Replacing VPN complexity with identity-first Zero Trust connectivity for global SAP administration, customer onboarding, and cloud migration.
1 Consistent access model
0 Inbound ports
0 Dependence on VPNs
Hours for global customer onboarding
Ready to get started?
Providing secure administrative access to a growing portfolio of customer SAP environments across multiple clouds, regions, and networks, with integrations across AIOPs, SecOps, PAM tools and AI-led SAP modernization.
NetFoundry’s Identity-First Reachability™ provides a consistent, outbound-only Zero Trust connectivity model that authenticates users and services before granting access to SAP resources.
Simplified customer onboarding, reduced network administration overhead, strengthened security, and a scalable foundation for global SAP operations, as well as visibility and audit for compliance.
Lemongrass is a global SAP-focused cloud services provider helping enterprises navigate their SAP transformation journeys, from strategy and migration through modernization, optimization, and continuous innovation.
Since 2010, Lemongrass has delivered software-enabled services that help organizations accelerate SAP transformation while reducing complexity, risk, and long-term operational costs.
Combining deep SAP expertise with automation, cloud engineering, and AI-driven innovation, Lemongrass helps customers move from legacy SAP environments to modern, cloud-optimized architectures.
Supporting these environments requires secure, reliable administrative access for consultants and operations teams working across multiple geographies, cloud platforms, and customer networks.
“At Lemongrass, we manage the SAP environments behind some of the world’s most important organizations. Giving our global team of consultants secure access to administer these systems is one of our most critical security challenges. NetFoundry gives us a single, consistent way to secure that access, wherever our consultants are and whatever cloud environment they are working in.”
Dave Manning, CISO, Lemongrass
As Lemongrass expanded its portfolio of enterprise customers, providing secure and consistent access to SAP environments became increasingly complex.
Each customer brought different technical requirements, security policies, network configurations, and cloud infrastructure. Lemongrass needed to support its global teams while maintaining strong security boundaries between customer environments.
Traditional VPN-based connectivity introduced several operational challenges.
Customer environments frequently use overlapping private IP address ranges. With conventional VPN-based approaches, these conflicts can require additional network configuration, address translation, or other workarounds.
As the number of customer environments grows, managing these exceptions becomes increasingly difficult.
Lemongrass needed to give authorized consultants access to critical SAP systems without unnecessarily exposing those systems to external networks.
VPNs, inbound firewall rules, and publicly reachable services introduced administrative overhead and potential security risks. A more granular, identity-driven approach would allow access to be restricted to the specific users and services that required it.
Each new customer environment could introduce another set of connectivity requirements, access policies, and troubleshooting procedures.
For a managed services provider operating across multiple clouds and geographies, maintaining these configurations consumed time and complicated onboarding.
Lemongrass needed a repeatable connectivity model that could scale with its business without requiring a custom network architecture for every customer.
Lemongrass sought a solution that could help them improve the ease of doing business with their customers and streamline their operations while bolstering their security posture as organizations become increasingly security conscious. NetFoundry’s Identity-First Reachability™ emerged as the perfect fit, offering encrypted data flows and enhanced security without compromising on performance or scalability.
With NetFoundry, Lemongrass simplified their operational model, reducing complexity and management overhead. This strategic move not only enhanced their security and compliance but also enabled them to manage their diverse customer base more effectively, paving the way for continued innovation and growth in their cloud services.
Lemongrass’ deployment of NetFoundry’s Identity-First Reachability™ solution has delivered measurable improvements in security, flexibility, and efficiency. Key outcomes include:
NetFoundry’s Identity-First Reachability™ solution has empowered Lemongrass to enhance its SAP service offerings, enabling secure, seamless connectivity across complex cloud environments. Whether it’s for remote management, secure access to SAP environments, or ensuring the safety of critical data during migration and replication, NetFoundry is helping Lemongrass ensure the highest level of security and performance for its customers.
NetFoundry helps software companies replace VPN complexity with identity-based Zero Trust networking.
