Case Study

Banking and Financial Services

How we supported a major financial institution to enhance their security posture, mitigate threats and protect customer data.

Download Banking & Financial Services case study here

Requirements

  • Needed an expert partner to support them in enhancing their security posture and updating their F5 infrastructure.
  • Faced challenges around automating their F5 products
  • Were looking for technical support in planning future projects

Solution Benefits

  • Better protection for both web-based and mobile banking applications
  • FullProxy’s Managed Service allows them to mitigate threats and safeguard customer data.
  • Became fully self-sufficient in using its F5 devices

The Challenge

  • A financial institution needed an expert partner to support them in enhancing their security posture and updating their F5  infrastructure.
  • They faced various challenges around automating their F5 products, configuration consistency and planning future projects
  • Through a two-year managed service contract, we standardised all configurations and activated their web application firewall to provide active protection and monitoring against threats.
  • As a result, they could better protect both web-based and mobile banking applications, mitigate threats and safeguard customer data.

A financial institution faced various challenges around F5 automation, configuration consistency, security posture and planned projects for open banking initiatives.

As an F5 Gold Partner and the UK’s most certified F5 specialist, FullProxy were best placed to address these issues. We were also tasked with conducting a review aimed at improving the customer’s current cyber security infrastructure and the overall network traffic management of their F5 products.

Taking place between 2017 and 2020, we undertook an extensive project to provide a wholesale upgrade and update their F5 infrastructure, starting with open banking and home automation and later encompassing the entire F5 estate.

This included implementing a full Managed Services relationship, and successfully activating a web application firewall (WAF), which had been installed previously but not fully optimised, potentially creating vulnerabilities.

The financial institution had been primarily using physical F5 devices. However, their F5 configurations were inconsistent, as they’d used multiple external consultants to set up policies and experienced multiple changes in personnel in their in-house teams. This created a whole host of challenges around troubleshooting and policy management.

 

Over £1.2bn was stolen through unauthorised financial fraud in 2022, with 78% of app fraud cases starting online (UK Finance)

What we did

We started by migrating the financial institution’s F5 estate to a virtual platform, enabling capabilities for automation in the future. Our consultants then standardised all configurations, improving naming conventions, and testing the platform’s compatibility.

The WAF was fully implemented, correctly configured and activated so it provided the active protection and monitoring against web attacks that it had been intended for.

Following migration, we provided support for an additional three months remotely through training and configuration.

The Result

As a result of working with us, the financial institution were better protected via their web-based and mobile banking applications, safeguarding customer data and mitigating potential cyber threats.

The new standardised configurations significantly enhanced their security posture and operational efficiency over the long term, as troubleshooting became much more straightforward and they could resolve security incidents promptly and effectively.

An expert implementation and activation of the WAF provided powerful protection and monitoring against web attacks, and realised ROI against the customer’s investment in the solution.

Over the course of a two-year managed services contract, our team of technical consultants also supported the financial institution to become fully self-sufficient in using its F5 devices.

We now proudly maintain a continued partnership with the financial institution and remain their preferred supplier for future F5-related services and initiatives.