# Secure Remote Connectivity to 100 Critical Infrastructure Sites, Nationwide

- Link: https://www.agilicus.com/case-study/remote-connectivity-systems-integrator/
- Published: 2020-12-24T14:35:40+00:00
- Author: Don Bowman

CASE STUDY

---

## Secure Remote Connectivity to 100 Critical Infrastructure Sites, Nationwide

A major systems integrator that services critical infrastructure across the United
States seamlessly transformed their service model through Zero Trust, to reduce 
costs while enabling secure remote connectivity to over 100 customer sites.

### Read MORE

![vpn-replacement-solution](https://www.agilicus.com/www/b279a4b3-solutions-cards_vpn.
svg)

## Case Study:⏎ Enabling Secure Remote Connectivity to 100 Critical Infrastructure Sites, Nationwide

**A major systems integrator that services critical infrastructure across the United
States seamlessly transformed their service model through Zero Trust, to reduce 
costs while enabling secure remote connectivity to over 100 customer sites**.

### Summary

A major systems integrator that primarily supports water treatment facilities across
the United States needed a way to remotely connect to over 100 on-site systems to
perform support, maintenance, and troubleshooting. In order to do that, the systems
integrator also had to comply with customer security requirements for remote access(
no shared credentials, multi-factor authentication, privileged access). Agilicus
AnyX, a Zero Trust Network Access platform, enabled remote connectivity for the 
systems integrator without requiring any new hardware, clients, or a VPN. As a result,
access was simplified for the systems integrator while ensuring they could adhere
to each customers expectations on security.

## Network Modification Using Agilicus AnyX to Create an Outbound Only Connection at IEC 62443 Level 3.

![OT-Agilicus-Connector](https://www.agilicus.com/www/d520a73f-ot-agilicus-connector.
svg)

### Challenges with enabling remote connectivity for support and maintenance.

![cyber-attack-vpn-compromise](https://www.agilicus.com/www/9e00501b-remoteaccess-
threat-icons_1-vpn.svg)

Remote access was particularly important for the systems integrator with over 100
sites located coast to coast. The systems integrator had so far been forced to send
technicians to site in order to support customers. The ability for technicians to
remotely connect for immediate support from anywhere, on any device represented 
significant cost savings and higher customer satisfaction. 

Due to growing cyber threats and attacks targeting critical infrastructure and operational
technology, it was not an option to use traditional remote access tools such as 
TeamViewer or LogMeIn. Neither the systems integrator nor their customers were comfortable
with using these remote access tools because of shared credentials, no multi-factor
authentication, and lack of auditability.  

Likewise, the VPN was both impractical for the systems integrator and risky for 
their customers due to cyber risks such as lateral network traversal. For the systems
integrator, VPNs limit efficiency at scale (e.g, 100 VPNs for 100 customers). When
it comes to providing support, VPNs can be unreliable and limit the ability to connect
to and provide support for multiple sites at once. For operators, VPNs break the
air gap and can become a doorway for cyber attacks like ransomware.

### Enabling secure remote connectivity without compromising on security.

![cyber insurance requirements](https://www.agilicus.com/www/44e30a43-brochure-hero-
1024x636.png)

Water treatment facilities and municipal critical infrastructure require strict 
security policies to protect the citizens and communities they serve. In order to
comply with these security requirements and best serve their customers while achieving
their own business objectives, the systems integrator implemented Agilicus AnyX.
The platform empowered the systems integrator with precise control over permissions
and detailed audit logs for a complete view of technician activity for each site
and system. 

With Agilicus AnyX, the systems integrator was able to enable access for authorised
technicians without requiring yet another set of credentials or shared access between
users. The platform also made it possible to enforce multi-factor authentication
for access to any system by any user. The result was remote connectivity through
a Zero Trust Network Access framework that complied with customer policies as well
as a greatly improved cyber posture for the systems integrator and the sites they
manage.

## Improved business efficiency with remote connectivity.

![cyber-security-policies](https://www.agilicus.com/www/2a6736e5-insurance-icons_security-
policies-150x150.png)

Faster site commissioning, faster support and troubleshooting responses, fewer site
visits and the potential for 24/7 live monitoring.

![remote-connectivity](https://www.agilicus.com/www/4cf6201e-icons-02-150x150.png)

Micro-segmented down to the device level with a single click to ensure techs did
not access something out of scope.

![role-based-access-controls](https://www.agilicus.com/www/66662b12-insurance-icons_role-
based-access-controls-150x150.png)

Multi-factor authentication enforced in a way that meant secure access but did not
add complexity for the support techs.

![detailed-auditing](https://www.agilicus.com/www/5b86371e-insurance-icons_auditing-
150x150.png)

Detailed audit logs which provide perfect evidence of who accessed the systems, 
what change they made, and how long they were connected.

![identity-aware-web-application-firewall](https://www.agilicus.com/www/d38a005b-
insurance-icons_identity-aware-web-application-firewall-150x150.png)

Ensured the entire site was off the public internet and air-gapped by leveraging
the Agilicus outbound only connection. This meant that no VPN or no public IP address
was needed (even on cellular sites).

### Deployment Architecture

![A simplified network diagram showing secure remote access to industrial control
systems for a systems integrator and external partners at a water treatment facility
using Agilicus AnyX's Zero Trust architecture.](https://www.agilicus.com/www/4a5b2477-
technical-cs-networkdiagram-v2-03.svg)

---

### User Flow

![integrator-remote-access-flow](https://www.agilicus.com/www/3a7a97f5-technical-
cs-networkdiagram-v3-04-01.svg)

BOOK A MEETING

Ready To Learn More?

Agilicus AnyX Zero Trust enables any user, on any device, secure connectivity to
any resource they need—without a client or VPN. Whether that resource is a web application,
a programmable logic controller, or a building management system, Agilicus can secure
it with multi-factor authentication while keeping the user experience simple with
single sign-on.

[BOOK A MEETING](https://www.agilicus.com/book-calendar-meeting/)

![Agilicus AnyX platform logo, horizontal orientation.](https://www.agilicus.com/
www/9f758437-agilicus-logo-horizonta.svg)

info@agilicus.com, +1 ‪519 953-4332‬

300-87 King St W, Kitchener, ON, Canada. N2G 1A7

[⌊partner⌉⌊partner⌉[