Thai Petroleum Refinery Hardens Distribution Control System Security With Juniper Networks

Highly automated Bangkok-based refinery operator Bangchak Petroleum hardened the security of its distribution control system with Juniper Networks Firewall/VPN with Unified Threat Management and Unified Access Control solutions to protect the status and event logging servers by isolating network components and preventing and mitigating a wide range of network intrusions, malware, and emerging security threats.

More about Juniper Networks.

Press Release:

KUALA LUMPUR, Malaysia, September 11, 2008 -- Juniper Networks, Inc. (NASDAQ: JNPR), the leader in high-performance networking, today announced that Thailand's Bangchak Petroleum Public Company Limited has hardened the security of its distribution control system (DCS) with Juniper Networks Firewall/VPN with Unified Threat Management (UTM) and Unified Access Control (UAC). Without strong security, Bangchak's DCS would be vulnerable to catastrophic attacks, including control hijacking and other operational disruptions.

Bangchak Petroleum, an oil refiner based in Bangkok, Thailand, has deployed the Juniper Networks Secure Services Gateway (SSG) and Infranet Controller (IC) in a solution that separates refinery control systems from business applications and helps bring it into compliance with the ISO-27001 security standard.

"Oil refining is a complex and strategically significant business that relies on a high degree of automation," said Mr. Aiyaret Joursuwon, Telecommunication Network and Support Section Manager in Bangchak Petroleum's Information Technology Office. "Deploying the SSG and UAC solution together protects the brains of the refining process, including all our status and event logging servers, by isolating network components, and preventing and mitigating a wide range of network intrusions, malware, and emerging security threats."

The SSG family of purpose-built integrated network security appliances deliver a perfect blend of performance, security and LAN/WAN connectivity. Traffic flowing in and out of the customer site is protected from worms, viruses, Trojans, spyware, malware, and day zero attacks by a complete set of optional UTM security features such as stateful firewall, IPSec VPN, IPS, antivirus (anti-spyware, anti-phishing, anti-adware), anti-spam, and Web filtering.

Juniper Networks UAC is a comprehensive access control solution that combines user identity, device security state and location information for session-specific access policy by user. This reduces threat exposure, delivers comprehensive control, visibility, and monitoring, and can decrease access control deployment costs and complexity.

The Infranet Controller, the hardened, centralized policy management server that underpins UAC, leverages Juniper Networks' proven, best-in-class security and access control products. The Infranet Controller can dynamically download the Juniper Networks UAC Agent software to endpoint devices to handle user authentication, endpoint integrity inspection and policy verification for every user coming on the network. Alternatively, it can gather the same information in an agent-less mode.

When deployed in concert with the SSG platforms, Juniper Networks UAC not only enforces access control policies, it can apply the UTM policies available in SSG platforms, such as IPS, antivirus and web filtering on a per user/per session basis. Juniper Networks UAC deployed together with the SSG platforms unify the application of access and security policies for comprehensive network access and threat control.

"Enterprises across Asia Pacific are unlocking value and building competitive differentiation through network innovation," said Brad Gray, Vice President of Asia South Pacific, Juniper Networks. "Bangchak Petroleum exemplifies high-performance businesses that can gain operational stability and predictability across even the most complex and demanding network environments."

About Juniper Networks

Juniper Networks, Inc. is the leader in high-performance networking. Juniper offers a high-performance network infrastructure that creates a responsive and trusted environment for accelerating the deployment of services and applications over a single network. This fuels high-performance businesses.

Comments