Metro Bank. Thorough visibility and reporting was essential to demonstrating the banks compliance with PCI DSS. Enhancing mobile endpoint management was another key requirement. Metro Bank wanted to limit off-network access to the corporate devices already managed with their AirWatch MDM deployment, and there was no straightforward way to enforce this policy with their existing tools. Imperva Skyfence for Office 365 Provides visibility and control over all endpoint access, including mobile devices, PCs and laptops Monitors actions of users and administrators across Exchange, Yammer, SharePoint, OneDrive, Dynamics CRM and the Administrator Portal Detects malicious behavior and use of stolen credentials with real-time remediation Skyfence Unique Advantages Metro Bank was introduced to the Skyfence Cloud Gateway at the Infosecurity conference in London and immediately saw the potential to resolve their Office 365 access control and security challenges. The team began an ultimately successful proof of concept and subsequently made the decision to deploy the solution to protect their entire mobile workforce. The deployment was completed within several days. In keeping with their cloud-based approach to IT, Metro Bank deployed Skyfence as a cloud-based in-line proxy. No on premise hardware or software was required. First, the team wanted to define a policy for Office 365 that restricts access to only managed corporate laptops and Windows mobile devices. A self-service enrollment was decided upon, enabling users to sign up for remote cloud access the first time they accessed Office 365. By leveraging AirWatch s capability to send a certificate to selected 3
devices, Skyfence was able to automatically determine which users were qualified to enroll for full Office 365 access and which users and devices could only access Yammer. Metro Bank implemented the full Skyfence Cloud Gateway to provide visibility into cloud application usage, including what data has been accessed, when and by whom. They are also using the security and protection features of the Skyfence Cloud Gateway to detect behavioral anomalies with app usage and to alert or block suspicious events in realtime. Going forward, Metro Bank can implement custom policies for any user from any endpoint, as needed. With Skyfence, Metro Bank colleagues can now securely access Office 365 and Yammer off-site. Skyfence has given us the visibility and control that we need in order to fully leverage the potential of cloud applications to increase productivity and collaboration across all of our stores, explained Aguiar. Email File Sharing Business Productivity Social Apps Cloud Gateway Metro Bank s Users & Devices Skyfence Usage Reports With Skyfence, Metro Bank colleagues can now securely access Office 365 and Yammer out of the office. Skyfence has given us the visibility and control that we need in order to fully leverage the potential of cloud applications on mobile devices. LUIS AGUIAR, INFRASTRUCTURE DELIVERY TEAM LEADER AT METRO BANK 4
Skyfence benefits for Metro Bank include: Global enforcement of access controls for both corporate and personal devices Consistent, detailed and clear visibility into all cloud app activity without any disruption to user experience or operations Dashboards and reports covering who accessed which cloud apps with the optional capability to see specific data and objects accessed PCI DSS compliance for cloud access outside of the organization Risk management through real-time alerting and blocking of suspicious access Rapid and simple deployment in the cloud Simple and seamless integration with AirWatch MDM Future Plans As part of their commitment to providing amazing levels of customer service and convenience, Metro Bank is rolling out tablets to support colleagues in store, as well as additional corporate mobile devices. The bank will use Skyfence to control access to Office 365 and other cloud assets from these devices. Conclusion To enable secure, compliant off-site access to Office 365, Metro Bank needed access control that went beyond MDM. With Skyfence, they found an effective solution that was transparent to users yet provided IT with granular visibility into cloud application usage as well as the ability to flag and even block suspicious behavior. Skyfence worked seamlessly with their AirWatch MDM deployment to provide broad access to corporate devices, while enabling personal-device users to safely access Yammer and collaborate with colleagues from outside of the office. 2015, Imperva, Inc. All rights reserved. Imperva, the Imperva logo, SecureSphere, Incapsula and Skyfence are trademarks of Imperva, Inc. and its subsidiaries. All other brand or product names are trademarks or registered trademarks of their respective holders. CS-METRO-BANK-0915-rev1 imperva.com 5