Wi-Fi Logins with a Twist: Captive Portals and DNS Filtering
Ever connected to a public Wi-Fi network at a coffee shop or airport, only to be greeted by a login page instead of the internet? That’s a captive portal in action. It’s like a gatekeeper, ensuring you meet certain requirements before granting access.
Benefits for Businesses:
- Security First: Captive portals keep unauthorized users out, protecting business networks from malware and hacking attempts. They can also enforce security terms to limit liability.
- Marketing on Autopilot: The captive portal is a captive audience! Businesses can use it to display targeted ads,special offers, or showcase their brand.
- Customer Engagement: Interactive portals with surveys, polls, or social media logins can gather valuable customer feedback and boost engagement.
- Data-Driven Decisions: Businesses can collect email addresses or social media logins to build email lists and gain customer insights for better marketing.
- Premium Wi-Fi: Businesses offering high-speed or premium connections can leverage captive portals for paid Wi-Fi access.
While captive portals are great at managing network access and leveraging that access for business benefits, they do not protect users from accessing harmful websites or inappropriate content after they have connected to the network. This is where DNS filtering steps in as a critical ally. It works as a second line of defense, blocking access to non-compliant and harmful websites right from the get-go. DNS filtering can block malicious sites even before you log in, keeping your device protected. Additionally, some portals can integrate with DNS filtering, allowing access to specific DNS servers only after successful login. This helps enforce company policies and security guidelines.
Combined, these technologies make it possible for businesses to provide a safe, controlled, and productive online experience. This is why DNS filtering becomes an invaluable partner for captive portals to make the environment not only accessible but also secure.
Potential Bumps in the Road:
Here’s the catch: strong DNS filtering on users device might block the captive portal’s redirection, preventing the login page from showing up. This can be frustrating!
- Roaming Client Blues: This often happens with software installed on devices (roaming clients) for DNS filtering. If users run into this, they should contact their company’s IT team to add the captive portal to an “allow list”.
- Local vs. Network DNS: By default, roaming clients might prioritize their own DNS servers over the network’s.This can cause issues with captive portals that require the network’s specific DNS server for redirection.
Finding the Right Balance:
While combining DNS filtering and captive portals offers great benefits, it’s important to consider user experience, technical challenges, and privacy concerns. Striking a balance between security and usability is key. Additionally,organizations need to stay updated on evolving threats and regularly adjust their filtering policies.
The Final Word:
Captive portals and DNS filtering, when used together, create a powerful shield against online threats and unwanted content. This combo allows organizations to create secure and controlled network environments while empowering users to access resources safely. As security threats become more prevalent, this integration is a cornerstone of modern network security strategies.
About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About SafeDNS
SafeDNS breathes to make the internet safer for people all over the world with solutions ranging from AI & ML-powered web filtering, cybersecurity to threat intelligence. Moreover, we strive to create the next generation of safer and more affordable web filtering products. Endlessly working to improve our users’ online protection, SafeDNS has also launched an innovative system powered by continuous machine learning and user behavior analytics to detect botnets and malicious websites.
SalesTechStar Interview with Joseph Rodriguez, CRO at Portnox
Originally published on SalesTech Stars.
Hi Joseph, tell us about yourself and what piques your interest about being in the B2B SaaS market?
I have over 20 years of SaaS Enterprise sales and Go-to-Market experience. This includes my current role as CRO at Portnox, revenue leadership positions at Spredfast (now Khoros) and Upland Software. e.
I approach every interaction with genuine care, whether it is with the sales team, customers and prospects, or my peers. I truly enjoy working shoulder to shoulder with our incredible sales team to deliver unprecedented revenue-growth, expansion, and retention.
The team aspect of it is very important to me. A good example – last month we brought the sales organization to Austin for a sales rally. We spent the time not only talking about the business and key focus areas. In addition, we took part in team building exercises and dinners to get to know and trust each other on a personal level.
I also love planning sessions with my peers on the Portnox Executive Leadership team to think about focus areas for the next six months and into the following year.
