1

Zahid Tractor & Heavy Machinery Co. Ltd. has been meeting the Kingdom of Saudi Arabia’s public and private sectors’ tractor needs since the 1950s. The company has since expanded into three core business units—construction machinery, commercial vehicles, and rental equipment. Zahid Tractor sells and services products for notable brands such as Caterpillar, Challenger agricultural tractors, Rammer industrial hammers, Renault trucks, Svetruck specialized lifts, and others. With four main locations and over 40 branches, Zahid Tractor prioritizes local service and is one of the few companies in the region that is ISO 9001, ISO 14001, and OHSAS 18001 certified, proving its ability to deliver services in a reliable, safe, and environmentally friendly way.

Challenge

To improve its network security, Zahid Tractor purchased a third-party security assessment company. Since it was moving from a flat VLAN to a multi-VLAN strategy, it was critical for the company to implement technology that automatically assigns users to the appropriate network. With company-owned laptops, BYOD devices, and contractors accessing the network, the company wanted to improve endpoint security by scanning all endpoint devices and simplify management of guest and contractor access. The move to multi-VLAN role-based access required a network access control (NAC) solution with automated provisioning. At the same time, users had to be prevented from using hubs or unmanaged switches to connect multiple devices on the same downlink ports.

CASE STUDY

“We have been so pleased with FortiNAC we have suggested it to several other companies.”

– Samer Mekkawi, Technical Systems Manager, Zahid Tractor

Heavy Equipment Retailer Gains Complete Endpoint Visibility with Network Access Control

Details

Customer: Zahid Tractor

Industry: Retail

Location: Kingdom of Saudi Arabia

Zahid Tractor began searching for a solution using four main criteria:

§ Easy deployment

§ Ease of operation

§ A solution that works for all remote branches without the need for 802.1x or spanning ports

§ An affordable price

Copyright © 2019 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.

www.fortinet.com

December 12, 2019 1:45 PM

C:\Users\cyan\Documents\Creative Services - Misc\Document Edits\CS - Zahid Tractor\cs-zahid-tractor Folder\cs-zahid-tractor

CASE STUDY | Heavy Equipment Retailer Gains Complete Endpoint Visibility with Network Access Control

273012-A-0-EN

Improved Endpoint Security

Since Zahid Tractor was also moving from a flat VLAN to a multi-VLAN, the company needed to prepare the infrastructure for this upgrade and for the implementation of NAC. Following this preparation, implementing the FortiNAC was a smooth process. The company now has complete visibility into all the users and devices across all locations in

one unified profile-based endpoint posture assessment. Benefits include:

Scanning all endpoint devices Zahid Tractor wanted to improve its security posture by scanning all endpoint devices. The FortiNAC solution can scan devices on both a pre-connect and post-connect basis with a lightweight solution that works with other existing security technologies to provide a simple

but powerful endpoint management solution.

Automated provisioning With automated provisioning, users and devices are placed on the appropriate VLAN with the proper level of access. “We have an unusually high number of profiles,” states Samer Mekkawi, technical systems manager for Zahid Tractor. “With our new multi-VLAN structure, we can’t imagine how we could do this without a NAC solution. Moving from

manual to automated provisioning was a huge improvement.”

Real-time visibility The FortiNAC solution has also given the IT group real-time access to the actions of each device and user connecting to its network. This helps identify potential threats and provides use information for future planning. Using the FortiNAC device’s multi-access detection system, users can no longer use hubs or unmanaged switches to connect multiple devices

on the same downlink ports.

Simplified access for guests, contractors, and peripherals The FortiNAC solution has also simplified approvals for all guest and contract accounts, automated security segmentation on appropriate VLANS, and enabled device profiling and automated registration for network peripherals such as printers and scanners.

The Final Analysis

Zahid Tractor is thrilled with its implementation of the FortiNAC solution. Ahmad Mobadder,

Business Impact

n Increased efficiencies via automated device management

n Improved security by restricting and managing network access and through full visibility of users and devices

n Strengthened network access control with multi-access detection system

n Streamlined IT processes via auto-registration and profiling for network peripherals

Solution

n FortiNAC

senior technical support for Zahid Tractor, notes, “The support is excellent. The customer service representatives are very skilled and the response and resolution times are great.” His advice to companies looking at a network access control solution or a security automation and orchestration solution is to look for a solution that is easy to manage and deploy. He continues, “Since FortiNAC is an 802.1x independent solution, it offers a simple way to interact with our environment infrastructure—especially with our remote locations. We believe that anyone considering Security Automation and Orchestration should carefully evaluate this feature. We have been so pleased with the FortiNAC solution we have suggested it to several other companies.”

“The support is excellent. The customer service representatives are very skilled and the response and resolution times are great.”

– Samer Mekkawi, Technical Systems Manager, Zahid Tractor