City of Oshawa

Protects residents’ data with Connected Threat Defence

Overview

With a population of more than 166,000, the City of Oshawa is the largest city in the Durham Region and part of the Greater Toronto Area. Oshawa was designated as one of the world’s Top 21 Smart Communities of 2016 by the Intelligent Community Forum, and is home to three highly acclaimed post-secondary institutions—Durham College, Trent University Durham GTA, and the University of Ontario Institute of Technology. The city has one of the largest community-based healthcare networks in Canada, Lakeridge Health, and is home to LHEARN (Lakeridge Health Education and Research Network), a hub for cutting-edge medical training, education and research.

Challenges

The seven-member IT Operations team for the City of Oshawa performs many individual tasks to support and secure 30–40 different streams of business, including recreation, public works, taxation, and fire services. Each business stream generates large amounts of data covering everything from personal, financial, and health information to children’s programs that include photos and schedules. The city must protect this data to comply with PHIPA, PCI DSS (Payment Card Industry Data Security Standard), and other regulations.

Additionally, data used to provide critical services to customers requires protection from external attacks. As an early adopter of VMware® in the municipal sector, the City of Oshawa found that the memory, CPU, and disk activity requirements for standard anti-virus solutions slowed performance and, in many cases, added complexity. “We are constantly under attack from phishing and ransomware. We needed to meet our users’ expectations to ensure their data is always protected,” said Steve Patterson, Manager of Systems and Security Operations at the City of Oshawa.

Managing multiple security products across Oshawa’s systems and devices was timeconsuming, and it did not provide the end-to-end visibility Oshawa needed. “Without integrated solutions and the ability to see where security is deployed and updated, it’s difficult to manage and demonstrate to auditors that the solution is working,” said Patterson.

Why Trend Micro

An IT partner introduced the City of Oshawa to Trend Micro in 2010, and the city installed Trend Micro™ OfficeScan™ solution at that time. However, it wasn’t until 2014, when Oshawa was looking for a new security solution, that it established a strong relationship with Trend Micro. “We spoke to many companies and although several demonstrated their products, Trend Micro invested the time and money to show us how the solution worked, and how it made the most of what we already owned,” said Patterson.

Trend Micro solutions met Oshawa’s requirements for a single vendor with multiple, integrated solutions that provide protection for physical and virtual endpoints, include zeroday capabilities and simplified, end-to-end management. “With a small IT Operations team, we don’t have time to babysit a security product. We need to know it’s working,” said Patterson.

"When you rely on a product to protect residents’ data and city systems, you need a team like Trend Micro that’s always there to help."

Steve Patterson,
Manager of Systems and Security
Operations, City of Oshawa

Solution

With an extended due diligence cycle, the City of Oshawa decided to deploy Trend Micro™ Deep Security™ and an upgrade to Trend Micro™ OfficeScan, powered by XGen™ security in 2016. Putting the solutions into production was astonishingly simple, according to Patterson. “The OfficeScan, powered by XGen security, upgrade was seamless—I’ve been in the business 20 years and I’ve never seen an upgrade go that smoothly,” said Patterson.

OfficeScan, powered by XGen security, uses machine learning with threat protection techniques to eliminate security gaps across any user activity and any endpoint. As part of Trend Micro’s connected threat defence, OfficeScan, powered by XGen security, constantly learns, adapts, and automatically shares threat intelligence across the city’s security environment.

Deep Security offers multiple layers of security that protect servers in the data centres, and provides proven support for VMware environments. The solution is easy to manage and it doesn’t slow machine performance.

Trend Micro™ ScanMail™ provides mail server security, and Trend Micro™ Control Manger offers the end-to-end visibility required for effective security management. Trend Micro™ Deep Discovery™ Inspector monitors network traffic moving in, out, and across the network detecting advanced threats before they can spread. Deep Discovery also includes effective sandboxing that matches the corporate desktop image to avoid evasions. “With two centralised data centres, Deep Discovery Inspector collects threat information from internal and external feeds, providing valuable insights that help protect the rest of the organisation,” said Patterson.

"To go to a single console and instantly see the entire security landscape gives us peace of mind we’re always protected."

Steve Patterson,
Manager of Systems and Security
Operations, City of Oshawa

Results

Before adopting Trend Micro as a solution, malware was a drain on the City’s IT resources. Answering and managing support calls consumed up to 10 percent of their time. Today, the team receives about one support call per month related to antivirus and spends only one percent of their time managing endpoint security issues. “Our edge solution blocks five to 10 million suspicious emails each month, with ScanMail blocking the rest,” said Patterson.

Trend Micro streamlines Oshawa’s security compliance process. The robust reporting functionality is instrumental to the Cyber reporting, which IT will be implementing for senior management, and the simplified controls improve overall efficiency. “To go to a single console and instantly see the entire security landscape gives us the peace of mind knowing we’re always protected,” said Patterson.

What's Next

To keep its systems and customer information protected, the City of Oshawa is looking at vulnerability protection to simplify patching and add another layer of defence against zeroday threats and ransomware. Oshawa is considering moving to Trend Micro™ Deep Security™ and VMware NSX®, which provides automated deployment and provisioning for its VMware environment. “We’re also looking forward to new developments in machine learning and integration coming from Trend Micro,” said Patterson.