It’s invigorating to genuinely solve a challenge for customers. I love it when I have a solution that solves real problems. At Portnox, we are solving cybersecurity issues and challenges for customers – making their environment and devices and employees safer. I sat in the offices of a large customer last week, and the team was so grateful for all the problems we helped them solve. They feel like they’ve taken a giant leap in security safeguards and are helping them create their security strategy.
The combination of teamwork, strategic planning, and the genuine impact we have in solving real problems for companies is what makes being in the B2B SaaS market incredibly fulfilling for me.
Read More: SalesTechStar Interview with Allison Metcalfe, CRO at Cloudinary
As a revenue and sales leader: what are the five fundamentals you follow as a daily practice that you also instill in your team?
As a revenue and sales leader, I adhere to five fundamental practices daily, which I also instill in my team. These practices are essential for maintaining excellence and achieving consistent success, particularly in the competitive SaaS industry.
- Do What We Say We’re Going to Do: Reliability is crucial. Delivering on our promises builds trust and credibility with our clients and colleagues. This practice ensures accountability and fosters a culture of dependability.
- Be On Time: Punctuality reflects our respect for others’ time and our commitment to professionalism. Whether it’s a meeting, a call, or a project deadline, being on time demonstrates discipline and reliability. It’s a simple yet powerful habit that sets a positive tone for all interactions.
- Prep, Prep, Prep: Thorough preparation is non-negotiable. We emphasize the importance of being well-prepared for every engagement, whether it’s a sales pitch, a client meeting, or an internal discussion. This includes understanding the client’s needs, researching their business, and anticipating potential questions or challenges.
- Add Value: Our goal is to consistently add value to our clients’ businesses. This goes beyond selling a product or service; it’s about understanding their challenges and providing solutions that genuinely address their needs. We train our team to focus on how we can help our clients achieve their goals, not just on the features of our offerings.
- Understand the Customer’s Business: Deeply understanding our customers’ businesses is critical. This involves recognizing their unique challenges, industry dynamics, and strategic objectives. By doing so, we can tailor our approach and provide insights that resonate with them, positioning ourselves as trusted advisors rather than just vendors.
In addition to these fundamentals, we emphasize value-based selling. This approach is centered on understanding what the customer is genuinely trying to solve. Our training focuses on identifying the core issues our customers face, such as achieving security compliance goals or protecting their devices, rather than merely highlighting product features. By asking the right questions and truly listening to our customers, we can align our solutions with their specific needs, ultimately delivering greater value and fostering long-term partnerships.
Can you take us through some of the revtech and salestech that you’ve relied on over the years to drive goals?
We rely on several revolutionary technologies to drive our sales goals and optimize our processes. Here are a few that have been indispensable:
Gong is an AI-powered sales listening tool is something I couldn’t live without. Gong records our calls and provides data, analytics, and metrics that are invaluable for understanding and improving our sales interactions. For instance, I can see the percentage of time our sellers talk versus listen on a call, the breakdown of demo versus presentation calls, and the most commonly asked questions from prospects. This data allows us to be proactive in training our sales team, ensuring they are always improving and aligning with best practices.
Another AI-oriented tool, 6Sense, has been critical in identifying the right prospects who are actively in the market for our solutions. It helps us craft the right type of message, ensuring that we’re reaching the right person at the right place and time. The data-driven insights from 6Sense make our sales team incredibly efficient, allowing them to target the right people with precision. I’ve used 6Sense in every organization I’ve been a part of, and it consistently delivers results.
Every member of our sales team uses LinkedIn Sales Navigator. It allows us to message key stakeholders of our customers or prospects one-on-one, fostering genuine connections on a business-oriented but social platform. The ability to connect and engage with prospects on LinkedIn has been a game-changer for us, enhancing our outreach and relationship-building efforts.
These tools have not only helped us achieve our sales goals but have also significantly improved our overall sales strategy and efficiency.
What are the five biggest challenges that modern sellers and revenue leaders face today and what tips would you share against these?
