Protecting Physical Servers and VMs While Preserving Uptime

INSTITUTE WORKING KNOWLEDGE SERIEST CASE STUDY Fall 2007 Protecting Physical Servers and VMs While Preserving Uptime
Bryan Rood Director of IDC Services QUANTROS, INC. CATEGORIES: IPS/Regulatory Compliance/Virtualization  STAGE: Selection - Deployment  CASE #07-11-01: Quantros, Inc.
© 2007 The Institute For Applied Network Security. All Rights Reserved. For additional information about this case, or to inquire about additional case work by the Institute, please contact Eric Bartczak at ebartczak@ianetsec.com. Page 1 of 5 Institute Working Knowledge Series 07-11-01 Quantros, Inc.
About Quantros, Inc. Quick Read Quantros provides real-time Quantros, Inc.: Blue Lane Technologies: knowledge creation solutions for .patient safety, accreditation and A technology company that provides . Award-winning security for enterprise compliance, and outcomes monitoring an ASP solution for health care. servers. for leading healthcare providers. . A small IT department with numerous . Applies the same corrective action on Quantros' web delivered applications responsibilities. network traffic as a software vendor's provide a standard platform for . Key challenges faced include mini- security patch to fix application-specific automating resource intensive manual mizing infrastructure, minimizing vulnerabilities at the root cause. processes. Through a variety of direct downtime, developing and enforcing . Eliminates the need to hastily install sales and vendor partners, more than security policies, and doing this with patches on servers and VMs. 1,500 healthcare facilities are minimal budget or resources. licensed to use Quantros' web-based . Deploying Blue Lane allows . Shields servers from network attacks. technology solutions. Quantros to secure its servers . Provides immediate protection, requiring quickly, which has decreased no code or configuration changes, thereby Quantros team members include maintenance time and improved maximizing server stability and uptime. physicians, nurses, and healthcare uptime for clients. professionals. We are a healthcare .information management technology Blue Lane makes Quantros' IT org-company with a difference; our key anization more secure, effective, and product decisions are driven by efficient. experts in healthcare quality and performance improvement, safety, compliance, risk management, and Overview nursing. Quantros' business-an ASP for the health care industry-requires a secure Quantros website: network and maximal uptime-all with a small IT department and a small http://www.quantros.com budget. Quantros was challenged to implement and enforce sound security policies and to keep up with the continuous stream of vendor patches. Blue Lane has provided Quantros with a flexible, easy-to-implement solution that provides immediate protection for all of the company's servers with no disruptions. Use of Blue Lane has increased server protection, decreased the company's maintenance windows, and improved server uptime. About Bryan Rood Background Director of IDC Services and IT Manager Quantros is a technology company driven by a vision of using technology to Bryan has been with Quantros since improve health care, particularly patient safety in hospitals. They provide an 2004 when he assumed responsibility ASP solution that enables hospitals to aggregate safety data and to report for all aspects of Quantros' IT department. Bryan currently manages adverse events. Quantros' customer facing Internet data center in Santa Clara and At this 60-person company, Bryan Rood was the first person in IT (now a 4-corporate IT in Milpitas. Bryan came person department). He leads IT and in doing so wears many hats. He is to Quantros with a background in data center management, UNIX responsible for using technology to meet the needs of the business and system administration and network clients. This consists of planning and designing the network, building and engineering. Prior to Quantros, Bryan assessing capacity, implementing all operating systems, applications, and held roles in a variety of industries developing his knack for IT technology services (such as Windows, Linux, and Oracle), and monitoring management including the radio, and maintaining them. He also serves as the system admin and is respon-education, legal, automotive ... [download for more]