The Latest Fortinet News
Product and Solution Information, Press Releases, Announcements
|VINCI Park Secures Customer Credit Card Payments with Fortinet|
|Posted: Mon Apr 08, 2013 03:01:37 PM|
FortiGate® Appliances Meet PCI-DSS Security Requirements with Simplicity and Cost-Effectiveness.
SUNNYVALE, Calif., -- April 8, 2013 -- Fortinet® (NASDAQ: FTNT) - a world leader in high-performance network security – today announced that VINCI Park, the world’s largest car park operator, has deployed the FortiGate® network security platform to help secure its clients’ credit card payments and to help comply with the PCI-DSS standard. This implementation encompasses 500 car parks in France and VINCI Park’s main sites around the world. Fortinet’s FortiGate appliances were chosen for their ability to easily and cost-effectively meet PCI-DSS compliance requirements, specifically allowing the encryption of electronic payment transactions, the partitioning of infrastructure traffic flows, advanced attacks detection and the creation of compliance reports.
Founded in 2001 by VINCI, the world’s leading group in concessions and construction, VINCI Park incorporates all VINCI’s activities in the car park sector and related services. The group designs, builds, finances and manages the operation of on-street and off-street car parks for private and public entities. VINCI Park manages nearly 1.5 million parking places in more than 2,500 car parks around the world and, in 2012, had revenues of 700 million Euros. The company has a presence in the following 13 countries: Belgium, Canada, Czech Republic, France, Germany, Luxembourg, Qatar, Russia, Slovakia, Spain, Switzerland, United Kingdom and the United States.
Any organization using, storing or transmitting credit card data must comply with the PCI-DSS standard. In 2011, VINCI Park researched a number of network security vendors that could meet the standard’s requirements and sent a request for proposal (RFP) to local integrators that represented those vendors. Axians, a networking and telecoms integrator and a subsidiary of VINCI Energies, won the RFP for the integration and support of Fortinet’s FortiGate appliances that represented the best consolidated security solution. Specific integrated features delivered on the FortiGate platform include: firewall for partitioning the infrastructure traffic flows; VPN for encrypting electronic money transactions; antivirus and IPS for attack detection; and QoS for prioritizing payment transactions. Tight security integration enables the FortiGate platform to meet the PCI-DSS requirements without adding unnecessary complexity while maintaining control on associated costs. VINCI Park has also chosen the FortiGate devices for their reliability and ease of administration.
“Even though we had never been attacked and our network was secured against banking data theft, we wanted to protect our customers further by complying with the PCI-DSS standard. Fortinet technology allowed us to secure and partition transactions from end-to-end, between the payment terminals located in our car parks - that allow our customers to pay for their parking by credit cards – and banks. Today, these transactions are strictly directed to banks and are saved and decrypted by those only,” said Guillaume Martin, deputy director of the IT System Department at VINCI Park. “Besides perfectly meeting the pre-requisites of our specifications, we trusted Fortinet technology, which had already proved itself within VINCI group, in particular at VINCI Energies.”
390 FortiGate-60C and 110 FortiGate-50B were deployed in 500 VINCI Park car parks located in France. Regarding the main international sites, the deployment of FortiGate devices has been completed in Spain, UK, Czech Republic and Slovakia and further deployments will take place this year in the other countries.
All FortiGate appliances are remotely managed from VINCI Park’s headquarters located in Rueil-Malmaison, France, using Fortinet’s FortiManager™-1000C, a complete and easy-to-use centralized management platform. Using Fortinet’s FortiAnalyzer™-2000B, a centralized logging and reporting appliance, VINCI Park is able to log daily data from all FortiGate appliances and create PCI-DSS compliant statistics and reports.
“Cybercriminal attacks have become very complex, aiming at penetrating corporate networks to steal valuable data, such as cardholder data. PCI-DSS focuses on fighting this scourge, but, even though compliance to the standard has become mandatory, its implementation remains very complex for companies,” said Patrice Perche, senior vice president of international sales and support at Fortinet. “With our network security platforms, VINCI Park gets a solution that ensures optimum security and avoids the unnecessary deployment of multiple point products. We are very proud to have helped VINCI Park achieve PCI-DSS compliance while allowing them to rationalize their costs and simplify their administration.”