Bank-Al-Habib is one of the reputed financial organization in Pakistan since 1991. Bank-Al-Habib has a network of 505 branches (inclusive of sub branches) and offshore banking units in Bahrain, Turkey and EPZ. After Microsoft brought its Forefront Threat Management Gateway (TMG) to a dead-end in 2012, it was a time for Bank-Al-Habib to find a reasonable alternative of TMG to make sure the protection of their organization remain intact.
After a successful Proof of Concept the Project was awarded to COMSTAR.
During the installation of SOPHOS XG Next Generation Firewall many tasks were achieved :-
Configuration of two SOPHOS XG-650 Appliances in Active-Active mode with Load Balancing, Authentication of Users Via Active Directory, Implementing current profiling setup as maintained in Microsoft TMG. Blocking and restricting malicious URL through Web Profiling and through Single IP Host, blocking websites, blocking web application such as SKYPE and WhatsApp. Identification of Malicious IPs generating denied traffic, block downloading Zip (Password Protected & Encrypted) files, blocking all the extensions and only allowing file extension such as doc, ppt, pdf, xls. Category wise blocking such as Social Media, Online Storage and etc. Safe Search on Google, Bing and Yahoo. Integration of Sophos with IBM Qradar SIEM 7.2.4 for Syslog and SSL VPN configuration. Access to some of internal services that runs in Bank-Al-Habib such as Money Gram and LESCO/FTP was achieved.
All the above task was achieved through Network Protection and Web Protection