Goal:<\/td> ISO Compliance<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nBackground<\/h2>\n\n\n\n \u201cEdgeConneX had the innovative idea to move the network out to the edge, so that content is served as close as possible to where it is consumed,\u201d Skojec explained. \u201cPreviously, there had been eight pairing points in the U.S. for internet connectivity. So, if you lived in Phoenix, AZ, your data would likely come out of San Jose, CA. However, that results in high latency, so everything is slower.<\/p>\n\n\n\n
\u201cWe\u2019ve brought network and content providers into secondary markets like Phoenix, Miami, and Tallahassee,\u201d said Skojec. \u201cThat means internet connectivity is being served locally. The result is better internet performance, faster speeds, and less bandwidth use from our customers since they\u2019re not having to stream from so far away.<\/p>\n\n\n\n
<\/figure><\/div>\n\n\n\n\u201cThis year EdgeConneX is expanding into two markets outside the US: South America and Canada. We\u2019re continuing to augment and expand our existing data centers as customers come in,\u201d said Skojec. \u201cIn the last 24 months, we have built about 30 data centers, and we\u2019re rolling out 1 megawatt of power capacity every 30 days.\u201d<\/p>\n\n\n\n
EdgeConneX\u2019s network infrastructure has not been the only growing component. In the last two years, EdgeConneX went from 29 employees to 140 full time employees and 90 contractors \u2013 an almost 10x growth.<\/p>\n\n\n\n
The Challenge<\/h2>\n\n\n\n As EdgeConneX grew, their IT team faced an ever-expanding set of requirements.<\/p>\n\n\n\n
Skojec explained, \u201cWe were never really a help desk IT department. We focused more on networking infrastructure. We would issue a laptop when we hired someone, give them an email account, and off they would go. We didn\u2019t have any policies that we enforced or any user systems controls to speak of.\u201d<\/p>\n\n\n\n
\u201cWhen ISO certification became a business necessity, we had to quickly come in to compliance with how we managed password complexity, expiration, and rotation.\u201d<\/p><\/blockquote>\n\n\n\n
JumpCloud Blog<\/figcaption><\/figure><\/div>\n\n\n\nThis requirement was complicated by their heterogeneous environment. \u201cWe have a 50\/50 split between Windows\u00ae<\/sup> and Mac for our users, and about a 95\/5 split on servers between Windows and Linux,\u201d Skojec said. \u201cI needed something I could deploy across all platforms that would enforce the same policies and procedures across those platforms.\u201d<\/p>\n\n\n\nThe Search for a Solution<\/h2>\n\n\n\n \u201cThere were a few alternatives that we considered when we started looking,\u201d Skojec said. \u201cWe initially used Microsoft\u00ae<\/sup> Active Directory. However, we tried to get our Macs, Linux servers, and Windows systems to work with AD, and it just didn\u2019t quite happen. In addition, a lot of our users are remote.\u201d<\/p>\n\n\n\nIn an Active Directory environment, enabling remote users to change their password can be done, but it\u2019s a hassle. Skojec explained, \u201cUsers would have to get on the VPN to connect back to the LAN to be able to connect to Active Directory to update their password. Any organization who manages remote users knows this is an untenable situation. When we started looking, we actually started with Azure because we wanted a cloud-based service that didn’t require VPNs or a corporate LAN for that very reason. But Azure did not work quite as well with Mac systems or Linux servers.<\/p>\n\n\n\n
<\/figure><\/div>\n\n\n\n\u201cI started looking for a solution that would work across all end user platforms,\u201d Skojec said. \u201cI found JumpCloud.\u201d<\/p>\n\n\n\n
\u201cJumpCloud was the easiest solution to deploy across our entire environment, and it simply worked on every platform we put it on \u2013 Mac, Windows, and Linux.\u201d<\/p><\/blockquote>\n\n\n\n
\u201cJumpCloud is very lightweight. There\u2019s no heavy client that has to be maintained. There\u2019s no VPN setup involved. If you have internet connectivity, it works,\u201d Skojec explained. \u201cEven better, it works across all of our platforms, universally. JumpCloud is very easy to manage and maintain. Also, we only have to train our users for one thing \u2013 I don\u2019t have to train a Windows group on one tool and a Mac group on another. It\u2019s universal across the board.\u201d<\/p>\n\n\n\n
Justification<\/h2>\n\n\n\n Justifying the acquisition of a new piece of technology to your executive team is not always simple. Thankfully, Skojec understood not only how JumpCloud could make life easier for the IT department, but also how JumpCloud could make life easier for his executive team.<\/p>\n\n\n\n
\u201cWe started down this path because we had to achieve ISO compliance,\u201d said Skojec. \u201cWe had no choice; we had to be able to manage password policies, their expiration, and their rotation. My first step in justifying JumpCloud was to successfully deploy it in a test environment. Then, I was able to go to our executive committee and show JumpCloud in action while explaining how JumpCloud can help us achieve ISO compliance.\u201d<\/p>\n\n\n\n
<\/figure><\/div>\n\n\n\nFor the decision-makers at EdgeConneX, the choice was an easy one.<\/p>\n\n\n\n
