INSIDER THREAT PROTECTION
WALLIX ADMINBASTION SUITE
SECURING THIRD PARTY ACCESS
Gulf Air chooses
Wallix AdminBastion
to manage and control access to privileged accounts
Context
• Failure to safeguard
data confidentiality,
integrity and accessibility
is potentially harmful
to an airline
• Though a system
for change management
was already in place,
the details of work
undertaken on systems
was not recorded
or captured.
Challenges
• To manage and
control access to
defined privileged
accounts
• To maintain an
approval hierarchy
for access
• To record and
index all activities
performed during
access to systems
About Gulf Air
The data and information stored on Gulf Air servers and within
business applications are arguably some of the company's most
valuable assets and every precaution must be taken to protect them
from loss or unauthorized access. Failure to safeguard data
confidentiality, integrity and accessibility is potentially harmful to an
airline with risks of disrupted operations as well as reputational
damage from the public disclosure of confidential and sensitive
company information. Gulf Air is the national carrier of the
Kingdom of Bahrain. It commenced
Managing access to Gulf Air systems in datacenters had previously operations in 1950, becoming one
taken a more “manual” approach. The complexity and variety of of the first commercial airlines
solutions was difficult to manage and could potentially jeopardize established in the Middle East.
the service availability and impact airline operations. Though a
system for change management was already in place, the details of Today, Gulf Air is a major international
work undertaken on systems was not recorded or captured. Without carrier serving 43 cities in 24 countries
a tools for this it was difficult troubleshooting issues that occurred spanning three continents. The airline
during maintenance. Human errors or diversions from approved
operates one of the largest networks in
change requests were also difficult to identify.
the Middle East, with double daily flights
to over 10 regional cities, from its hub at
Bahrain International Airport and direct
flights to select European destinations
from Kuwait International Airport.
“It was becoming increasingly apparent that we needed to implement
a Privileged Access Management solution that could manage and
control access to defined privileged accounts, maintain approval
Benefits
hierarchy for access, maintain a log for the requested and provide
accesses and maintain a record for all the activities performed during
of the solution
any session.” said Dr. Jassim Haji, Director IT, Gulf Air.
• Centralised authentication
Gulf Air have decided to implement Wallix AdminBastion to ensure
that only approved administrators and third parties can access those • Simplified management
target systems. Making it simple for users who need access for
maintenance or troubleshooting to easily request it and helping those
responsible for information security to not only immediately see
• Complete visibility
active sessions but also to easily revoke or set time limits on access.
• Compliance
“The challenge faced in managing these type of internal and external
users is how to ensure that the right access required to undertake
their authorized responsibilities is provided - nothing more, nothing
less - based upon established and controlled policies.” said Dr.
Jassim Haji, Director IT, Gulf Air.
The solution

After an implementing a proof of concept, WALLIX was selected as Gulf Air’s chosen product for privileged user management. Gulf
Air was satisfied it met the requirements, with good management and monitoring capabilities, user friendly design, was agentless
and offered host based licensing. The quality of WALLIX customer service was also impressive.

Gulf Air has been able to streamline access through a systematic process. This means they can manage unauthorized access and
changes to minimize the internal and external threats and risks. And as the solution is based on an agentless model it does not affect
the performance of overall data centre services, helping Gulf Air to increase services availability to exceed 99.9%.

“WALLIX helped in providing real time resource management, reporting and monitoring capabilities for IT
administrators, improving the overall efficiency of Gulf Air’s IT function. Also, Privileged Access Management
is instrumental for Gulf Air in complying with the required international and industry standards. We’re currently
certified against the ISO 27001 standard and maintain compliance with PCI-DSS.”

Dr. Jassim Haji, Director IT, Gulf Air

Benefits
• Centralised authentication

Wallix AdminBastion is the central and unique authentication and connection point for users to access servers and devices.
Removing the need to log on to various resources on the network individually, but authenticating via Wallix AdminBastion, which
then distributes access according to the delegated privileges.

• Simplified management

Wallix AdminBastion puts assigning, modifying or removing access to systems into a single centralised interface. This is a particular
advantage when working with third-party providers or contractors whose access rights may change on a regular basis.

• Complete visibility

All session activity through Wallix AdminBastion is captured graphically and with text logs. This can help to take auditing capabilities
to the next level and provide increased intelligence to log management and SIEM tools.

“The successful implementation of the solution meeting our requirements in a timely manner and within the allocated budget
constraints has enabled Gulf Air to minimize data leakage, system disturbance and have oversight control over IT services.” said
Dr. Jassim Haji, Director IT, Gulf Air.

• Compliance
WALLIX security solutions can provide IT security teams with detailed and accurate reports on all activities in the IT
system. Helping to meet compliance with regulatory requirements.

WALLIX FRANCE
http://www.wallix.com/fr
Email : sales@wallix.com
118, rue de Tocqueville - 75017 Paris
Tél. : +33 (0)1 53 42 12 90
Fax : +33 (0)1 43 87 68 38
WALLIX is a software company offering privileged access management solutions for
large and medium sized enterprises, public organizations and cloud service providers,
helping their many customers to protect their critical IT assets including data, servers, WALLIX UK
http://www.wallix.com
terminals and connected devices.
Email: ukinfo@wallix.com
1 Fetter Lane, London, EC4A 1BR - UK
Wallix AdminBastion Suite (or WAB Suite) gives the most effective route to security Office: +44 (0) 2034 405696
and compliance by reducing its users’ biggest security risk – privileged access to IT – in Fax: +44 (0) 2034 405401

the shortest possible time.

WALLIX DEUTSCHLAND
More information on www.wallix.com http://www.wallix.com
Email: deinfo@wallix.com
Landsberger Str. 398
81241 München
Phone: +49 89 716771910