From friction to flow: Why SWISSPORT VPN maze to Cato’s Sase has canceled

Photo of author

By [email protected]


Join daily and weekly newsletters to obtain the latest updates and exclusive content to cover the leading artificial intelligence in the industry. Learn more


in SwissThe world provides security and networks an opportunity to serve more customers and growth.

World IT operations at Swissport began to uncover the strains of dependence on the old security and network systems, which quickly became responsible for the company. Senior management can see that the central vision was a great challenge, which led them to take a quick action.

The growth of Swiss surpassed its old systems

The security challenges and networks faced by Swiss began to multiply, while accelerating the expansion of its business. Old systems hinder the ability to serve customers, secure global sites and expand business. The Legacy Systems did not keep up with the pace of their business, which prompted the team to think about new alternatives, starting with the safe access service (SAS).

In 2024, Swissport provided ground services for 247 million flight passengers, dealt with more than five million tons of air freight in 117 shipping centers and served airlines in 279 airports in 45 countries across six continents. As the world’s largest provider of goods processing services in the aviation industry, an essential part of how Swissport exceeds its customers to connect and secure global information technology operations. This is a class for a company with more than 26,000 users, including the ground crew and remote workers.

“The biggest challenge was just a vision-it was consistency.” “We had to unite how to impose security through hundreds of sites without slowing work.”

From the segmented infrastructure to Sase

“We really have worked around the clock throughout the week. It is always the peak time somewhere in the world, and we need to maintain our network safe and available,” Richard Thorpe, Swiss Senior Technology Staff in Swiss, told Venturebeat in a recent interview. “This means unifying safety and ensuring that every user and every device is covered – whether it is in a café or in the airport runway.”

The old systems were not expanding enough to keep pace with the rapid expansion that Swiss was suffering from. The old systems, along with the fragmented infrastructure on which they relied, slowed growth and creating possible security challenges and networks. Swissport has set ambitious targets to redefine the safety and networks staple, and replace the broken virtual networks (VPNS), different devices and enforce inconsistent policy with a completely new SAS’s structure.

“Before this change, we were running different systems across different sites with different policies – the vision was fragmented,” Thorpe said. “Now we work under one group of security policies worldwide, and I can sleep at night knowing that the environment is safe.”

Each connection, whether from the airport booth or a mixed business device, is now aware of the identity, and it is constantly included in the risks, and it is applied in the actual time from the SASE platform one of the cloud. Zero Trust is applied to each end and interaction point, giving SwissSport the flexibility in growth at the speed it needs during its growing customer base service.

Why is Sase is at the heart of architectural repair in swissport

Swissport’s decision to adopt Sase Architecture emphasizes the importance of maintaining the actual time, transparency and accuracy to maintain numerous customer relations around the world. Excellence in global aviation services occurs when each unit has the necessary data operating. Swissport helps to create a united team script with the common goal of superiority on behalf of customers.

Venturebeat sees the benefits of SAS that exceeds the replacement of old systems with unified architecture. The faster and more accurate data, the longer the business can reach offices and sites, while keeping it coordinated with wider teams and achieving a greater return on the invested capital (ROIC).

Venturebeat also witnesses this play through intensive capital services companies today, as it is to improve the response and unify the various networks geographically has a direct impact on revenues. Core to Swissport Sase Strategy is a uniform structure that unites more than 320 sites, ensuring safer communications in actual time across each site and on the network.

When selecting its SAS’s strategy, Swissport chose SASE one cloud platform. Gartner It is noted that there are many benefits for this approach, including unifying the statute, controlling simplified policy and reaching identity that adapts in the actual time.

Swissport has diligently in all SAS sellers who also offer Zero Trust as part of architecture and choose Cato networks For individual management plane, unified data lake, global existence points (POPS), the ability to collapse a wide-known area network of programs (SD-Wan) and safety in one enforcement layer. I told the Thorp Venturebeat that the important motivation to adopt the SSE platform was the need to stay away from supporting many old platforms, each with its unique composition. “The various platforms require different formations, which led to the complexity of exploring and repairing errors and made the enforcement of security a challenge.”

