Secure OT Remote Access for the Industrial Sector

A large European multinational aerospace company turned to CyberElements to secure remote access to a business-critical computing platform in relationship with their satellites.

They were looking for a solution to provide their maintenance engineers with secure remote access to the hardware and software computing platform which processes their satellite images.

“We needed a highly secure solution to ensure remote access and control. With CyberElements, we can now give privileged access to sensitive data from satellite image processing computers.”

Challenges

• Centralise access to multiple platforms and manage several systems at the same time.
• Ensure remote access security without operability loss.
• Guarantee security requirements for both military and civil programmes.

Solution Highlights

Integrated Zero Trust Network Access approach

CyberElements’ architecture provides a built-in Zero Trust approach. Access to resources is given through an outgoing flow which can only be opened when a resource is used, so the user terminal is isolated from the corporate system. In addition, every access is guaranteed through a different entry point, elevating the security level by decreasing the attack surface. CyberElements ensures, through its infrastructure, the use of volatile and random ports.

Multi-Factor Authentication and advanced access control

The platform, through numerous security functionalities, turns a non-trustable device into a trustable one. Users connect to various resources by signing in once using MFA, without the need to know any machine password. The administrator can easily predefine users’ credentials by creating numerous combinations of user profiles, resources and contexts (antivirus, software updates, certificates, and so on).

Rendering IT assets invisible from the internet network

By making the displayed URL unusable outside of CyberElements, with URL rewriting, protocol-based services such as RDP and SSH are invisible from network scanning tools and brute force attacks are inoperant on them.