Modern sellers and revenue leaders face several significant challenges in today’s sales landscape. Here are the five biggest challenges and some tips to address them:
- Educated Buyers: Today’s buyers are more informed than ever before. They often don’t engage with salespeople until they are 60-70% through the sales process, meaning they already have a lot of knowledge about your product. This shift requires salespeople to be even more prepared and knowledgeable. Tip: Leverage tools like Gong and 6Sense to gain insights into what your customers are interested in before you even speak to them. Be prescriptive in your approach, demonstrating clear value and providing tailored solutions that address their specific needs.
- Reduced Time with Buyers: With buyers doing much of their research independently, salespeople have limited time to influence decisions. Tip: Make every interaction count. Focus on delivering high-value content and personalized experiences. Utilize data-driven insights to understand pain points and position your product as the ideal solution quickly and effectively.
- Shifting Messaging Needs: The way you communicate with potential customers has evolved dramatically. Buyers now expect more direct and relevant interactions. Tip: Use AI tools to gather data and to tailor messaging. Be clear about the value you bring and how your product can help them achieve their goals.
- Access to Decision-Makers: Getting direct access to ultimate budget holders and decision-makers can be challenging, as they are often focused on high-level strategy rather than tactical buying decisions. Tip: Focus on educating and arming your primary contact with the information and resources they need to sell your product internally. Provide them with compelling use cases, ROI data, and any support materials that can help them advocate for your solution.
- Adapting to Change: The sales environment is constantly evolving, and what worked 18 months ago might not work today. Staying ahead of the curve is essential. Tip: Continuously invest in learning and adapting to new technologies. Encourage a culture of agility and innovation within your sales team, always seeking out new ways to meet (and exceed!) the evolving needs and expectations of your customers.
By addressing these challenges head-on and leveraging the right tools and strategies, modern sellers and revenue leaders can navigate the complexities of today’s sales landscape and drive success.
Take us through your use of AI in salestech and how you enable your teams with upskilling and better processes so that new age tech is used optimally?
We layer in AI to enhance, not replace, human interaction in sales. While AI provides valuable data, it’s still crucial to connect genuinely with prospects. AI tools help us analyze calls and identify prospects, making our sales efforts smarter and more targeted.
However, we do more of our training around developing essential soft skills like empathy and active listening. This approach helps our teams be more prescriptive in their strategies and move prospects quickly to demos and proofs of concept. Ultimately, AI is a tool to make us smarter, but the human element of understanding and curiosity remains key to our success.
A few ways in which you think B2B tech sales should change?
B2B tech sales need to shift focus from an overload of techniques and tools to fostering genuine human connections. Despite the abundance of technology and data, sales remain fundamentally people driven. Instead of relying solely on sales methodologies, sales professionals should prioritize understanding and relating to prospects on a personal level. Be genuinely curious, respond authentically, and leverage your expertise to connect with and help clients, not just to sell to them. This approach will build stronger, more meaningful relationships and drive better results.
Some thoughts you’d share for fellow CROs before we wrap up?
Embrace adaptability and rapid decision-making. Constantly evaluate your internal talent to ensure it aligns with your go-to-market strategy and optimize resource allocation to manage costs effectively. The ability to change and iterate every quarter is crucial—don’t get stagnant. Leverage data and prioritize sales and revenue operations to drive efficiency and informed decision-making. Continuously review and adjust based on data insights to stay ahead and optimize performance.
| Cloud Native | Faux Cloud | |
| Infrastructure | Provided, paid, and managed by the vendor; mostly invisible to anyone utilizing the service | Provided, paid, and managed by you through your own AWS or Azure account |
| Implementation | Quick time to value; much of the work is invisible to you | Depends on the complexity of the app, but it is your responsibility to do the work or pay someone else to do it |
| Pricing | Subscription with lower up-front cost | Perpetual license with expensive up-front cost that are amortized over time.
