Multinational SaaS Provider Strengthens Client Relations by Strengthening Web Application Security

Download PDF

Summary

Iris Solutions (Iris) is a multinational cloud-based enterprise software provider. As an innovative leader in secure transactions, they create highly effective, scalable products that deliver real business value to their clients. Iris delivers high-performance software to enterprises of all sizes which helps with retailtelecom integration, regulatory compliance, and critical financial transactions.

Profile

  • Multinational cloud-based software provider
  • Serves enterprises of all sizes

Challenges

  • Improve the customer experience
  • Solve gaps in security amongst applications
  • SSL and HDS
  • Throughput requirements

Solution

  • Barracuda Web Application Firewall in AWS Marketplace

Results

  • Happy, confident clients
  • Security gaps resolved
  • Real-time Intelligence updates
  • Met their transactions/ hour requirements
  • Easy scalability
  • Fast to deploy from AWS Marketplace

Overcoming Security Challenges

Iris needed a highly secure environment. Iris CEO Kareem Bikhit believes in a security-first approach and their application was advertised as one. With their eSignature application, Iris has highly regulated security requirements. Due to working with financial institutions, telecom companies, and even state, local, and federal government entities, Iris has a myriad of regulations and compliances which must be met. With such highly regulated industries, Iris demanded a security solution which could meet these parameters.

High-Performance Required

With Iris expanding into several different markets, they needed a platform and solution to help nurture their growth. To meet their increasing needs, elasticity and scalability were critical requirements when selecting not just the environment to deploy Iris’s applications, but also their security solution.

These features were of extreme importance and previous solutions they had tested would not meet their throughput requirements. With other solutions drying at three to five thousand requests an hour, Iris needed strong, reliable security to facilitate their expansion.

Easy Manageability is Key

Even though Iris is expanding rapidly, it’s far from a large-scale company. They have a small team, which manages their entire infrastructure, and therefore, needed a solution which was easy to deploy on command, yet had the breadth of features they needed to meet their technology and business needs.

Barracuda Web Application Firewall and AWS

The Barracuda Web Application Firewall (WAF) blocks application layer DDoS and other attack vectors directed at applications, while providing superior protection against data loss. It also has strong authentication and access control capabilities for restricting access to sensitive applications and data.

Choosing the Cloud

Iris had selected Amazon Web Services (AWS) as the platform to deliver their secure applications to their customer base. In order to deliver new software to their customers, Iris needed an environment where they could easily develop, deploy, and support applications, while scaling with their business needs. Iris chose the Barracuda WAF in AWS Marketplace to securely deliver applications to their customers. Some of their clients are enterprise clients that want a commercial web application firewall with a strong reputation and strong support. manages their entire infrastructure, and therefore, needed a solution which was easy to deploy on command, yet had the breadth of features they needed to meet their technology and business needs.

High-Performance Provided

Iris has tested another solution that was unable to meet its business needs to provide secure and reliable threat prevention. Barracuda Web Application Firewall met their transactions/hour requirements and still allowed for continued scalability and growth.

"We had security gaps in our departments. We looked around, did some research and found exactly what we wanted in Barracuda. That’s about the whole story."
- Sergey Rodovinsky, VP of Technology, IRIS Solutions

Small IT Team Requires Simplicity

With such a lean staff, Iris required a solution which could be configured at a moment’s notice. The Barracuda WAF in AWS Marketplace with the uniform Barracuda interface allowed for simplified administration. Part of the reason Iris selected AWS was to not employ an army of administrators to monitor their environment. With AWS and Barracuda in AWS Marketplace, Iris is able to maintain a highly scalable and secure environment with limited resources.

Security and Regulatory Compliance Satisfied

With the Barracuda WAF on AWS, Iris was able to meet their staunch security regulations, and ensure the integrity of all traffic navigating through their resources. The Parameter Protection within their security profile maintained the validity of each request, and ultimately, led to Iris meeting their regulatory compliance. With such security profiles in place, Iris is safe against attacks like SQL injections, OS command injections, and Cross-site Scripting attacks

Why AWS Makes Sense

Iris needed an elastic and scalable environment that would enhance their business needs on a dayday basis. By using the “Pay-as-You-Go” model for the Barracuda WAF in the AWS Marketplace, Iris was able to effectively secure their hosted applications and scale with their business needs. This enabled Iris to not only select the Barracuda WAF, but also to use AWS Marketplace as a vehicle to discover and test technology, which will enhance their environment.

Conclusion

In part, Iris’s security decision was made on how Barracuda Networks offers real-time protection to its customers. The Barracuda Cloud was able to offer real-time updates for their AWS and Barracuda WAF instances, and help maintain their stringent security profile. With constant attack signatures and security profile updates, Iris is able to navigate the changing landscape of web application attacks and still deliver a secure solution. By enforcing this type of security profile with the Barracuda WAF in the AWS Marketplace, Iris can easily operate within highly regulated industries and expand their business ventures into markets previously considered too highly policed.

About Barracuda and AWS

Barracuda (NYSE: CUDA) provides cloud-connected security and storage solutions that simplify IT. These powerful, easy-to-use and affordable solutions are trusted by more than 150,000 organizations worldwide and are delivered in appliance, virtual appliance, and cloud and hybrid deployments. Barracuda’s customer-centric business model focuses on delivering high-value, subscription-based IT solutions that provide end-to-end network and data security. For additional information, please visit barracuda.com. Barracuda, Barracuda Networks, and the Barracuda Networks logo are trademarks or registered trademarks of Barracuda Networks, Inc. in the U.S. or other regions.

About the Barracuda Web Application Firewall and AWS

The Barracuda Web Application Firewall (WAF) blocks application layer DDoS and other attack vectors directed at applications, while providing superior protection against data loss. It also has strong authentication and access control capabilities for restricting access to sensitive applications and data.

About AWS:

For 10 years, Amazon Web Services has been the world’s most comprehensive and broadly adopted cloud platform. AWS offers over 70 fully featured services for compute, storage, databases, analytics, mobile, Internet of Things (IoT) and enterprise applications from 35 Availability Zones (AZs) across 13 geographic regions in the U.S., Australia, Brazil, China, Germany, Ireland, Japan, Korea, Singapore, and India. AWS services are trusted by more than a million active customers around the world – including the fastest growing startups, largest enterprises, and leading government agencies – to power their infrastructure, make them more agile, and lower costs. To learn more about AWS, visit http://aws.amazon.com.