Skojec explained why. \u201cOur mixed environment meant that JumpCloud was the only solution that would allow us to enforce policies to achieve compliance across all platforms and all users. Plus, it\u2019s very easy for the user to self-maintain. This helped us keep costs low by negating the need for EdgeConneX to hire more help desk staff just to reset passwords or manually enforce policies across multiple platforms.\u201d<\/p>\n\n\n\n
Implementation<\/h2>\n\n\n\n \u201cWhen we deployed JumpCloud, we were in a rush to meet a deadline for contractual reasons \u2013 the typical IT squeeze,\u201d Skojec said.<\/p>\n\n\n\n
\u201cOur experience with deploying JumpCloud was very simple \u2013 it worked out of the box.\u201d<\/p><\/blockquote>\n\n\n\n
<\/figure><\/div>\n\n\n\n\u201cThere was not a big learning curve at all. Once we understood the interface, how to install the client, and how to get the authorization key, it was very easy to roll out. We were able to roll out JumpCloud, and a whole set of tools, to our entire user base over the span of about 3 months.<\/p>\n\n\n\n
\u201cThere\u2019s really only one person that handles the help desk on a day-to-day basis at EdgeConneX, and we have approximately 250 users. Those are daunting odds for IT. So, we\u2019re using JumpCloud for RADIUS as well as LDAP, and we\u2019re using the thin client for endpoint management. Doing so, we\u2019ve been able to better manage our VPN, WiFi, server, and switch access.<\/p>\n\n\n\n
\u201cJumpCloud is also controlling our Office 365 accounts which is great. When we create a user account in JumpCloud, an email account is automatically provisioned in Office 365. It\u2019s just one less thing we have to do from a help desk perspective.<\/p>\n\n\n\n
\u201cI am hoping to roll out Dropbox this year, and thanks to using JumpCloud\u2019s pre-built connectors, we will be able to centralize authentication. I\u2019m also pushing our development team to use the JumpCloud SAML connector for other apps we use in-house. JumpCloud really provides true single sign-on by enabling everybody to use the same username and password for everything they do. Thanks to JumpCloud, we\u2019ll be able to create a centralized environment, and hopefully we get there this year.\u201d<\/p>\n\n\n\n
The Results<\/h2>\n\n\n\n\u201cJumpCloud has saved us a tremendous amount of time. Onboarding a new user has gone from about two days to an hour.\u201d<\/p><\/blockquote>\n\n\n\n
JumpCloud\u2019s True Single Sign-On\u2122<\/sup> solution has had a significant impact on onboarding and offboarding new employees for EdgeConneX. Skojec shared, \u201cIn the past, we would have to touch every server, add the account, add them to Active Directory, get it joined, and get the VPN set up. The onboarding process is a lot simpler now because we truly have a single unified directory service. We add you in JumpCloud, we put you in the appropriate group, and you have access to everything you need. It\u2019s just there. It just works.\u201d<\/p>\n\n\n\n <\/figure><\/div>\n\n\n\n\u201cIn addition, offboarding employees is much simpler and more secure because we don’t have to remember to touch every system or company resource to which they had been granted access \u2013 usually spanning years of use. To offboard an employee, we go to one place \u2013 the JumpCloud Admin Console. We delete their account, and it deletes their WiFi access, their PC login, application access, and server access. It has made offboarding so much quicker. As much as onboarding employees has improved, the offboarding process has had the largest impact on my organization, as it\u2019s not only quicker, but also helps us prove compliance.\u201d<\/p>\n\n\n\n
A secure offboarding workflow has helped EdgeConneX tremendously when it comes to compliance audits. \u201cWe have to go through audits every six months,\u201d explained Martin, \u201cand it\u2019s very nice to say, \u2018Oh yes, when we offboarded this person, JumpCloud is how we completely removed their access.\u2019 We can prove the person has actually been removed from all systems, servers, applications, and networks. From an audit standpoint, JumpCloud has saved us a significant amount of time, and greatly reduces our risk.\u201d<\/p>\n\n\n\n
JumpCloud – A Solution that Really Works<\/h2>\n\n\n\n\u201cFor EdgeConneX, the biggest benefit is that JumpCloud really works well across all platforms. JumpCloud has made it very easy to apply the same password policies and security policies across Windows, Mac, and Linux systems.\u201d<\/p><\/blockquote>\n\n\n\n
\u201cIn the IT field, we\u2019ve all dealt with Active Directory for the last 20 years,\u201d said Skojec. \u201cIt works well on a corporate LAN with all Windows machines. However, once you start bringing in different devices and you\u2019re not on a corporate LAN, Active Directory begins to struggle. If you\u2019re a mixed device environment with remote workers that never touch a corporate network, JumpCloud does the same job as Active Directory, only better.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"
EdgeConneX is transforming digital content delivery. With multiple OS in their environment and a handful of passwords to manage, they found JumpCloud.<\/p>\n","protected":false},"author":70,"featured_media":22629,"template":"","categories":[2337],"collection":[2775],"wheel_hubs":[],"platform":[],"resource_type":[2313],"funnel_stage":[],"coauthors":[],"acf":[],"yoast_head":"\n
EdgeConnex Case Study: ISO Compliance in Cross-Platform Environment<\/title>\n \n \n \n \n \n \n \n \n \n \n \n\t \n\t \n\t \n \n \n\t \n\t \n\t \n