(Note: many vendors are moving away from perpetual licensing for on-prem or faux cloud products, but as they do, their customers are getting the worst of both worlds – paying more annually while still being responsible for on-going maintenance of the product) |
| Total Cost of Ownership | The price of the product reflects the genuine cost of ownership | The price of the product is only one (and sometimes only a small) part of the total cost that is reflected in the staff time and public cloud expenses; in many instances, you may not even know what it is going to cost you until it is too late |
| Vendor Lock-In | Easy to switch to another vendor should your business needs change | Expensive license, deployment and maintenance costs make switching prohibitive, often for years |
| Access | Access anywhere via browser with internet connection | On-premises model often requires access via VPN
(Note: what happens when there is a problem with your solution and your VPN is configured to use your on-premises system? Sounds like someone is driving into the office!) |
| Scalability | Automatically scales with usage | Customer must increase capacity to keep up with usage |
| Updates | Vendor regularly updates the underlying components such as servers, databases, etc. This process will often be invisible to you. | You are responsible for ensuring that the entire tech stack – components, databases, servers, network – is updated with the latest patches |
| Upgrades | You seamlessly and transparently reap the benefit of new features, enhancements, and other improvements with zero effort | Any upgrade requires you to install, test, and then deploy the upgrade in production, often during nights and weekends in case something goes wrong |
| Accountability | The vendor takes ownership of the uptime and security, performance, and availability of the service | Apart from the infrastructure as a service, you are on the hook for the performance, health, security, and availability of the solution, lock stock and barrel |
Cloud Native
Infrastructure
Provided, paid, and managed by the vendor; mostly invisible to anyone utilizing the service
Implementation
Quick time to value; much of the work is invisible to you
Pricing
Subscription with lower up-front cost
Total Cost of Ownership
The price of the product reflects the genuine cost of ownership
Vendor Lock-In
Easy to switch to another vendor should your business needs change
Access
Access anywhere via browser with internet connection
Scalability
Automatically scales with usage
Updates
Vendor regularly updates the underlying components such as servers, databases, etc. This process will often be invisible to you.
Upgrades
You seamlessly and transparently reap the benefit of new features, enhancements, and other improvements with zero effort
Accountability
The vendor takes ownership of the uptime and security, performance, and availability of the service
Faux Cloud
Infrastructure
Provided, paid, and managed by you through your own AWS or Azure account
Implementation
Depends on the complexity of the app, but it is your responsibility to do the work or pay someone else to do it
Pricing
Perpetual license with expensive up-front cost that are amortized over time.
(Note: many vendors are moving away from perpetual licensing for on-prem or faux cloud products, but as they do, their customers are getting the worst of both worlds – paying more annually while still being responsible for on-going maintenance of the product)
Total Cost of Ownership
The price of the product is only one (and sometimes only a small) part of the total cost that is reflected in the staff time and public cloud expenses; in many instances, you may not even know what it is going to cost you until it is too late
Vendor Lock-In
Expensive license, deployment and maintenance costs make switching prohibitive, often for years
Access
On-premises model often requires access via VPN
(Note: what happens when there is a problem with your solution and your VPN is configured to use your on-premises system? Sounds like someone is driving into the office!)
Scalability
Customer must increase capacity to keep up with usage
Updates
You are responsible for ensuring that the entire tech stack – components, databases, servers, network – is updated with the latest patches
Upgrades
Any upgrade requires you to install, test, and then deploy the upgrade in production, often during nights and weekends in case something goes wrong
Accountability
Apart from the infrastructure as a service, you are on the hook for the performance, health, security, and availability of the solution, lock stock and barrel
About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。
How we implemented traffic routing in Meshnet for increased security
Traffic routing is a significant feature provided by NordVPN’s Meshnet. Essentially, it allows any Meshnet-connected device, called a node, to become a VPN server for other nodes. To do this, the end user needs only to click a few buttons in the NordVPN app. Under the hood, however, we need to handle setup complexities in the code and ensure compatibility with platforms not inherently designed to operate as VPN servers.
How a classical VPN server works
First, we should understand how a classical VPN server operates. Meshnet uses the NordLynx protocol, which is based on WireGuard® – a simple, fast VPN that uses state-of-the-art cryptography. For this article, we’ll refer to WireGuard (wg) in our examples and graphics.
