The Modern Zero Trust Network

NetFoundry
Marposs Case Study

Marposs Case Study

Case Studies
NetFoundry | Marposs Case Study

Digital Platform Enhances Connected Equipment

Marposs partnered with NetFoundry to embed zero trust connectivity in their digital platform solution called MAINDO. This platform is designed to provide comprehensive monitoring and control solutions for manufacturing processes: MAINDO delivers Total Quality solution to Marposs’ Customers, bringing IoT Data and Quality Management together. It integrates various sensors, devices, and systems within a manufacturing environment to collect, analyze, and visualize data in real-time.

NetFoundry | Marposs
Netfoundry’s zero trust connectivity allowed Marposs to securely deploy equipment in the most secure OT environments.

Case Study Highlights

Secure Global Connectivity

Marposs ensured secure, global IIoT device connectivity with NetFoundry’s zero trust architecture.

Enhanced SaaS Services

NetFoundry enabled Marposs the ability to offer value-added software and data services.

Real-Time Data Monitoring

The platform enables real-time data collection, analysis, and visualization for optimized manufacturing processes.

Simplified & Scalable Solution

NetFoundry eliminated the need for traditional VPNs, providing a scalable, software-defined networking solution for Marposs.

Overcoming Customer Security Concerns

Marposs had to address customer security objections when deploying their software solutions in OT environments and ensure their digital platform would not disrupt operations.

Obstacle

Product Challenge & Feature Requirements

Marposs aimed to create a Marposs Digital Platform product: MAINDO using a hybrid SaaS model for accessing their systems in OT environments but faced resistance from customers due to network-level access and security concerns. MAINDO had to be considered secure enough by their customers to be deployed in OT environments. Their products also needed additional onboard resources, including secure networking capabilities, without interfering with the current measurement or monitoring processes that the products are designed to perform.
 

Connectivity and Software Complexity

Industrial PCs at Marposs run custom monolithic software that provides a tailored user interface. This software configures attached products, performs calculations, and interfaces with on-premises systems through custom integrations.
 

Customer Security Concerns

Marposs customers, operating secure manufacturing sites, expressed concerns on the network-level access required by their Digital Platform, necessitating adherence to strong security principles.

Opportunity

Leapfrog the Competition, Accelerate Sales

Marposs is poised to become a leader in measurement technology by simplifying and securing its connected product offerings. By developing a next-generation digital platform with zero trust connectivity, Marposs will enhance security. The hybrid SaaS model will streamline remote service and data integration. This approach will not only elevate the product experience but also strengthen customer relationships, setting Marposs apart from the competition.
 

Enable a Digital Transformation

MAINDO emerged with a focus on customer needs including enhancing security for safe cloud access, leveraging Industry 4.0 and 5.0 connectivity to optimize manufacturing processes, and centralizing production quality data globally to drive improvements. It automates quality management processes, digitizes asset management to reduce errors, and ensures continuous system updates for shop floor efficiency. Additionally, it delivers higher service levels and faster support response times, enhancing overall operational effectiveness.
 

Modernize Products and Connectivity

An opportunity existed to modernize their smart connected products by replacing the traditional Industrial PC with a Zero Trust edge device, the MAINDO Edge. This edge device would interface with all their products in an OT environment, host computational software modules, collect data for central analysis, and offer a new remote User Interface via apps on mobile devices connected to Cloud and Edge applications.

Accelerating Sales with Digital Innovation

Marposs boosts sales by securing connected products with a zero trust platform and a hybrid SaaS value-added services model.

Meeting Security Needs, Driving Sales

Marposs used zero trust connectivity to surpass customer security demands, unblocking sales and enabling remote management.

Outcome

Exceeded Customer Security Requirements and Accelerated Sales

MAINDO leverages and is integrated into a secure, scalable, resilient and cloud-neutral infrastructure designed and implemented from scratch, which Marposs embedded secure Ziti connectivity into, to meet customer requirements, eliminate customer security concerns and unblock sales. Critical solution components included: Kubernetes Integration, Private DNS and Remote Management using NetFoundry AppNets for connectivity and microsegmentation.
 

Remote Configuration Management

The platform enables instant rollouts and rollbacks of configurations remotely, leveraging an automated zero trust model to configure the Cell Network and expose services to authorized entities.
 

Isolation and Security

The Cell Edge is isolated from LAN, WAN, and even the overlay itself, ensuring only authorized entities can communicate with other services. This level of isolation and security is critical for maintaining the integrity of the network.

 

Automation

Marposs has fully automated systems to streamline purchasing to deployment, minimizing human error through CI/CD pipeline and API integration.
 

Globally Distributed Service Mesh

Marposs implemented a globally distributed service mesh to facilitate remote management, upgrades, configuration, and data gathering. This system is fully resilient to support growth aligned with Marposs requirements.

 

Zero Trust Principles and Paradigm Shift

MAINDO is built to fully leverage the zero trust principles of the underlying robust, flexible and secure by design infrastructure, adopting a ‘never trust, always verify’ approach. This solution represents a paradigm shift, closing all inbound ports in their smart connected products and ensuring secure networking by embedding ‘zero trust connectivity as code.’ This approach includes identities and policies to control access rules for every resource connected to their platform.

NetFoundry | Marposs MAINDO

About NetFoundry

Networking was once a barrier to app innovation and automation with dependencies on after-the-fact security and performance engineering. NetFoundry is shifting the paradigm in cybersecurity by embedding zero trust networking and security as code. 

Our NetFoundry Cloud solution embeds zero trust as software into apps, APIs, IoT devices, and other valuable assets rendering critical infrastructure invisible to the internet – and unreachable by potential attackers. It is the world’s first programmable, cloud native, zero trust network with near unlimited scale concurrency, and performance. 

NetFoundry Cloud represents a new art of the impossible by enabling developers, network engineers, DevOps, and cloud teams to programmatically control private, zero trust, high performance networking. 

NetFoundry Cloud is built on NetFoundry’s Ziti platform which is part of the OpenZiti project, the world’s most used and widely integrated open source networking platform.

NetFoundry | Secure by Design
Products
Solutions
Industries
Secure by Role
Why NetFoundry