Imperva Case Studies DigiCert Enhances AWS Environment Security with Imperva

Edit This Case Study Record

	DigiCert Enhances AWS Environment Security with Imperva Imperva

DigiCert Enhances AWS Environment Security with Imperva

Imperva

Technology Category	Application Infrastructure & Middleware - Event-Driven Application Cybersecurity & Privacy - Application Security
Applicable Industries	Glass National Security & Defense
Applicable Functions	Maintenance
Use Cases	Tamper Detection Traffic Monitoring
Services	Cloud Planning, Design & Implementation Services
Challenge	DigiCert, a provider of scalable TLS/SSL and PKI solutions, was already using Imperva’s SaaS Web Application Firewall (WAF) to protect their on-premises applications when they began migrating some of their workloads to Amazon Web Services (AWS). However, they were using another vendor for DDoS mitigation on AWS, which they found unsatisfactory due to excessive scrubbing of traffic and blocking of legitimate traffic. As DigiCert's usage of AWS grew, they realized the need for a new security solution that could manage risk, monitor all traffic, rapidly identify threats, and only allow valid traffic to access their applications. They wanted a solution from a single provider that could deliver both WAF protection and DDoS mitigation across their entire hybrid environment. The solution also needed to lower false positives, assure rapid response to minimize potential business interruption, and automate as much of the security process as possible due to time and resource constraints. Read More
About Customer	DigiCert is a provider of scalable TLS/SSL and PKI solutions for identity and encryption. The company is chosen by nearly 90 percent of Fortune 500 companies, and 97 of the 100 largest global banks, for its identity and encryption services for web servers and Internet of Things devices. DigiCert supports TLS/SSL and other digital certificates for PKI deployments at any scale through its certificate lifecycle management platform, CertCentral®. The company is recognized for its enterprise-grade certificate management platform, fast and knowledgeable customer support, and security solutions. DigiCert has over 1200 employees and is headquartered in Lehi, Utah, USA with 12+ worldwide locations. Read More
Solution	DigiCert implemented Imperva to protect their hybrid environment. They expanded their usage of Imperva’s WAF, which they were already using on-premises, to extend protection to AWS and maintain their security posture both during and after migration. Imperva’s threat detection technology, advanced client classification technology, crowdsourcing, and IP reputation data automatically analyze traffic to identify and block web application attacks. Granular filters and controls reduce false positives and prevent access from unwanted visitors, while IP address shielding hides the web server’s IP address. Imperva has protected DigiCert’s AWS workloads for the entire time they have been running on the cloud. The solution has improved visibility into their application environment, both on-premises and on AWS, and is continuously monitoring behavior and sending automated alerts when suspicious activity is discovered. The versatility of Imperva’s solution provides fully integrated protection for DigiCert’s hybrid application workloads and allows them to manage their security efforts from a single pane of glass. Read More Log in to view content
Contents

Technology Category

Application Infrastructure & Middleware - Event-Driven Application

Cybersecurity & Privacy - Application Security

Applicable Industries

Glass

National Security & Defense

Applicable Functions

Maintenance

Use Cases

Tamper Detection

Traffic Monitoring

Services

Cloud Planning, Design & Implementation Services

Challenge

DigiCert, a provider of scalable TLS/SSL and PKI solutions, was already using Imperva’s SaaS Web Application Firewall (WAF) to protect their on-premises applications when they began migrating some of their workloads to Amazon Web Services (AWS). However, they were using another vendor for DDoS mitigation on AWS, which they found unsatisfactory due to excessive scrubbing of traffic and blocking of legitimate traffic. As DigiCert's usage of AWS grew, they realized the need for a new security solution that could manage risk, monitor all traffic, rapidly identify threats, and only allow valid traffic to access their applications. They wanted a solution from a single provider that could deliver both WAF protection and DDoS mitigation across their entire hybrid environment. The solution also needed to lower false positives, assure rapid response to minimize potential business interruption, and automate as much of the security process as possible due to time and resource constraints.

