City of Aurora Reducing Security Administration Time by 60 percent for More Efficient City Government with Symantec and Novacoast Fending off viruses and other malware was straining IT resources at the City of Aurora, Colorado. The existing antivirus software lacked the ability to implement security software updates across a heterogeneous network. The IT staff worked 24-hour days, creating scripts and batch files to respond to new threats. Symantec had already helped the city streamline backup operations, so the IT team deployed a Symantec comprehensive threat management solution. Results include a 60 percent reduction in security administration time spent on software distribution and an end to disruptions from malicious code. Organization Profile Once a budding frontier town of farmers and ranchers, Aurora (www.auroragov.org) today is Colorado's third largest city with more than 300,000 residents. The city's IT Department provides centralized services to help more than 2,500 employees serve citizens more efficiently and effectively. Industry Government Solution Comprehensive Threat Management, Data Protection Seeking greater efficiency and security Aurora is a booming business center and residential community with more than 300,000 residents. We looked at various packages, but Symantec AntiVirus Enterprise Edition offered us the most comprehensive and cost-effective solution for managing threats across multiple platforms. Rick Mapes Client Services Manager Aurora, CO Information Technology Department The city government of Aurora has expanded to keep pace with this growth, but always within the constraints of tight budgets. When the city faced budget cuts in the 1980s, the IT department took the lead in helping utilize technology to increase efficiency. Today, while other city departments continue to expand, the IT team itself faces the challenge of maintaining high service levels with fewer dollars and a smaller staff. A principal challenge for the IT team has been the need to protect the city network and information from viruses and other malicious code. Toward that goal, the city implemented a virus protection solution from McAfee in 2003 that centralized threat management across its heterogeneous network of more than 100 servers and 3,000 desktops. This legacy solution improved the city's ability to identify threats, but, according to Aurora's Client Services Manager Rick Mapes, it was weak on capabilities for managing the distribution of software updates and upgrades across the network. Working 24x7 to defend the network Our mixed network of Linux, NetWare, Windows, and UNIX Systems was more than our legacy software could manage, explains Mapes. Each time a threat appeared, our staff had to create batch files or scripts to distribute the needed updates. Over a period of 18 months, we faced three separate incidents in which our team worked 24-hour days to protect our information and keep the city's systems running.
Symantec strengthens threat protection while helping to reduce administration costs The old anti-virus program was also using up too much network bandwidth and slowing the performance of other applications. The McAfee system ran on 12 repository systems that could consume from 30 to 85 percent of our network bandwidth during a software update, adds Mapes. The whole update process was difficult to control and sometimes took as long as 24 hours. Implementing comprehensive threat management The city had successfully implemented previous versions of Symantec's Veritas NetBackup to centralize backup of its desktop and server systems. As the need for a more capable threat management solution became clear, Symantec software became a candidate to streamline the management of yet another major IT function. It was time to renew our McAfee license, so we knew we had to find something better, says Mapes. We looked at various packages, but Symantec AntiVirus Enterprise Edition offered us the most comprehensive and cost-effective solution for managing threats across multiple platforms. The solution from Symantec and Novacoast, Inc., a Symantec Platinum Business Partner, automatically identifies and blocks threats and distributes software updates without administrator invention. Symantec and Novacoast met our needs for a solution that would take pressure off our small IT team, allowing us to be more productive and efficient, but also improve our ability to protect the city's network, says Mapes. Symantec AntiVirus Enterprise Edition puts us firmly in charge of security administration, enabling us to plan and be proactive instead of just throwing all our resources at each new threat. Better security at the right price Attractive pricing made the decision even easier. Symantec offered the city a three-year license for Symantec AntiVirus Enterprise Edition at the same cost as one year of continued maintenance from McAfee. This enabled the city to centralize and strengthen its security administration while saving over $100,000 on software licensing and maintenance costs over three years. Partnering for a successful rollout Novacoast helped the city create a script that automated the rollout of the Symantec software to a remote user community spread over 110 buildings and 80 square miles. Integrated with Novell ZenWorks resource management software, the solution is transparent to end users. The initial rollout achieved a 95 percent success rate, far surpassing the city's expectations. The city now uses the same method to distribute all Symantec AntiVirus Enterprise Edition client upgrades, allowing Mapes and his team to complete all upgrades during a ninehour evening backup window. Users return to work the next morning, login, and gain protection from the new software without disruption. Symantec brings end-to-end expertise to our partnership, says Al Maslowski- Yerges, security practice manager, Novacoast. From integration with backend systems to deployments and methodologies, they work with us every step of the way to achieve positive outcomes for our customers in a tight frame.
