Business Division Spinoff Requires New Strategy
With new companies comes the opportunity to do things right. Offices can tap the newest of designs and technologies. Users can be equipped with the newest phones and laptops. And IT can tap the newest in networking and security technologies. Such was the opportunity facing Vitesco Technologies.
An international leader in intelligent and electrified drive systems for sustainable mobility, Vitesco had been spun out of Continental AG, the German automotive parts manufacturing company, into a separate company.
Previously, Vitesco’s locations had been connected via MPLS, but once the carve-out was announced, Joel Jacobson, Global WAN Manager at Vitesco Technologies, realized he needed a new approach to the company’s network and security architecture. “At the end of the day, we needed a way to support our 70 locations and 20,000 remote users with a solution that was simple, allowed us to co-manage because we like to maintain control, and with a dev ops approach within IT of whoever builds and runs it.”
“Cato allowed us the flexibility to incorporate our WAN, Internet and remote access solutions into one neat package that could be managed with a small team of people.”
So he turned to C3 Technology Advisors, to help narrow down the options. “It wasn’t very difficult from there to see that there was only one solution – Cato SASE Cloud. Cato allowed us the flexibility to incorporate our WAN, Internet and remote access solutions into one neat package that could be managed with a small team of people,” says Jacobson.
Vitesco Technologies Sets Up New Sites in Minutes
One of the first capabilities Cato provided Vitesco Technologies was a unified management interface that allowed setting up new sites with minimum effort. “What would have taken us days in the past to do with other solutions, we could now do in minutes,” says Jacobson. “We no longer had to have a separate IDS/IPS, on-premises firewalls, or five different tools to report on each of those services. We could bring our cloud-based services directly into Cato’s backbone with our existing sites and treat them all the same.”
Addressing Multiple Use Cases with Cato
There were various critical use cases Jacobson needed to address, and Cato SASE Cloud proved to support them all:
- Supporting users and locations in China: One of the most critical topics Jacobson faced was the Great Wall of China. “We needed to get our Office 365 traffic out of China without breaking any laws. With Cato, we were able to steer our traffic in through a PoP in Tokyo and Office 365 works just as well in China as in any other location.”
- Supporting AWS connectivity at scale: An additional concern for Jacobson was AWS. “We have regional installations of cloud providers, and we needed to connect these sites into our network without complicated pairing or setup. It was also crucial for us to reach two gigs of throughput, and we were very happy with the results.”
- Supporting access to special applications: Jacobson needed to ensure that specific applications (such as HR, legal or engineering tools) were always up. “Like many global companies we had to secure traffic from various applications behind a single IP. With Cato’s dedicated IP support, we could steer specific websites and eliminate complicated routing or proxy settings.”
- Supporting threat prevention across all traffic: Finally threat prevention was needed everywhere. “With Cato SASE Cloud, threat prevention is built into our services so that even our smallest locations are protected from threats.”
Gradual Deployment of Cato SASE Cloud
One of the biggest advantages for Jacobson was the ability to roll out Cato gradually at a pace that fit his company’s needs. “We knew we would need to start slowly and pick up speed during the middle and end of the migration, as we worked out any issues with them.”
“By the time we got to our tenth site, our window dropped to two hours, and we rarely needed more than one hour to cut a site over from the old service to the new, and the actual outage time was usually no more than 15 minutes.”
With Cato, Jacobson found location migration to be quick and painless. After establishing the company’s datacenters and peering points, the process of migrating sites began. “By the time we got to our tenth site, our window dropped to two hours, and we rarely needed more than one hour to cut a site over from the old service to the new, and the actual outage time was usually no more than 15 minutes.”
As for the migration process, Jacobson and his team didn’t have to cut any corners. They worked with their sites prior to the migration to set up Cato Sockets in parallel to their existing WAN service. During the outage, they would switch from the old WAN equipment to the new equipment, test the applications, fail over Internet, and any other services that the site deemed critical.
“Security was extended at each site on the WAN, no matter the site’s size. And we know that our Internet traffic is properly secured. Extending our WAN to AWS and Azure was easy with the Cato’s virtual Sockets and where virtual Sockets aren’t ideal, we use IPsec connections without having to buy or maintain additional firewalls or Internet lines.”
Vitesco Technologies Gained: High Availability, Self-Maintenance, Deep Analytics, Policy Consistency
Cato SASE Cloud enables very large enterprise to accelerate and transform their global network and security infrastructure. “This is why we moved from our internally managed SD-WAN, remote access service and cloud-based Internet provider to Cato’s SASE platform.”
“This is why we moved from our internally managed SD-WAN, remote access service and cloud-based Internet provider to Cato’s SASE platform.”
With Cato, Vitesco Technologies achieved high availability across the board, removing the need for a regional hub or an expensive co-location facility for WAN or Internet services. Analytics and security events are centralized in one place to make analysis easier.
“If we run into any questions, Cato is there to help us. It’s easy to know what policies we have applied, and we know they’re consistent across our locations. Our security team is pleased to know that Cato maintains the platform and as we need to add capacity, it’s a simple phone call or email to get it resolved.”