A standard configuration would look like this:
A standard VPN configuration.
To arrive at this setup, a couple of things need to happen.
First, let’s establish a secure tunnel (purple dotted connection):
Virtual network interfaces, labeled as wgC and wgS, (which work like tun adapters) are created on both client and server sides.
The client uses a UDP socket to establish a cryptographic session with the server’s address at 192.0.2.1:51820 (in the diagram above, subnet 192.0.2.0/24 stands for wide area network).
Private IP addresses (100.64.0.2, 100.64.0.1) are assigned to the client and server respectively.
At this point, the client can ping the server using the IP address 100.64.0.1, and the server can ping the client at 100.64.0.2. All IP packets sent through the wgX interface are encrypted and sent via the global internet. The real path of the packet is something like this: wgC –(encapsulate)–> lanC –> lanR –> netR –> netS –(decapsulate)–> wgS
But to the OS, the wgX interface is just another network connection to where IP traffic can be routed, similar to a LAN router.
To the OS, a virtual interface is just like any other network connection.
Now if the client wants to conceal its real IP address, it can configure the routing table to direct all default traffic through the wgA interface (some precautions are needed to avoid routing the encrypted traffic itself, but that’s out of the scope of this article).
Meanwhile, the VPN server needs to be configured to function like a router, accepting incoming packets and forwarding them to their next destination. For this, two features are required:
IP forwarding
In most network stack implementations, if a packet arrives on a network interface, it can only be sent out on the same interface. So when the server receives a packet from the wgS interface that’s directed to an IP address outside the network’s subnet, it is dropped.
Enabling IP forwarding changes this behavior. Now, when a packet arrives at a network interface, it is checked against the network’s entire routing table. If another network interface provides a better match, the packet is forwarded to that interface.
Packet path on the server would look like this: … -> wgS –(ip_fowarding)–> netS -> …
NATing
IP packets arriving at the VPN server will have a private IP address like 100.64.0.2, assigned to the wgC interface. In most cases, these packets will be directed to a publicly routable IP address. After the packet gets forwarded to the netC interface, it still can’t be sent out, because its source address falls within the private network range. The router uplink only deals with public IP addresses and wouldn’t know which device is sending the packet.
As such, NAT (network address translation) is used. For every packet that has a unique source IP, port, and in some cases destination, a unique mapping is created in the NATing table.
For example, if a TCP packet comes from 100.64.0.2:AAAA, it would be mapped to a 192.0.2.1:BBBB address (here AAAA is the port used by software on the client device, and BBBB is a randomly assigned unused port on the server).
The TCP’s packet’s source IP and port would then be exchanged for NAT mapped values, checksum adjusted, and finally sent out on its merry way to the wider internet.
If another computer responds to this BBBB port, the NATing table is consulted and destination IP and port values revert to the original values before the packet is sent to the wgC interface.
And that’s all for a very rudimentary setup!
Supportable platforms
The main challenge with these two requirements is that they limit the number of devices that can function as routers (apart from implementing a user space transport layer multiplexing/demultiplexing logic).
Typically, if we want to set up IP forwarding and NAT, we need root/administrator permissions. Most platforms with strong sandboxing like macOS App Store, iOS, and Android do not provide official APIs to enable this.
That leaves 3 “platforms” we do support:
Linux
Linux is the easiest one of the bunch because it has everything we need already built in, and our NordVPN service, running as root, can set everything up.
macOS Sideload
Unlike the App Store version (which I count as a separate platform), with macOS Sideload applications it’s possible to create launchd services that run with root permissions. This unlocks features that Darwin (the core Unix operating system of macOS) inherits from BSD like ip_forwarding and pf (packet filter), which are used to set up NATing and filtering.
Windows
Setting up IP forwarding is as trivial as a registry modification. However, even if Windows has an official NAT, we found it difficult to use during testing. It does not properly work with Windows Home editions. Being primarily designed for use with Hyper-V, a lot of undefined behaviors crop up when working with our custom adapter drivers. To work around this, we built and shipped our own implementation for NAT.
