Corporate project · Industrial manufacturer · In use · ongoing operations
Corporate IT Infrastructure, Setup and Security
User and permission management, servers, firewall and VPN, endpoint security, mobile devices and an ISO 27001 asset inventory for an industrial company, plus SAP Fiori and Power BI Server installations.
- IT infrastructure
- Cyber security
- Installation
- Active Directoryusers & permissions
- Palo Altofirewall & VPN
- ISO 27001asset inventory
- RTO / RPOdisaster recovery plan
- Firewall & VPN
- Active Directory · GPO
- Servers & e-mail
- Mobile device management
- ISO 27001 inventory
- Backup & recovery
Built for an industrial company. For confidentiality, the company name, logo, product/part codes and internal data are not shared; images are cropped accordingly. Configuration details are not shared for security reasons.
The need
As users, devices and systems grow, it must be clear who can access what, which devices are protected and how fast work recovers after a failure.
The solution
- Central user, permission and device management with Active Directory and group policies.
- Palo Alto firewall, GlobalProtect VPN and endpoint security (Trend Micro).
- Windows Server and Exchange administration, mobile device management (MDM), network devices.
- ISO 27001 asset inventory; backup plan with recovery time and data loss targets (RTO/RPO).
- SAP Fiori installation and go-live; Power BI Server integrated with Active Directory.
- Security requirements were written for the agency rebuilding the corporate website: a supported PHP version, IP-restricted admin with two-factor login, roles and an audit log, sanitised .xlsx-only imports, uploads kept outside the web root with time-limited retention (GDPR/KVKK), bot protection and rate limits on forms, daily off-server backups with a restore test, an OWASP scan report and handover of the source code.
- The old site was found, from its response headers, to run an end-of-life PHP version; a move to the patched release that closes remote-code-execution flaws was recommended.
- A security review of an automation server found a port open to any source and plain-text passwords in scripts; closing the port and rotating the passwords was recommended.
- Unauthenticated data endpoints in the HR portal were closed and the SAP password kept in the browser was removed (details in the "SAP-Connected HR Analytics Portal" project).
Delivered
- Installation and configuration
- Asset inventory and policy documents
- User support and training
Technologies
- Windows Server
- Active Directory · GPO
- Exchange
- Palo Alto · GlobalProtect
- Trend Micro
- MDM
- Aruba / HP network
- SAP Fiori
- Power BI Server
Related services
IT Infrastructure & SecurityTraining & Consulting