CASE STUDY

Details Customer Name: Minsheng A FortiGate Topology: Industry: Finance Defending Minsheng Bank’s Network Location: ,

About Minsheng Bank Challenges nnBuild secure sub-intranet system Established on January 12, 1996 in Beijing, Minsheng Banking Corporation Ltd is a national joint-stock commercial bank with investments mainly from non-state nnInclude antivirus, antispam, and owned enterprises. The company differentiates itself from many other state-owned web filtering functionalities across a and commercial banks, through involvement in diversified economic sectors multi-layered network and the application of normative modern enterprise systems in the financial sector in China. Like all standard joint-stock financial institutions, it also has to meet strict Objectives compliance with the current corporate and commercial banking regulations. nnSecure both a core network and additional network for financial activity On December 19, 2000 the share stock of China Minsheng Bank was listed on the . Following on March 18, 2003 over 4 billion RMB nnCreate a more advanced and secure of convertible corporate bonds of the company was traded at the SSE. November service network 8, 2003 the company, as the first commercial bank in China, successfully issued 5.8 billion RMB subordinated bonds in the inter-bank bond market through private Deployment placement. In October 26, 2005 the company became the first commercial bank nnFortiAnalyzer in China to complete share reform and provided a successful example of share nnFortiGate reform in China’s capital market. Notably, on November 26, 2009 the company was now listed on the Stock Exchange. Minsheng Bank wanted to reset nnFortiManager its historical position among small enterprises and high-end retailers. It set out to achieve a second revival through becoming a distinct and efficient bank that brings maximum value and return to both its customers and investors.

1 CASE STUDY: MINSHENG BANK

FortiGate Solution

Network segmentation between service networks and other networks is critical as they serve completely different entities. Other networks, such as OA networks, are generally meant for office administration systems while service networks host systems specific to banking businesses. Minsheng uses FortiGate’s firewall to defend the service networks and consequently control access to that network.

A. Deploy FortiGate at the parameter of Minsheng IDC to provide access control to servers. B. Deploy FortiGate to segment and control access between service and OA networks at branch offices. C. HA clusters are used where service availability is critical.

Instead of building separate extranet networks and deploying additional VPN gateways, Minsheng utilizes the VPN functions of the FortiGate, thereby significantly reducing TCO.

A. A pair of FortiGates act as the VPN concentrator to terminate VPN tunnels from partners and remote offices. B. Data can be securely transmitted between partner sites/branch offices and the IDC.

FortiGates deployed at the Internet gateways also provides AV and IPS protection against external threats.

A. FortiGates scan and block malwares from entering into the networks. They also protect against external hackers. B. FortiGates also serve as VPN terminations for secure communica- tions between HQ and branch offices.

GLOBAL HEADQUARTERS EMEA SALES OFFICE APAC SALES OFFICE LATIN AMERICA SALES OFFICE Fortinet Inc. 120 rue Albert Caquot 300 Beach Road 20-01 Paseo de la Reforma 412 piso 16 899 Kifer Road 06560, Sophia Antipolis, The Concourse Col. Juarez Sunnyvale, CA 94086 France Singapore 199555 C.P. 06600 United States Tel: +33.4.8987.0510 Tel: +65.6513.3730 México D.F. Tel: +1.408.235.7700 Tel: 011-52-(55) 5524-8428 www.fortinet.com/sales

Copyright © 2015 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other resultsmay vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.