CITY OF AURORA Backing up systems more reliably Aurora implemented NetBackup in the data center first and liked the way it reduced IT overhead and improved availability by automating what had previously been manual backup and restore processes. This success paved the way for Veritas NetBackup Professional, which replaced a voluntary system in which employees were asked to back up their own files each day. The old system led to a high level of employee non-compliance and a steady flow of requests to the helpdesk for nonexistent backups, Mapes explains. By automating backups with Veritas NetBackup Professional, we were able to improve productivity among IT and our end users. Evolving to the next generation in backup and restore The city is now planning a transition to Symantec Backup Exec System Recovery software as a possible upgrade for desktop and server backup operations. This Symantec solution further speeds and streamlines the backup process. It captures a point-intime image of an entire server or desktop's operating state, which includes the operating system, applications, data, and settings into one easyto-manage file. Bringing extra security to select client systems SOLUTION AT A GLANCE Business Drivers Support expanding citizen base and programs with smaller IT team and resources Centralize IT systems and services for greater efficiency Eliminate downtime and disruption caused by viruses and other malware attacks Preserve and protect data to ensure continuity of citizen services Technology Challenges Centralize virus prevention and distribution of security updates across 2,500 desktops and 110 servers Remotely distribute security updates to desktops faster with less demand on network bandwidth and IT staff Automate backup processes for faster, more accurate backups requiring less staff time Establish personal firewalls on key desktops for added network security Solution Comprehensive threat management and data protection across 110 servers and 2,500 desktops Symantec Products Symantec AntiVirus Enterprise Edition Symantec Client Security Symantec Services Symantec Platinum Support Symantec Education Services Technology Environment Applications: Novell ZenWorks, Versaterm, Telestaff, Sunguard, Stellent, H.T.E., ESRI GIS Databases: Informix, Microsoft SQL Server Server platform: Dell SAN, HP RP8400 running HP-UX v.11.11, Microsoft Windows Server 2003, Novell NetWare 6.5, Redhat 7. Storage: EMC Symmetrix/CLARiiON CX300 storage area network Backup tape library: ADIC Scaler Symantec Platinum Business Partner Novacoast, Inc. Aurora has also purchased Symantec Client Security software with the goal of providing extra layers of protection on the desktops of certain employees whose jobs require them to interact with the public over the Internet. Symantec Client Security software combines Symantec's award-winning antivirus and antispyware protection with a client firewall, and intrusion prevention, all at the desktop level. Symantec Client Security can help secure the laptops that are frequently taken off premises, says Mapes. We are also looking to this solution as a way to support more telecommuting. Symantec AntiVirus Enterprise Edition puts us firmly in charge of security administration, enabling us to plan and be proactive rather than dedicating all our resources to each new threat. Rick Mapes Client Services Manager Aurora, CO Information Technology Department
Symantec services also help the city receive the maximum value from its technology investments. Several members of the city's IT team have attended Symantec Education classes on the NetBackup products, which has helped increase IT productivity. The city also values Symantec Platinum Support for its fast and accurate service. Eliminating disruptions and downtime Since installing Symantec AntiVirus Enterprise Edition, the city of Aurora has experienced no significant disruptions to its business or downtime due to viruses and other malware. The city has also used the Symantec software to identify several instances of spyware that escaped detection by the legacy solution. We no longer face emergency situations requiring the IT staff to develop batch files or special scripts on short notice in order to distribute security updates, says Mapes. The Symantec software also helps us save administration time on our regular software upgrades, and by allowing us to monitor and manage security across the network from a single Web console. In total, Symantec software helps us save an estimated 950 hours per year for security administration representing a $49,000 savings, adds Mapes. We estimate 100 percent payback on Symantec AntiVirus Enterprise Edition within approximately 12 months. Consolidating servers for cost and bandwidth savings Symantec AntiVirus Enterprise edition allowed the city to consolidate 12 security management servers down to two, an 83 percent reduction, reducing TCO and saving an estimated $9,000 per year in licensing and maintenance costs. In addition, the more efficient Symantec solution now consumes virtually no network bandwidth during software distribution, compared to as much as 80 to 85 percent used for security software updates in the past. City of Aurora Information Security Architecture The City of Aurora replaced McAfee antivirus on its remote desktops and servers with Symantec AntiVirus Enterprise Edition using Novell ZenWorks and a custom script developed by Symantec and Symantec Partner Novacoast. The overnight migration was 95 percent successful and involved no user downtime. 3,000 desktop systems and 100 servers in 110 locations throughout the city Main data center Symantec AntiVirus Enterprise edition allowed the City of Aurora to consolidate 12 security management servers down to two, an 83 percent reduction, reducing TCO. The Symantec solution distributes software updates while consuming virtually no network bandwidth, compared to as much as 85 percent loading with McAfee.
CITY OF AURORA BUSINESS VALUE AND TECHNICAL BENEFITS Enhanced Security No disruptions from malicious code since Symantec deployment, down from two per year Cost Savings 67 percent reduction in virus protection software licensing and maintenance costs ($56,000/year vs. $55,000 for a three year contract) by choosing Symantec. 84 percent savings in security management server hardware and maintenance costs. Symantec brings end-to-end expertise to our partnership. From integration with backend systems to deployments and methodologies, they work with us every step of the way to achieve positive outcomes for our customers in tight time frames. Al Maslowski-Yerges Security Practice Manager Novacoast, Inc. Operational Efficiency 60 percent annual reduction in security administration time formerly spent on distribution of security software updates 30 percent reduction in network bandwidth consumed by security software administration 83 percent reduction in security management servers, from 12 to two No reported server and desktop backup failures within nine-hour time window Payback Projected 100 percent payback on Symantec AntiVirus Enterprise Edition in 12 months Symantec has been instrumental in helping us control costs by centralizing administration, automating more processes and becoming more efficient, says Mapes. As a result, our staff can spend more time serving our internal clients and the residents of Aurora. Our team may be smaller than in the past, and our job may be bigger, but with Symantec our services are better than ever. Copyright 2006 Symantec Corporation. All rights reserved. Symantec, Symantec AntiVirus, the Symantec logo, Veritas, NetBackup and Backup Exec are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.