Porta – A modern SASE IT architecture

porta – A modern SASE IT architecture now supports more than 150 porta locations,

covering a wide network of stores across Germany, Slovakia and the Czech Republic, alongside thousands of employees working in retail, logistics, on the move or from home. The porta Group operates furniture stores and an online retail business under the brands porta, SB‑Möbel BOSS and Asko, which places significant demands on its IT security landscape. To ensure flexible, reliable and secure internet access, site connectivity and remote access, porta redesigned its enterprise‑wide security architecture in partnership with Bechtle, creating a unified foundation that supports every location. The multi‑layered, Fortinet‑based security architecture now provides a centrally managed platform for all stores across the group, offering consistent protection for stores, headquarters and mobile users, regardless of where people work.

Project details.

Services

Security
Networking

Industry

Trade / Service

Manufacturer

Fortinet

Company size

> 1,500 employees

Challenge.

Until now, all internet traffic across the porta Group’s sites—including furniture stores, external warehouses and logistics centres—as well as remote access for mobile users, was routed centrally through the headquarters in Porta Westfalica, northern Germany. However, the porta IT team wanted to restructure this traffic to deliver faster access at each site, improve the user experience and strengthen security while maintaining greater control. To achieve this, the organisation was looking for a centrally managed, highly scalable solution with a uniform security policy all without noticeable disruption to day‑to‑day operations. In other words, a solution capable of keeping pace with the company’s growth while reducing operational effort.

When we set out to implement a new security architecture that could keep pace with our size and our momentum, Bechtle structured the project clearly and delivered it in an impressively short timeframe. Within just ten weeks, every store had been equipped with the new security technology, supported by Bechtle technicians at each location, and despite the extremely tight schedule, the entire rollout was carried out with exceptional control and reliability.

Thorsten Kowitz, CIO, porta Group

Solution.

Bechtle delivered a tailored, multi‑layered security architecture built on Fortinet components, providing design, planning, rollout and full project coordination. After completing the design phase and detailed technical planning, the team carried out a proof of concept in a dedicated pilot store where the architecture was deployed under real conditions, tested thoroughly and refined together with the porta IT team. The rollout followed, and Bechtle transitioned more than 150 sites to the new platform within just ten weeks, equipping each location with redundant Fortinet security appliances that provide secure SD‑WAN connectivity across all porta sites and deliver locally protected internet breakouts. Mobile users were securely connected at the same time through FortiClient and FortiSASE as an integrated cloud security solution. Central management is handled through FortiManager while a dedicated FortiAnalyzer system provides consolidated threat analysis. Operational responsibility was eventually handed over to the porta IT team, resulting in a future‑ready solution that modernises remote access and forms the foundation for scalable, zero‑trust‑aligned network security. The modern SD‑WAN infrastructure links every site and enables centralised control and security monitoring, creating a secure, high‑performance and efficient network environment for the porta Group.

Business benefits.

Optimised internet connectivity: Decentralised internet breakouts improve performance while providing secure direct access to the internet.
Rapid rollout: Bechtle’s resources enabled the transition of more than 150 stores within only ten weeks.
Reduced operational effort: Centralised management of the security architecture, clear structures and transparent analysis streamline day‑to‑day operations.
Enhanced security: Modern next‑generation firewall capabilities, including SSL/TLS inspection, strengthen overall protection.
Secure mobile access: Employees receive protected access to systems and the internet from any working location.
Improved monitoring: FortiAnalyzer delivers centralised, intelligent threat analysis presented in meaningful security dashboards.
Centralised management: Consistent policies and clear oversight can be applied across every site.
Scalable architecture: The environment expands flexibly as new locations, users and requirements are added.