China Mobile Group Xinjiang Company Limited (hereinafter referred to as Xinjiang Mobile) operates the following businesses: domestic and international mobile communication (including voice, data and multimedia) services; mobile communication related system integration, roaming settlement and technological development services; IP telephony, computer network and Internet access services and any other business authorised and approved by the parent company or communication authorities. Since its incorporation, the company has experienced steady growth with a twenty-fold increase in network switching capacity, seventeen-fold increase in customer numbers, and five-fold increase in annual operating income.
Along with the growing complexity of today’s network application environment, theft of core data, loss of user data, theft of intellectual property and other security incidents have become such frequent occurrences that many companies have incurred substantial resulting losses. In the last two years, medium and large enterprises in the telecommunication, design, manufacturing, finance, insurance and other industries are successively getting concerned about and having a strong demand for data security solutions.
As a result of Xinjiang Mobile’s effort to step up its pace of informatisation, the development of its information and network infrastructure has already reached a new level and the accompanying security issues are now getting more complicated than ever. First of all, the telecommunications industry has imposed an exceptionally tough and high-standard requirement upon data security, so the question of how to resolve data security threats within the company has become the most pressing issue facing Xinjiang Mobile. Secondly, as the users of the core mobile network include not only the network centre and network department but also third-party operations and maintenance personnel, such as external service providers due to its business needs, the IT department of Xinjiang Mobile has to control the access rights of these personnel to confidential data. In addition, the company hopes to monitor and manage its employees’ use of USB drives and other removable devices, in order to protect against viruses and other security threats introduced by such devices. In view of the aforementioned reasons, they embarked on a search for an easy-to-deploy and highly effective security solution. After careful screening and comprehensive assessment of data protection products in the market, they decided to deploy McAfee’s solution.
McAfee Data Protection Solutions
After an analysis of the data security requirements, McAfee’s security experts helped Xinjiang Mobile deploy a unified data protection solution comprising McAfee Network Data Loss Prevention (NDLP), McAfee Host Data Loss Prevention (HDLP) and McAfee Device Control. McAfee NDLP includes the NDLP Monitor, NDLP Prevent, NDLP Discover and NDLP Manager appliances. McAfee has the most complete data protection portfolio of products available today from a single vendor. Tight integration helps keep costs down and helps deliver unrivalled data security from the terminal level to the firewall.
Unrivalled Data Protection
Unlike other products requiring six to nine months to deploy, the McAfee Data Loss Protection (DLP) solution can be up and running in just a few days. This allows Xinjiang Mobile to test the relevant data policies of the company quickly and reduce the time to realise the full value of the solution. Besides that, the advanced, intuitive data analysis capabilities of the solution enable the IT department to build an understanding of unknown data risks and determine how to protect corporate data quickly and effectively.
“The McAfee DLP solution can provide comprehensive information on the actual data usage situation and enable us to test our security policies, based on actual historical information, prior to implementation. In this way, our IT operations and maintenance personnel could set up the correct policy right from the beginning. As such, there won’t be any disruption of our business due to reporting errors.”Head of IT
Tight and seamless integration between the McAfee DLP technology and other McAfee data protection products ensures a coordinated and consistent response to various threats. In addition, the range of data protection can be expanded further through the system’s inbuilt integration with leading digital rights management (DRM) technologies from providers such as Adobe and Oracle, thereby facilitating a successful business development while enhancing data security and reliability. According to the head of Xinjiang Mobile’s IT department, “We chose McAfee not merely because of its professionalism in data security, but more importantly, its excellent integration and scalability, which will significantly streamline the deployment of the new solution.”
The advanced data analysis capabilities of the McAfee DLP solution can help customers understand their data usage status as well as provide proactive protection by predicting unknown threats through scanning and analysing historical data.
Comprehensive Protection of Corporate Data
McAfee’s unique DLP technology helps deliver the most comprehensive data protection for USB drives, firewalls and other hardware appliances. Unlike other DLP products, it does not require a lengthy deployment period, high cost and considerable effort. Now, Xinjiang Mobile’s data security requirements are fully met without incurring substantial costs for countless consultancies, testing and debugging.
Deployed through the McAfee ePolicy Orchestrator (McAfee ePO) management platform agent, McAfee DLP software instantly monitors and prevents confidential data loss, thereby keeping Xinjiang Mobile’s core network free from risks of financial loss, brand damage, lost customers, competitive disadvantage, regulatory noncompliance and other risk factors. The McAfee DLP solution also enables Xinjiang Mobile’s IT operations and maintenance personnel to monitor real-time events quickly and easily, apply centrally managed security policies to control how employees use and transfer sensitive data, and generate detailed forensics reports with minimal impact to daily business activities.
According to the head of Xinjiang Mobile’s IT department, “The McAfee DLP solution can provide comprehensive information on the actual data usage situation and enable us to test our security policies, based on actual historical information, prior to implementation. In this way, our IT operations and maintenance personnel could set up the correct policy right from the beginning. As such, there won’t be any disruption of our business due to reporting errors. At the same time, historical information is loaded within minutes, thus speeding up incident investigations and helping us have a better understanding of our company’s data usage status.”
Long-term Strategic Partnership
Owing to the excellent integration capabilities of McAfee’s products, Xinjiang Mobile evaluated other products from McAfee. They have been seeking an integration solution to address their security issues. The company successively purchased McAfee Vulnerability Manager, McAfee Network Security Platform and other products.
The head of Xinjiang Mobile’s IT department has been extremely pleased with McAfee’s remarkable integration capabilities. He summed up as follows, “McAfee Network Security Platform monitors, on a real-time basis, detailed information of manageable system hosts, including the host name, user name, operating system, patch level, MAC address, last scan date and protection details, as well as serves as an important hostbased intrusion prevention system (IPS). Through its integration with McAfee Vulnerability Manager, the product can automatically import numerous vulnerable data points for scanning on a periodic or on-demand basis. As such, it can identify and determine threat-related information more accurately and provide our IT operations and maintenance personnel with prompt information on the security status of our company’s network.”
Manage and control USB devices, flash drives and other removable storage devices