UserLock MFA meets Airbus Tier 1 supplier's security requirements

During the 2020 lockdown and the shift to remote work, Laurent Riethmuller, the IT security systems manager, was looking to implement a multi-factor authentication (MFA) solution to protect the network and sensitive data from unwanted and unauthorized access.

Riethmuller was looking for a solution to control concurrent sessions, to stop end users from sharing login and password information.

Access to confidential documents was also a concern for Mazères Aero. Operating in an ultra-competitive environment, the IT team and management must ensure that only authorized individuals can access sensitive documents.

In addition, because of its status as a Tier 1 provider, the company must commit to a very high level of cybersecurity, being aware of everything that happens on the network and files.

Riethmuller first discovered IS Decisions through FileAudit. Riethmuller appreciated how FileAudit allowed him to monitor sensitive files and folders and to track who does what, when, and on which file. After testing and purchasing FileAudit, he received a free trial of UserLock.

He quickly discovered how UserLock allowed him to easily and efficiently secure Active Directory identities across on-site, remote, or SaaS access thanks to its Active Directory MFA. UserLock MFA puts an extra layer of security on identity verification, checking that users are who they say they are. UserLock allows IT admins to choose to enable up to two second factors for end users: push notifications, authentication applications, or programmable software tokens such as Token2 or Yubikey.

UserLock also allows contextual restrictions to be applied to a user or a group of users, thus blocking all connections that do not meet these conditions. Thanks to this feature, Riethmuller set up access restrictions based on the number of simultaneous connections. He liked how UserLock also allows administrators to close a session remotely.

Deployment of both solutions was done during the pandemic, and Reithmuller was able to simply and easily deploy remotely.

The company now uses UserLock and FileAudit to secure Active Directory identity access to the network and to sensitive data in accordance with Airbus’s strict security requirements.

In addition to securing access with MFA, the solution also meets Riethmuller’s other requirements, since it offers Wake-on-LAN functionalities as well as simultaneous session controls.

With FileAudit, the IT team can carefully monitor the most sensitive files, and grant rights according to need to know, along with simplifying auditing and reporting.