Vordel - XML and SOA appliances for XML network management

Telecoms Case Study

International telecom operator selects Vordel to secure delivery of Web Services to corporate market for B2B extranet

Background

This Vordel customer is a large North American national telecom operator that provides connectivity to residential and business customers.

Prior to launching its Web Services, the Telco had created a B2B Portal that enables its agents, partners and customers to access service delivery and availability information using a Web browser. These services include equipment sales, migration of customers, order processing, bill presentment and CRM access for reselling agents. There are approximately 500,000 portal users, with an additional 5,000 users being added monthly. The Entrust GetAccess identity management platform is used to manage access to the Telco's portal.

Challenge

The Telco wanted to build on the success of its portal, by launching complementary new B2B services which allow customers and partners to integrate their back office systems directly into its own. Offering such a Web Service interface for partners would not only automate and improve the efficiency of order processing, by removing the need for re-keying information into HTML forms, but also reduce integration costs and potentially provide new revenue streams.

However, the key challenges identified were:

How to manage both the Web browser and Web Services traffic using a single policy store. The customer did not want to create a new 'silo' of access control information for their Web Services.
How to take advantage of XML without introducing new security vulnerabilities
How to achieve regulatory compliance and privacy commitments for data sent over Web Services channels
Ensure that the security solution supports the chosen Web Services platform, which is BEA WebLogic

Why Vordel

VordelDirector was chosen because of its proven interoperability with the Entrust web access control product, GetAccess, and also because of its proven interoperability with the Web Service delivery platform selected, BEA WebLogic Application Server.

By deploying VordelDirector, the company was able to enforce Web Access Control policies over Web Services traffic, as well as protecting against new vulnerabilities introduced through XML-based communications. Ongoing management is greatly simplified because a single user and policy store, managed in Entrust's security platform, is used across both Web browser and Web Services traffic.

Benefits

Standards-based Web Services implementation instead of a private network or VPN provides cost effective, yet scalable solution
A single policy store is used across Web browser and Web Services traffic.
Integrity, confidentiality and auditability preserved for all business sensitive transactions.
The solution satisfies regulatory requirements for privacy and maintenance of a full audit trail.
Centralized authentication and authorization of Web Services transactions.

To find out more about this study and how Vordel's products can help your company email .