How Meshnet traffic routing works
Now that we know how a regular VPN server looks and works, we can compare it to how it operates in Meshnet:
A Meshnet VPN configuration.
The first interesting difference to observe is that, unlike a VPN server, in general, both Meshnet devices will be located in their local area networks.
And without Meshnet’s NAT traversal capabilities, turning a device into a VPN server for easy connection by other devices would be challenging.
The second difference is that your dedicated VPN server will usually have not one, but two NATing steps.
The client’s (device A) source IP is changed to the server’s IP (device B).
The server’s IP (device B) is then changed to the router’s IP.
This unlocks some interesting behavior: If device A is your phone, and device B is your home PC, routing through B makes it appear to your network that your phone is actually your PC. This allows you to securely access your home network without needing API services hosted on a public server.
And if you use a service that only allows access from your home network, it becomes impossible to tell whether the network messages are coming directly from your home PC or a device routing through it.
At this point, if you are even slightly inclined towards security, some alarm bells may be ringing.
Security considerations
Traffic routing is a very powerful feature:
You can take over a local network.
The device functioning as a VPN server can inspect all traffic going through it.
Other devices can essentially mimic your device.
As such, we want the user to have as much control as possible, so a couple of flags exist to be set on each device per connection.
Allow traffic routing: Specifies if a device can route its traffic through the device acting as a VPN server at all
Allow local network access: Specifies if the device can communicate with other devices in the server’s local area network
Generally, when using this feature, we want to avoid behaviors that might not be obvious at first glance.
A great example of this is a security issue we found and mitigated during development:
Traffic routing could cause unexpected security issues.
Let’s say we have two Meshnet accounts: Mesh X with devices A and B, and Mesh Y with device C. Device C has an external connection to device B, which allows traffic routing for C.
Without any additional network rules, when C is routing through B and pings A’s private IP, it would actually reach A, even though they are not configured to be directly connected. It does not even require NAT to work in this case.
So without any explicit user input, device B has unintentionally exposed device A to device C.
To prevent this, we ensure that all such packets are dropped by B. The only way for C to reach A is to send a Meshnet invite and form a direct connection, making this relationship explicit.
In short, traffic routing is a relatively simple technical solution that unlocks many interesting capabilities in the Meshnet network.
About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About Nord Security
Nord Security is a cybersecurity company known for its flagship product, NordVPN. The company is dedicated to providing online security and privacy solutions to individuals and businesses globally.
How CyberCare integrated Zendesk and NordLayer for the best customer support on the market
CyberCare is a beacon of customer support and stands tall with its roots firmly planted in customer experience excellence. With offices in Lithuania and Ukraine, the company’s workforce of 400 employees embraces a hybrid model. CyberCare succeeds in a culture of quality and flexibility, serving millions worldwide.
Darius Dagys, Head of Business Development, pilots the organization’s journey of supporting diverse cybersecurity products by leading external partnerships and automation internally. Operating with client data and handling user requests, the company understands the importance of employing the right tools to make work and security effortless and efficient.
The challenge
On a mission to secure client data effectively
For CyberCare, the security of customer data is non-negotiable. As a company that prides itself on providing superior customer support, it became evident that an enhanced security framework was imperative.
The quest wasn’t sparked by a singular incident but by a continuous commitment to uphold the highest standards of data security and privacy.
“Customers trust us with their data when we provide customer support, making the data paramount. To reflect how we value this trust, CyberCare follows best cybersecurity practices.”
CyberCare combines various technologies and solutions to achieve the best results. However, when they found themselves in need of a network security tool, the team looked for something to ease their daily tasks, maintenance, and configuration to integrate into the existing technology stack smoothly.
“With three years of customer support experience under our belt, our team has provided over 38 million solutions to end-users. At Cybercare, we recognize the criticality of automation, the latest technologies, and top-notch quality in delivering services.”