“Cato’s TLS test gives us the ability to check encrypted traffic while avoiding unintended service disorders,” said Ashton Roberts. “It was a great improvement in our security situation.” The TLS examination is essential to maintain the network of security and security infrastructure in swissport. TLS encryption and disintegration and the Swisk Layer (SSL) movement is necessary in the SWISPPORT infrastructure, as it provides data and helps to determine potential threats. TLS inspection analyzes the contents of each encrypted message to discover harmful programs or malware of data or other malicious activities that may be more harmful.

Five lessons learned from the Sispport SAS scheme

While most institutions are trying to integrate SECURE Service Edge (SSE), SD-Wan and ZTNA from multiple sellers together, Swissport has chosen to unify the statute with Cato to collapse the security technology staple, unify the application of policy and include safety directly in the network fabric.

Tell Ashton-Roberts and Thorp Venturebeat that SAS offers the vision they need to maintain the operation of global technology operations smoothly. At the same time, Zero Trust imposes the lowest distinction and protects assets and resources, and most importantly, the identities and roles of employees and clients on the network.

The Swissport Sase chart includes the following five principles:

  1. Zero confidence from end to end turns into an immediate work. Swissport plays the Zero Trust app via each edge and end point. They replaced the old VPNS with fully approved, partial and adaptive network fabric. “Within 15 minutes, our team identified the traffic of an excessive database, prohibiting the device and restoring regular operations – something that would take us a few days ago,” Thorpe told Venturebeat.
  2. Global security becomes easier when policy is united. The old SWISSport systems were a mixture of multi -protocol reproach links (MPLS), the region’s VPNS and isolated protection walls, each of which was created at different times, all of which provide inclination of uncomfortable policy and continuous friction. Now, one policy framework rules the network access via Amazon Web Services (AWS), Microsoft Azure, Saas Cloud applications and Edge Edge systems. There is no specific logic for the site or manual erosion, only in actual time control. Gartner Expectations of this by 2027, 40 % From the large institutions you will adopt the enforcement of the unpopular sites as a basic line to reach the ZTNA network, to less than less than less than 10 % In 2024, Swissport already works on this model, which leads to a complexization with increased access.
  3. The actual time is the results of the leadership of the business accelerator and the return on investment. The old Swissport systems left blindness to threats across the field. Connecting the root cause with the response took days. Now, all traffic is broadcast, from airport stations to Cloud Saas applications, in a single data lake that supports continuous control of roles -based access (RBAC) and threat analyzes. “It is extremely easy to determine communication problems, analyze traffic patterns, and secure our network from one interface,” Thorpe said. according to GartnerLess than half of the sellers provide uniform notes via users, devices and applications in all edges. Swissport mainly built it.
  4. Decode everything, do not disrupt anything: TLS insurance on a large scale. The encrypted traffic is the new blind spot. Many institutions still go beyond TLS inspection to avoid broken cumin or application. Swiss chose differently. By publishing a full TLS examination via the spine, Swissport maintains the vision of encrypted threats without disrupting important aviation systems. Most SSE and ZTNA sellers still rely on partial decoder or bypass tunnels, according to the latest Gartner review of adaptive access capabilities. Swissport has proven that a full inspection can be achieved even in high and high availability environments.
  5. The Sase Pay the faster victories. Swissport did not add more sellers; They united them. SASE platform has been replaced by an extension of SD-Wan devices, VPN center, and independent security tools. The result? The websites come on the Internet in hours, not weeks. New users are immediately protected. Politics changes worldwide in minutes. ZArtner Projects that 65 % Of all SD-Wan purchases, they will be assembled on SASE platforms by 2027, only before 20 % In 2024, swissport did not wait. They have made the basis of the basis, not the bombing, and appear in the lightness of the global movement.


https://venturebeat.com/wp-content/uploads/2025/04/Swissport-goes-all-in-on-SASE-with-Cato-Networks-Unifying-security-and-networking-across-more-than-26000-users-hero-image.jpg?w=1024?w=1200&strip=all
Source link

Leave a Comment