About Customer

DigiCert is a provider of scalable TLS/SSL and PKI solutions for identity and encryption. The company is chosen by nearly 90 percent of Fortune 500 companies, and 97 of the 100 largest global banks, for its identity and encryption services for web servers and Internet of Things devices. DigiCert supports TLS/SSL and other digital certificates for PKI deployments at any scale through its certificate lifecycle management platform, CertCentral®. The company is recognized for its enterprise-grade certificate management platform, fast and knowledgeable customer support, and security solutions. DigiCert has over 1200 employees and is headquartered in Lehi, Utah, USA with 12+ worldwide locations.

Solution

DigiCert implemented Imperva to protect their hybrid environment. They expanded their usage of Imperva’s WAF, which they were already using on-premises, to extend protection to AWS and maintain their security posture both during and after migration. Imperva’s threat detection technology, advanced client classification technology, crowdsourcing, and IP reputation data automatically analyze traffic to identify and block web application attacks. Granular filters and controls reduce false positives and prevent access from unwanted visitors, while IP address shielding hides the web server’s IP address. Imperva has protected DigiCert’s AWS workloads for the entire time they have been running on the cloud. The solution has improved visibility into their application environment, both on-premises and on AWS, and is continuously monitoring behavior and sending automated alerts when suspicious activity is discovered. The versatility of Imperva’s solution provides fully integrated protection for DigiCert’s hybrid application workloads and allows them to manage their security efforts from a single pane of glass.

Impact #1	By implementing Imperva's solution, DigiCert has greatly reduced the risk of application outage and has been able to seamlessly protect their applications and data from web application exploits. The company has benefitted from the WAF’s Layer 7 protection capabilities, and comprehensive DDoS protection provided by Imperva. The solution has helped DigiCert remain compliant with regulatory requirements. It has also enabled DigiCert to discover suspicious activity more quickly and deal with threats before they impact their business. Imperva has helped the company identify and investigate real threats instead of wasting cycles chasing false positives, allowing their security staff to remain focused and efficient. DigiCert has also benefitted from Imperva’s convenient user interface, which allows them to accomplish much more with fewer committed resources.

Impact #1

By implementing Imperva's solution, DigiCert has greatly reduced the risk of application outage and has been able to seamlessly protect their applications and data from web application exploits. The company has benefitted from the WAF’s Layer 7 protection capabilities, and comprehensive DDoS protection provided by Imperva. The solution has helped DigiCert remain compliant with regulatory requirements. It has also enabled DigiCert to discover suspicious activity more quickly and deal with threats before they impact their business. Imperva has helped the company identify and investigate real threats instead of wasting cycles chasing false positives, allowing their security staff to remain focused and efficient. DigiCert has also benefitted from Imperva’s convenient user interface, which allows them to accomplish much more with fewer committed resources.

Benefit #1	Imperva's DDoS protection is able to scrub 6-plus Terabits-per-second of network traffic with a 3-second SLA to mitigate attacks.
Benefit #2	Imperva's solution was implemented quickly and immediately scaled to DigiCert's needs in their data center and on AWS.
Benefit #3	During a large-scale attack that lasted for three days, Imperva's offering continued to adapt and keep DigiCert’s applications secure and available, with no outages.

Benefit #1

Imperva's DDoS protection is able to scrub 6-plus Terabits-per-second of network traffic with a 3-second SLA to mitigate attacks.

Benefit #2

Imperva's solution was implemented quickly and immediately scaled to DigiCert's needs in their data center and on AWS.

Benefit #3

During a large-scale attack that lasted for three days, Imperva's offering continued to adapt and keep DigiCert’s applications secure and available, with no outages.

Download PDF Version

Overview

DigiCert Enhances AWS Environment Security with Imperva

Operational Impact

Quantitative Benefit