CustomerErdinger Weissbräu

IndustryPrivate brewery

CheCk PoInt ProduCtsn VPN-1® Power™

n UTM-1™ Edge

n VPN-1 SecureClient™

n VPN-1 Enterprise Center

Customer needs metn Established solution with a

guaranteed future

n User-friendly and transparent network protection

n Separation of internal networks

n Central, intuitive management

Bavarian Brewer Safeguards Traditions

Erdinger Weißbräu reached the top of the world Weißbier market by combining tradition and innovation. By German law enacted in 1516, only wheat beer brewed locally in the town of Erding, in accordance with strict quality controls, can be called Erdinger Weißbier. Founded in 1886 and owned since 1935 by the Brombach family, Erdinger Weißbräu is among the largest private breweries in Germany. Annually it produces 1.5 million hectoliters of the Bavarian classic wheat beer, also known as Hefeweizen, and exports it to more than 70 countries. Placing special importance on traditional bottle fermentation, the brewery uses family recipes handed down for generations.

THE CHALLENGETo brew its traditional recipes, Erdinger Weißbräu uses the most modern production methods, supported by a complex IT structure. According to Johann Messerer, the Head of EDP/Organization and his manager, Jürgen Legler, the Head of Controlling and EDP/Organization, an efficient and yet easily manageable security environment is indispensable to brewery operations. “We gave the green light to security back when our development was heading in the direction of the Internet,” says Messerer. “With this innovation at hand, we took a close look at Cisco and Check Point, two market leaders, and came to the conclusion that Check Point is more user friendly for us and easier to handle. With the subsequent separation of our internal networks, for example the separation of the production network from the sales area, the topic of security took on increasing importance. Check Point’s standard technology proved to be very well suited for this.”

the CheCk PoInt soLutIonErdinger Weißbräu decided in favor of the Check Point products VPN-1® Power™, UTM-1™ Edge, VPN-1 SecureClient™ and the VPN-1 Enterprise Center. These solutions offered greater transparency and flexibility than the brewery’s existing network. In the opinion of IT expert Messerer, even Cisco lagged behind Check Point in standards compliance.

www.erdinger.com

A CusTomEr suCCEss sTory

“We attach great importance to longevity and lasting value. With Check Point, we can rely on established standards for which we find extensive professional advice and support in the market.”

Jürgen LeglerHead of Controlling and EDP/OrganizationErdinger Weißbräu

©2009 Check Point Software Technologies Ltd. All rights reserved. Check Point, AlertAdvisor, Application Intelligence, Check Point Endpoint Security, Check Point Endpoint Security On Demand, Check Point Express, Check Point Express CI, the Check Point logo, ClusterXL, Confidence Indexing, ConnectControl, Connectra, Connectra Accelerator Card, Cooperative Enforcement, Cooperative Security Alliance, CoreXL, CoSa, DefenseNet, Dynamic Shielding Architecture, Eventia, Eventia Analyzer, Eventia Reporter, Eventia Suite, FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FloodGate-1, Full Disk Encryption, Hacker ID, Hybrid Detection Engine, IMsecure, INSPECT, INSPECT XL, Integrity, Integrity Clientless Security, Integrity SecureClient, InterSpect, IPS-1, IQ Engine, MailSafe, NG, NGX, Open Security Extension, OPSEC, OSFirewall, Pointsec, Pointsec Mobile, Pointsec PC, Pointsec Protector, Policy Lifecycle Management,Power-1, Provider-1, PureAdvantage, PURE Security, the puresecurity logo, Safe@Home, Safe@Office, SecureClient, SecureClient Mobile, SecureKnowledge, SecurePlatform, SecurePlatform Pro, SecuRemote, SecureServer, SecureUpdate, SecureXL, SecureXL Turbocard, Security Management Portal, Sentivist, SiteManager-1, Smart-1, SmartCenter, SmartCenter Express, SmartCenter Power, SmartCenter Pro, SmartCenter UTM, SmartConsole, SmartDashboard, SmartDefense, SmartDefense Advisor, Smarter Security, SmartLSM, SmartMap, SmartPortal, SmartProvisioning, SmartUpdate, SmartView, SmartView Monitor, SmartView Reporter, SmartView Status, SmartView Tracker, SMP, SMP On-Demand, SofaWare, SSL Network Extender, Stateful Clustering, Total Security, the totalsecurity logo, TrueVector, Turbocard, UAM, UserAuthority, User-to-Address Mapping, UTM-1, UTM-1 Edge, UTM-1 Edge Industrial, UTM-1 Total Security, VPN-1, VPN-1 Accelerator Card, VPN-1 Edge, VPN-1 Express, VPN-1 Express CI, VPN-1 Power, VPN-1 Power Multi-core, VPN-1 Power VSX, VPN-1 Pro, VPN-1 SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 UTM, VPN-1 UTM Edge, VPN-1 VSX, VSX-1, Web Intelligence, ZoneAlarm, ZoneAlarm Anti-Spyware, ZoneAlarm Antivirus, ZoneAlarm ForceField, ZoneAlarm Internet Security Suite, ZoneAlarm Pro, ZoneAlarm Secure Wireless Router, Zone Labs, and the Zone Labs logo are trademarks or registered trademarks of Check Point Software Technologies Ltd. or its affiliates. ZoneAlarm is a Check Point Software Technologies, Inc. Company. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. The products described in this document are protected by U.S. Patent No. 5,606,668, 5,835,726, 5,987,611, 6,496,935, 6,873,988, 6,850,943, and 7,165,076 and may be protected by other U.S. Patents, foreign patents, or pending applications.

