Founded in 1999 as a Turkcell Group company, Turkcell Global Bilgi is Turkey’s leading customer experience (CX) centre. With a rich heritage in the telecommunications industry, Turkcell Global Bilgi now provides call centre and digital services to finance, e-commerce, retail, aviation, and other sectors. The organisation has 15,000 employees and 19 locations – 15 in Turkey and four in Ukraine.
Turkcell Global Bilgi has been a Palo Alto Networks customer for more than five years, initially deployed Palo Alto Networks ML-Powered Next-Generation Firewalls (NGFW) PA-Series hardware to safely enable network security and their CX applications. The hardware’s intelligent and proactive features such as zero-day signatures – and machine learning (ML) algorithms embedded in its firewall code, allowed Turkcell Global Bilgi to detect threats across multiple fronts.
Palo Alto Networks also helped the company react immediately to COVID-19. Turkcell Global Bilgi were already using the GlobalProtect network security client for endpoints to provide flexible, secure remote access for users. It was thanks to GlobalProtect and NGFWs that, when the pandemic struck, the company were able to switch almost 14,000 call centre agents to work-from-home (WFH) operations in just 10 days.
Now, Turkcell Global Bilgi are moving to the next phase of cybersecurity agility to be secure in any environment. A state-of-the-art, dual-site data centre infrastructure has been created to enable failover and business continuity in the event of a potential disaster. Instead of the data centre network being tied solely to physical hardware, it now uses VMware NSX-T to deliver a new software-defined networking operational model, forming the foundation of the SDDC.
The challenge for Turkcell Global Bilgi was to bring visibility, control, and protection to the CX applications running on the VMware NSX-T data centre environment. Each data centre has approximately 60 hosts, so Turkcell Global Bilgi were looking to secure internal traffic across a total of 120 hosts.
Turkcell Global Bilgi identified that, in order to secure their CX applications deployed in the VMware NSX-T data centre, the solution would be required to:
To build on their success with GlobalProtect and the PA-Series ML-Powered NGFWs, Turkcell Global Bilgi decided to deploy VM-Series virtual firewalls to secure their dual-site SDDC rollout. The virtualised NGFWs leverage underlying VMware vSphere and NSX-T data centre resources and functionality to integrate into the application traffic flow and protect segmented workloads that often need to communicate with each other.
Berkan Sert, Network Infrastructure Manager at Turkcell Global Bilgi explains the reasoning behind deploying the virtualised NGFWs: “Although VMware NSX-T provides a solid foundation for securing virtualised environments, it only solves some of our network security puzzles. In addition, some regulations – such as the PCI credit card payment – call for stricter security measures than NSX-T can deliver natively.”
The VM-Series virtual firewalls also provide Turkcell Global Bilgi with integrated Cloud-Delivered Security Services – such as Threat Prevention and exfiltration prevention. These services identify and block exploits, stop malware, and prevent previously unknown threats from infecting sensitive information and critical systems.
Palo Alto Networks Panorama network security management brings it all together, providing Murat Karaaslan, Network Security Planning Principal at Turkcell Global Bilgi, and his team with a centralised and comprehensive view of Global Bilgi’s entire network security posture, spanning the on-premises infrastructure and virtualised environments. For example, Panorama simplifies the creation of traffic steering rules within NSX-T Manager and ensures security configurations are synchronised with NSX-T Manager for consistent security.
Berkan Sert lists several benefits of deploying the virtualised NGFWs and accompanying cloud-delivered security services, which:
Find out how your organisation can find more security efficacy across clouds and virtual environments here. Or simply sign up for a personalised demo to see how you can get best-in-class virtualised network security up and running fast.