Simple integration and high-security standards led the lookout for a new tool. The challenge was unique as the customer support software vendor secured part of the client data. For complete protection, CyberCare needed to ensure that access to the network is secure from its side as well.
The solution
A simple and effective way to add another security layer
The pivot from previous VPN tools to NordLayer wasn’t a leap in the dark but a calculated step toward fortified security. NordLayer, with its robust VPN services, offered the perfect armor to shield the valuable data entrusted by clients.
“Before NordLayer, we had a short sprint with other VPN tools, which were more complicated. They were managed manually and it was difficult to onboard and offboard new CyberCare employees.”
Eliminating the complexity and creating shortcuts in user management and network controls streamlined the processes of the CyberCare security team.
“IP allowlisting and creation of other policies are configured automatically, so my team doesn’t have to spend much time setting up the tool.”
The most important thing is that NordLayer complemented already existing tools in use, such as SSO integration and the customer support solution Zendesk.
Why choose NordLayer?
The choice was clear and devoid of lengthy deliberations. NordLayer promised simplicity, efficacy, and unwavering security.
“NordLayer solution is very simple to use—no effort required.”
It stood out as CyberCare needed to navigate cyberspace, ensuring data remains inviolable confidently.
“Having a combination of different security layers and solutions, I sleep well knowing that our customers’ data is secure.”
One of the criteria for selecting NordLayer was its adherence to security standards. Aligning with compliance requirements gives a stronger foundation to a company like CyberCare to be sure all is well on all fronts.
Strategic integration of NordLayer and Zendesk to efficiently protect customer data
Who? Dual synergy
CyberCare employs both internal policies and external tools to manage sensitive data. They emphasize selecting partners like Zendesk, known for its commitment to security and ensuring compliance with the latest standards.
Why? Strategic alignment
Zendesk was chosen for its status as a leading CRM platform, ease of use, and significant investment in security. This partnership was based on the need for a CRM that matched CyberCare’s security requirements and business operations.
How? The process
CyberCare leverages NordLayer to ensure that the login process to Zendesk is encrypted and secure. With NordLayer, they assign fixed IPs, meaning Zendesk can be accessed securely via these IPs. This setup guarantees that both the traffic within Zendesk and the access to it are encrypted and safeguarded.
What? The usage
The integration is seamless for employees who log into Zendesk through NordLayer without navigating complex security measures. This not only simplifies the process but also enforces a high level of security by default.
The outcome
An intuitive tool you can forget about
The integration of NordLayer into CyberCare’s operations marked a new dawn. With NordLayer’s intuitive design and features like 2FA, SSO, and static IPs, CyberCare not only safeguarded its data but also streamlined access and management processes.
“There are two things about using NordLayer in the team. First, it’s definitely easy, as the app always runs automatically in the background. Second, users must select the correct gateway to connect to Zendesk to do their work, so it’s intuitive by design.”
As for the tool implementation, NordLayer didn’t require long preparations and complicated setups. Simple, from start to finish, the deployment and solution adoption in the team was as smooth as it gets.
“Onboarding people to NordLayer took one hour. We had to make preparations from the back end, but for the team, it was super easy. You just have an app, click connect, and you can forget about it. There was no trouble at all.”
The simplicity of NordLayer’s VPN solution meant that employees could focus on their tasks without the distraction of complex security protocols.
Pro cybersecurity tips
Have you ever thought about your top cybersecurity hygiene actions you perform daily? It’s a good question to ask yourself for a self-check because maybe today is the day you start acting a bit more secure than yesterday.
If you don’t know where to start or want to compare your habits with other professionals, here are Darius Dagys, the Head of Business Development and AI at CyberCare, the top favorite tips everyone should consider.
In essence, the collaboration between NordLayer and Zendesk within CyberCare’s operations showcases a forward-thinking approach to data security, emphasizing ease of use without compromising on stringent security measures. This strategic choice not only aligns with their internal policies but also reinforces their commitment to protecting sensitive customer information.
About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
About Nord Security
The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.
About NordLayer
NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security.
The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.