NSCRHNNO

Worldwide Headquarters5 Ha’solelim street, Tel Aviv 67897, Israel | Tel: 972-3-753-4555 | Fax: 972-3-624-1100 | Email: info@checkpoint.comU.S. Headquarters800 Bridge Parkway, redwood City, CA 94065 | Tel: 800-429-4391; 650-628-2000 | Fax: 650-654-4233 | www.checkpoint.com

ContaCt CheCk PoInt

With the support of their partner Siemens Enterprise Communications, six years ago Erdinger Weißbräu started out with Firewall-1 at the junction between the internal network and the Internet. Today the company employs four Check Point firewalls. An active cluster provides internal network separation with high availability. The brewery uses a cold stand-by firewall to back up its Internet connection. Because the brewery has only one Internet connection, a clustered solution is not necessary. Web security is managed by the brewery’s IT department, while e-mail security is outsourced to a partner.

Check Point solutions perform three important functions at Erdinger Weißbräu today.

First, the internal networks are protected. The brewery production network is separated from the WLAN, from the Internet, and from the office network. At all costs, the production network must be shielded from disruptive attacks coming from the outside and from theft of its trade secrets. A firewall cluster regulates data traffic on the three network segments while keeping them isolated from each other. The Check Point security software solution allows this flexibility.

Second, Internet traffic to the brewery from its partners is monitored. “Along with the classic IP-SEC connection, we use the Check Point Edge solution for partners who are not as well protected as we are,” Messerer explains. “This connection offers safe remote connectivity. It also proves to be ideal for immediate integration of a service partner.”

Third, remote access for company-owned laptops is controlled so that external staff members have safe access to the company network. “For remote access, Check Point client security proved to be unbeatable. In this area, Check Point is, so to speak, our world champion in features,” Messerer is happy to say.

the adVantaGes oF CheCk PoInt seCurItyWith Check Point, Erdinger Weißbräu has a security solution with lasting value.

“In principle, at first security is associated only with costs,” says Legler Head of EDP and Controlling. “The fact is, however, that in today’s business world you have to live with a set of security rules and regulations. We believe the primary advantage of the solution we installed is its transparency and longevity, that is, the high investment security.” Siemens helps Erdinger put the functionality of the Check Point products to optimal use. “This partnership has more than proved its value for us,” says Legler.

Unified administrative management via a single console is considered a major advantage of the security environment at Erdinger. “Central management was an important aspect in our deciding on Check Point,” says Messerer. “Back then, there weren’t many manufacturers that could offer good central management. Our management environment has to be operated intuitively.”

The separation of license and hardware, even for the cold standby solution, proved to be very practical for Erdinger, as well. “We were able to implement a unified solution that can be used both internally and at the network boundary,” explains Messerer. “When it comes to reaction time, there’s nothing that can beat it. And we have to install changes or new configurations only once, and then they are available to all users immediately.”

the Future Erdinger Weißbräu’s future IT security investments in the area of endpoint security are under discussion. “Endpoint protection is an important topic that we want to analyze further,” says Messerer, considering the prospects. “With the use of mobile terminals and e-mail applications, we see a growing need for greater security. That’s why we will take an intensive look at this area and give considerable thought to the decisions we will have to make in order to prepare ourselves properly for the future.”