One of Europe’s largest full-service providers in the broadcasting and media industry, MEDIA BROADCAST designs and runs multimedia platforms for TV and radio stations in Germany and around the world. Building on modern transmitter, fibre and satellite networks, the company’s services span the entire process chain from production to content management to the actual broadcast. A subsidiary of TDF Group, MEDIA BROADCAST caters to some 750 national and international customers
including public and commercial broadcasters, TV and radio production companies, network operators, media authorities, as well as cinemas.
MEDIA BROADCAST wanted to realise a new control centre at its ground communication station in Usingen, Hessen, to safeguard its networks’ security and readiness for the future.
Protecting company data and ensuring excellent availability of our IT infrastructure are our top priorities. Bechtle’s 24/7 monitoring solution guarantees that our IT resources are protected against online threats at all times.
Roland Thom, IT & Processes (ITP), Media Broadcast GmbH
Bechtle delivered a complete re-design and configuration of MEDIA BROADCAST’s IT security infrastructure, including pre-deployment testing in Bechtle’s own security lab in Neckarsulm, as well as a review of the existing security policies for firewalls, VPNs, routing, remote maintenance, and e-mail. The new infrastructure employs two open server platforms based on a 10-interface HP server as a clustered Check Point NGX R70 firewall gateway, plus one open server platform based on a 2-interface HP server as a firewall management Check Point NGX R70. The same solution was also used for the dual interface admin console servers. The external and internal DMZs (demilitarized zones) each use two Cisco Catalyst 2960G-24TC-L switches with additional fibre modules. Bechtle further installed a mail security cluster with active/standby modes and two IronPorts (C160 and S160) per mode, dramatically reducing spam. For SSL VPN access, MEDIA BROADCAST relies on a cluster of two Juniper Secure Access 4500. Out-of-band management across all systems is made possible with a Cyclades AlterPath ACS16 console server and a Check Point VPN-1 Edge ADSL UTM Appliance XG8. Two-factor authentication with RSA Authentication Manager 7.1, which requires a combination of password and user token, guarantees top-notch security. The entire infrastructure is supported by security specialists from Bechtle’s Global Network Operations Centre (GNOC).
The new systems provided by Bechtle give MEDIA BROADCAST a robust firewall platform that considerably reduces spam across its organisation. Designed and implemented by Bechtle, the flexible remote access solution via SSL VPN simplifies administration and also enables Bechtle to troubleshoot issues quickly. Unified access and Bechtle’s managed services enable significant savings and a virtually 100% failproof system. In the unlikely event of an incident, support experts are on hand to resolve it in next to no time. In addition, two-factor authentication means that data can only be accessed using a password plus token, providing a considerable boost in data security for MEDIA BROADCAST.