Aventura, Florida · serving clients across the United States (305) 404-9404Toll-free (800) 767-8566Emergency? Get a call within 1 hour
Global industrial conglomerate

Ten years running the U.S. offices of one of South Korea's largest companies

One of South Korea's largest conglomerates and a leader in its segments, with a trading office in New York and a venture-capital office in San Francisco.

Scale
2 U.S. sites, bi-coastal
Engagement
Nearly 10 years

The challenge

Two U.S. offices on opposite coasts had to meet headquarters' security standards while staying productive in their own markets: trading in New York, venture investment in San Francisco.

Running two offices for a company headquartered overseas means working inside headquarters' standards while serving local teams on a different schedule and in a different market. The role combined hands-on support with security oversight.

The email finding illustrates the approach. When we detected vulnerabilities on mail servers run by headquarters' own IT team, we notified them directly, so a risk that could have become an incident was handled as a routine fix. Device management with Microsoft 365, Intune and Defender gave staff the flexibility of BYOD without loosening control.

What our team delivered

  • Led the infrastructure of both sites end to end: network management, systems, end-user support and information security
  • Detected vulnerabilities on the corporate email servers run by headquarters' IT team in Korea and notified them before the issues became incidents
  • Designed and deployed the BYOD strategy and device management with Microsoft 365, Intune and Defender
  • Ran on-premises Active Directory and a Microsoft Exchange hybrid deployment with Microsoft 365

Result

A decade of continuous operation for both offices, with security findings escalated to headquarters ahead of problems.

Defense in depth, on a loop

Every device on your network sits behind a monitored firewall with two internet circuits, so attacks are stopped at the door and a provider outage does not stop the business.

Defense in depth, on a loopDiagram of a protected corporate network. The internet reaches an edge firewall over two redundant ISP circuits. Behind the firewall a core switch feeds PoE access switches serving Wi-Fi access points, workstations, IP phones and cameras with door access control, plus a server and iSCSI storage cluster and an encrypted VPN link to the cloud. Gold packets show legitimate traffic passing; red threat packets are stopped and dropped at the firewall. On a loop, ISP circuit A goes down and traffic fails over to ISP circuit B, then the circuit is restored. InternetISP AISP BFirewallCloudVPN tunnelCore switchServersiSCSI storagePoE switchPoE switchWi-FiWorkstationsIP phonesCCTV · doorsISP A downRerouted to BLegitimate trafficThreat, blockedPROTECTED NETWORK

One private network on four continents

Every site talks directly to every other site over WireGuard, so traffic never detours through a hub. Each business unit gets its own overlay, and IPsec tunnels carry traffic to partners and carriers.

One private network on four continentsFive company sites in Europe, Asia, South America and North America are joined by a full mesh of WireGuard tunnels running over UDP with Noise IK key exchange and ChaCha20-Poly1305 encryption. Each pair of sites has two parallel tunnels, one per business-unit overlay, Finance and Operations. Two sites also connect through IPsec IKEv2 tunnels with ESP and AES-GCM to a partner network and to a carrier MPLS network. Packets flow in both directions on every tunnel. FrankfurtEuropeSingaporeAsiaTokyoAsiaSão PauloSouth AmericaMiamiNorth AmericaFinance overlayOperations overlayIPsec tunnelPartner networkIPsec IKEv2Carrier networkIPsec IKEv2WireGuard · UDP · Noise IK · ChaCha20-Poly1305IPsec · IKEv2 · ESP with AES-GCM

Twelve months of availability

Measured availability per site over twelve months against a 99.99% target, which allows 52.6 minutes of downtime a year. Six of seven sites meet it; Singapore misses and is shown in red. Illustrative figures.

Twelve months of availabilityDot plot of twelve-month availability. Miami 99.998, Frankfurt 99.997, New York 99.995, London 99.993, Tokyo 99.992, São Paulo 99.991, all at or above the 99.99 percent target. Singapore 99.987 is below target.Availability per site, last 12 monthsMeets 99.99% targetBelow target99.99% target99.98%99.985%99.990%99.995%100.00%Miami99.998% · 10.5 min downNew York99.995% · 26.3 min downFrankfurt99.997% · 15.8 min downLondon99.993% · 36.8 min downTokyo99.992% · 42.1 min downSão Paulo99.991% · 47.3 min downSingapore99.987% · 68.4 min down · below target

Frequently asked questions

Direct answers to the questions we hear most. Something else on your mind?

Send us a message
How were the two U.S. sites run?

Our team led the infrastructure of both sites end to end: network management, systems, end-user support and information security. The sites were on opposite coasts, trading in New York and venture investment in San Francisco. They ran continuously for a decade.

How were personal devices handled?

We designed and deployed the BYOD strategy and device management with Microsoft 365, Intune and Defender. The sites also ran on-premises Active Directory and a Microsoft Exchange hybrid deployment with Microsoft 365.

What happened when vulnerabilities were found on headquarters' systems?

The team detected vulnerabilities on the corporate email servers run by headquarters' IT team in Korea and notified them before the issues became incidents. The result was security findings escalated to headquarters ahead of problems.

Do you know if your company is safe?

Speak with a security engineer today. The first assessment call is free and confidential.

CallFree assessment