The company had recently experienced a compromise, and this resulted in a number of fraudulent emails getting sent from the compromised device to several suppliers requesting that future invoices be paid to a new bank account.

The technical security controls in place at the company were very limited, including a basic Wi-Fi modem firewall with limited anti-virus protection. These controls were not configured or managed effectively leaving gaps in their ability to protect the organisation.

Cube Cyber were engaged to provide investigative assistance with the incident and recommend possible solutions to improve overall security and prevent further occurrences. Our team initially analysed the current threat and assisted the customer in recovering from the attack. Once the source of the comprise was dealt with, Cisco Umbrella and Cisco AMP for Endpoints was deployed to ensure there were no compromised hosted or malicious activity remaining on the network.

In addition to bolstering security against ransomware and other Internet threats, Cisco Umbrella enabled the company to control and filter the types of websites that staff accesses while using corporate devices, both on and off site. Cisco AMP for Endpoints  was deployed to rapidly detect, contain, blocks and remediate advanced malware and threats across in real-time should a similar incident occur in the future.

This company employs several thousand local contractors at mine camps throughout Southeast Asia and provides WiFi Internet access as part of camp facilities. The client required a solution that would allow them to restrict access to an otherwise open WiFi network and identify and track Internet usage back to an employee identity based on their SAP employee record. The desired outcome was to integrate the Cisco ISE Guest WiFi functionality with the SAP HR database to enable both employees and contractors to login to the WiFi system using their employee ID. The team at Cube developed a customised API integration engine that integrated the Cisco ISE Guest Portal with the organisations’ SAP HR database. The bespoke solution polls the SAP database in near real-time, changes to employee records are extracted, parsed and sent to ISE via the ISE API. ISE guest access accounts are then automatically generated, these are specific to each user and remain valid for a specific amount of time-based on the planned duration of the employees stay at the camp. This unique functionality enabled both employees and contractors secure access to login to the WiFi system using their employee ID. Full operational support, training and documentation were provided post-deployment.

• Advanced API Program
• Real-time insights
• Bespoke system design
• Network Design