General Directorate of Information Technology (DGTI)

CASE STUDY
“We required more control
of our network’s perimeter
security and a simplified
management system.”
– Juan Carlos Bonilla Ruvalcaba, IT executive director for the
Jalisco Secretary of Education
Details
General Directorate of Information
Technology (DGTI) for the Secretary of
Education for Jalisco: a public institution
with high network security and performance
Thanks to Fortinet, the DGTI currently enjoys greater control of its
network’s perimeter security and a simplified management of it. With
Fortinet’s security solutions, it has eliminated at least 60 hours a
month otherwise spent on access management.
The Situation
The General Directorate of Information Technology (DGTI) of the Secretary of Education
for the State of Jalisco, Mexico (the country’s fourth most populated state and fourth
largest economy) is part of said entity’s Administrative Coordination. The DGTI is tasked
with facilitating, supporting and contributing to the goals and objectives of other officials
that shape the institution through information technology and communications. It
promotes best practices for automating and upgrading processes in addition to offering
efficient and secure mechanisms to capture, process, transfer and safeguard institutional
information.
The DGTI maintains the operations for all of the IT services for all units, as well as
connects the central office’s 13 branches and 15 sub-branches. It also provides access
to the Internet and institutional applications, and is responsible for innovation, as well as
for implementing new applications and tools that help administrative and educational
www.fortinet.com
Customer Name: DGTI Jalisco
Industry: Education
Location: Jalisco, Mexico
Need
DGTI required a perimeter security
solution that would simplify
management and provide high speed
and visibility.
Challenge
Eliminate saturation and frequent
failures in the operation of various
network services necessary for the
agency’s activities in addition to
simplifying management policies and
improving informational performance,
security and availability.
Solution
-FG3600 equipment
-FortiAnalyzer 1000D
Headquartered in Guadalajara,
Jalisco, Mexico, the DGTI is part of
the Government of Jalisco’s Ministry
of Education. Jalisco is the fourth
most populous state in Mexico and
boasts the country’s fourth
largest economy.
1
CASE STUDY: GENERAL DIRECTORATE OF INFORMATION TECHNOLOGY (DGTI) FOR THE SECRETARY OF EDUCATION FOR JALISCO
areas achieve improved performances in their activities. The
DGTI manages more than 10,000 users, and it is key it maintain
informational confidentiality, integrity and availability both while
information is on the network and while being processed or
stored in data centers.
The Challenge
The DGTI had been using perimeter security equipment that
was susceptible to saturation and frequent failures, which
caused various service interruptions and adversely effected
unit activities. Additionally, the network saturation meant
slower access to the Internet, unit Web pages and access
to applications housed in the data center. Even the firewall’s
administrative security policies were too complex.
the users and applications that access the network, making it
easier to form educated decisions and quickly modify access
management policies. Overall, with Fortinet the DGTI has
decreased incident resolution times, problems and requests.
Benefits… for the Institution and Users
“Among our various needs, we required more control of our
network’s perimeter security and a simplified management
system,” said Juan Carlos Bonilla Ruvalcaba, IT executive
director for the Jalisco Secretary of Education. “In the
process of seeking those necessary solutions, One IT (Redes
Tecnológicas de Occidente S.A. de C.V.) proposed we use
Fortinet, which could also replace our perimeter firewall with
UTM capabilities.”
From there, they installed two FortiGate 3600Cs, which work
with high-availability clusters and a FortiAnalyzer 1000D, in the
institution’s main data center with the capacity to adequately
support over 10,000 simultaneous users. With Fortinet’s
solutions, the DGTI today enjoys functionalities such as a
firewall, IPS, DDoS protection, application control, Web filtering,
SSO, VPN SSL, HA and traffic shaping, among many others.
Reliability and Simplified Management
“We chose Fortinet solutions for its performance and technical
features, as the brand demonstrated as part of conceptual tests
that it could meet this institution’s needs, while simultaneously
offering very competitive market prices in both CAPEX and
OPEX,” said Bonilla Ruvalcaba.
Upon adopting Fortinet’s security solutions, the DGTI increased
its network availability and reliability from 98.9 percent to 99.99
percent each month. Consequently, each unit’s operational
processes are no longer impacted. It also has greater control
over the network and has simplified user access management.
GLOBAL HEADQUARTERS
Fortinet Inc.
899 Kifer Road
Sunnyvale, CA 94086
United States
Tel: +1.408.235.7700
www.fortinet.com/sales
Today the network also provides mobility by offering remote
access capabilities that do not compromise informational
integrity or confidentiality. They provide detailed reports of
The advantages of Fortinet’s security solutions have been quite
tangible for users, since reliability has increased through the
elimination of incidents that could put key services at risk. In
addition, it offers faster Internet access, as well as faster access
to institutional applications. It is also important to note that
response times for user access management have shrunk from
an average of 24 hours to just 15 minutes.
“Thanks to the FortiGate equipment, the cost-benefit of this
solution in reduced support hours and operational failures has
been very high,” remarked Bonilla Ruvalcaba. “We believe it
has reduced the amount of time spent on access management
support by 60 hours a month.”
Furthermore, with the FortiAnalyzer 1000D the institution
can generate reports to modify and measure the impact of
implemented security policies within the organization. This
provides the DGTI with a complete overview of the general
behavior of its users and applications, as well as the response
times from various applications.
It also contains information on the viruses, attacks and blocks
detected, notifying the relevant person quickly and automatically
for effective decision-making.
“The DGTI needed more control of its network’s perimeter
security and to simplify its management so that, in addition to
greater speeds, it could facilitate both local and remote access,
control bandwidth per user and application, and block certain
websites, among other requirements,” said Hector Salgado,
Fortinet sales engineer. “They also needed to receive reports
on their network status and security both quickly and reliably to
ensure they had enough knowledge of events to make informed
decisions on security policies. Fortinet made all this possible.”
EMEA SALES OFFICE
120 rue Albert Caquot
06560, Sophia Antipolis,
France
Tel: +33.4.8987.0510
APAC SALES OFFICE
300 Beach Road 20-01
The Concourse
Singapore 199555
Tel: +65.6513.3730
LATIN AMERICA SALES OFFICE
Paseo de la Reforma 412 piso 16
Col. Juarez
C.P. 06600
México D.F.
Tel: 011-52-(55) 5524-8428
Copyright © 2015 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law
trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other
results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied,
except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in
such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal
lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most
current version of the publication shall be applicable.
Aug 20, 2015