MinterEllisonRuddWatts (MERW) is a leading full-service law firm operating out of Auckland and Wellington, New Zealand. The firm provides clients with access to internationally recognized and experienced legal and business advisers across a wide range of practice areas and industry sectors. MERW is part of the MinterEllison Legal Group, which is one of the largest full-service legal groups in the Asia-Pacific region.
Netskope One CASB – Confidently adopt cloud applications and services without sacrificing security.
Netskope One NG-SWG – The foundation for SSE web and cloud inline security providing threat and data protection.
Netskope One Private Access – Connect users anywhere to private resources ensuring fast and direct application connectivity and superior user experience.
Improved hybrid working experience
Greater visibility and control of users
Disruption-free deployment
Having moved most of its IT to the cloud, law firm MinterEllisonRuddWatts (MERW) was experiencing issues with its residual on-premises hardware, which included web filtering, internet security, and VPN systems.
Remote connectivity was complicated and unreliable, as users had to connect to on-premises firewalls before routing to the cloud. “We allow our people to work from home, so we needed to vastly improve the performance of remote access,” says Nigel Stevenson, Chief Information Officer at MERW.
Visibility of traffic was also an issue. The VPN client allowed split tunneling, which meant that some user traffic could route directly to the internet, without going through the VPN. The IT team was unable to monitor traffic to the extent it would have liked, due to the limitations of its web filtering solution.
“As a legal firm it is tricky to implement DLP [data loss prevention],” says Stevenson. “We work on sensitive information all the time, so standard DLP policies do not work for us. We can’t simply block file transfer sites either, as many of our clients stipulate which systems they want us to use. The most effective option is granular web traffic filtering and monitoring with intelligent alerting.”
Looking to boost the performance of its systems for remote workers while better controlling shadow IT and unauthorized data transfers, MERW sought out a new, cloud-first approach.
As a legal firm it is tricky to implement DLP [data loss prevention]. We work on sensitive information all the time, so standard DLP policies do not work for us. The most effective option is granular web traffic filtering and monitoring with intelligent alerting.
Following a competitive selection process, MERW selected Netskope to help solve its challenges. Netskope partner Advantage introduced the solutions to the company. “Netskope’s approach to bundle functionality provided an excellent option that was perfect for the size of our firm. Cost was a factor in our decision,” says Stevenson, “but Netskope’s functionality was the most significant driver. What’s more, Netskope has distributed data centers all around the world. No matter where our people are they automatically use one close by to get the best performance. On top of that, the team was really awesome to work with—their openness, their honesty, their ability to answer questions.”
Alex Mulder, Systems Engineer at MERW, adds: “During the PoV [proof of value] we found that the Netskope implementation was much smoother than we were experiencing with its competitors. That was a major draw.”
MERW has today deployed the Netskope Intelligent Security Service Edge (SSE), which includes the Netskope Next Generation Secure Web Gateway (NG SWG), Cloud Access Security Broker (CASB), ZTNA Next, and Cloud Firewall (CFW).
The solution consolidates these business-critical security services within the Netskope One platform, delivering MERW secure and consolidated access to the web, cloud services, and private apps from any location, thereby providing a secure approach to “anywhere working” for the law firm.
Stevenson comments: “Our plan with Netskope is to treat each of our endpoints as a secure device within itself, with the traffic that flows in and out of that device as secure as possible regardless of where it’s being used.”
The rollout of Netskope SSE took just six weeks from start to finish. “It was incredibly fast,” says Mulder, “and one of the smoothest deployments that we have been through as a company.”
Our people are amazed that we have implemented a security solution that has made their lives demonstrably easier. Usually new security measures make it harder for employees to do their jobs—with Netskope it is the exact opposite.
With Netskope, MERW has achieved complete visibility of its traffic. “CASB and SWG provide us with the visibility, alerts, and notifications we need to understand activity and assess whether an event is an indicator of compromise,” says Stevenson.
By defining granular policies, MERW is protecting employees from a large range of web and cloud threats. Since the roll-out, the Netskope platform has prevented potential data breaches through blocking access to scam sites and high-risk online file converters, and employee exposure to a high-profile supply-chain attack (Polyfill).
Meanwhile, MERW employees can access cloud applications seamlessly from any location. “One major improvement has been with access to our practice management system,” says Mulder. “With the VPN, our system would get confused when users switched between locations. Netskope enables users to simply open up their laptops and pick up from where they left off.”
Leveraging Netskope One Private Access, the firm applies strict private access rules. “Our people can now only access the systems relevant to their jobs.” With Netskope, MERW was able to tighten up access gradually. “Our business model is to sell the expertise of our lawyers,” explains Stevenson. “If our people are unable to access the systems they need to do their work, it’s a big deal. Netskope enabled us to tighten controls role by role, so we could ensure that our people can work without disruption throughout the process.”
The Netskope solution is also helping MERW reduce costs. “Thanks to Netskope we are removing the expensive MPLS circuits we needed for our legacy VPN and switching to lower-cost internet connections,” says Stevenson.
User feedback has been highly positive. “Our people are amazed that we have implemented a security solution that has made their lives demonstrably easier,” comments Stevenson. “Usually new security measures make it harder for employees to do their jobs—with Netskope it is the exact opposite.”