Case Studies

Israel’s Foreign Ministry Deployment of the LyncShield Solution

Client
Israel’s Foreign Ministry
Location
Jerusalem, Israel
Installer
AGAT Software

AGAT’s Solution
LyncShield is an innovative solution that guarantees secure mobile Lync (Skype for Business) connectivity. LyncShield’s Two Factor Authentication (TFA) determines which workers will be granted access to the system from outside the office while allowing only registered devices to connect.

Background
Israel’s Foreign Ministry formulates, implements and presents the foreign policy of the Government of Israel. The ministry represents the state vis-a-vis foreign governments and international organizations, explains its positions and problems throughout the world, endeavors to promote its economic, cultural and scientific relations, and fosters cooperation with developing countries.

The ministry also promotes relations with Diaspora communities and safeguards the rights of Israeli citizens abroad. The ministry discharges its diverse duties through its head office in Jerusalem and the Israeli missions abroad.

The Problem
The Foreign Ministry wanted to assure secure connection through Microsoft Lync for the ministry’s workers in Israel and overseas. The safe connection had to be made by using approved mobile devices outside the corporate network. The Foreign Ministry’s main requirement was to determine which devices would be granted access to the system based on a self-service registration process.

The ministry wanted to avoid a situation in which workers who have a username and password connect to the Lync server from unauthorized devices, and to prevent a security breach if the user name and password are stolen.

The Challenge

  • To enable users to connect to the corporate Lync server from authorized devices
  • To prevent the risk of DoS, DDoS and brute force attacks

The ministry’s main goal was to eliminate the usage of network credentials on workers’ mobile devices and to resolve the threat of unauthorized connection.

“We were looking for a solution that would allow us to decide which workers would have access to Lync through their mobile devices and to specify which smartphones would be granted such access,” said Yaniv Cohen, system administrator at the Foreign Ministry. “Our experience with LyncShield was very positive and we are currently exploring ways of using more LyncShield features.”

The Solution
LyncShield’s Two Factor Authentication ensures that the Foreign Ministry benefits from another layer of protection by adding device identification to the user name and password. It allows the ministry to control and manage the approved device and prevent uncertified devices from using the service.

LyncShield was implemented to avoid account lockout situations following a live demonstration of a security threat.

Benefits
“LyncShield has provided us with a reliable solution to determine which workers are allowed to enter our Lync infrastructure and to prevent the usage of Lync on unauthorized external devices,” Cohen said. “We have been using LyncShield for more than a year with great satisfaction.”

“LyncShield, which ensures that workers use only a predefined device, has enabled Foreign Ministry workers to benefit for the first time from the advantages of Lync when they are outside the office. LyncShield also protects the network account against lockout problems in DDoS attacks,” said Yoav Crombie, business manager of AGAT Software. “This successful project illustrates the benefits of using LyncShield for organizations that adopt a BYOD (bring your own device) policy.”

 Why Was LyncShield Chosen?
AGAT was chosen to provide the LyncShield solution following the Foreign Ministry’s search for a reliable solution for restricting the usage of Lync to authorized devices. The ministry, which had already been using AGAT’s smart card solution, chose LyncShield based on AGAT’s proven track record and after realizing it offered the best solution available.

AGAT, which was founded in 1999, is a development company specializing in security applications and digital signature solutions. AGAT’s client base is comprised of government offices, banks and insurance companies, including Fortune 500 companies.