{"id":34190,"date":"2020-06-16T19:42:47","date_gmt":"2020-06-16T18:42:47","guid":{"rendered":"https:\/\/www.intelligentcio.com\/africa\/?p=34190"},"modified":"2020-07-29T10:48:40","modified_gmt":"2020-07-29T09:48:40","slug":"the-game-changer-for-south-africas-oldest-bank","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/africa\/2020\/06\/16\/the-game-changer-for-south-africas-oldest-bank\/","title":{"rendered":"The game changer for  South Africa\u2019s oldest bank"},"content":{"rendered":"\n<p>First National Bank (FNB) is the oldest bank in South Africa and one of the country\u2019s \u2018big four\u2019 financial institutions. It is a division of FirstRand Limited, a large financial services conglomerate, which trades on the Johannesburg Securities Exchange under the symbol FSR. FNB is also listed on the Botswana Stock Exchange under the symbol FNBB and is a constituent of the BSE Domestic Company Index.<\/p>\n\n\n\n<p><strong>Challenge: Accelerate problem resolution in the data centre<\/strong><\/p>\n\n\n\n<p>Eugene Pretorius was tired of the blame game. Every time FNB experienced a service disruption or dip in application performance, fingers would point at the networking team.<\/p>\n\n\n\n<p>\u201cThe network doesn\u2019t discriminate. It\u2019s either working or everything is down. It\u2019s not going to pick and choose things to disrupt,\u201d says Pretorius, CIO of Infrastruture and Security Services at FNB. \u201cBut whenever something went wrong, the network was always blamed.\u201d<\/p>\n\n\n\n<p>In these circumstances, representatives from FNB\u2019s network, data centre and server teams would gather in a \u2018war room\u2019 to troubleshoot the issue. It would take hours &#8211; sometimes days &#8211; to find a solution. And many times, a root cause was never identified, leaving the distinct possibility of problem recurrence and the blind troubleshooting that followed.<\/p>\n\n\n\n<p>\u201cIt was clear we needed better visibility in the data centre,\u201d Pretorius recalls. \u201cWe needed the ability to see exactly what was happening, where it was happening and why.\u201d<\/p>\n\n\n\n<p>To improve data centre visibility, troubleshooting and security, FNB deployed Cisco Tetration platform, which provides a detailed view &#8211; both real time and historical-of application connectivity, dependencies and data flows across a hybrid IT environment. \u2018The game changer\u2019, as Pretorius calls Cisco Tetration, has indeed altered the playing field on which FNB competes.<\/p>\n\n\n\n<p><strong>From blindness to 20\/20 vision<\/strong><\/p>\n\n\n\n<p>FNB was the first company in the world to adopt Cisco Tetration, which is now installed on half of the bank\u2019s servers, including its DNS and Active Directory systems. Pretorius, a self-described \u2018nerdy, hands-on CIO,\u2019 has become a power user and says Tetration is his favoured tool whenever problems occur.<\/p>\n\n\n\n<p>\u201cIf something goes down, we immediately use Tetration to see what\u2019s happening,\u201d he says. \u201cWe have very large, very complex applications that have been around for decades and Tetration shows us things we\u2019ve never seen before. If an IoT device is misconfigured or if a server is in distress or if an endpoint is causing issues, we can immediately see it and isolate the problem.\u201d<\/p>\n\n\n\n<p>Anomalies and outages that used to take a roomful of specialists and tens of hours to troubleshoot are now characterised in minutes using Cisco Tetration, which is integrated with Cisco Nexus 9000 Series switches.<\/p>\n\n\n\n<p>As Pretorius has long asserted, the network has rarely been the culprit of such problems. In one case, a DNS issue was quickly exposed. In another, a failing front-end web server was easily detected. And in a situation that would have otherwise proven baffling to FNB\u2019s IT staff, Cisco Tetration pinpointed a user-generated query that had been running for 197 hours inside a data warehouse, slowing down the entire environment.&nbsp;<\/p>\n\n\n\n<p>\u201cWe never would have been able to see or understand these problems without Tetration. It\u2019s the only tool in the world that can show what is happening across the network, application and server planes all on one screen,\u201d Pretorius claims. \u201cTetration gives me 20\/20 vision in the data centre.\u201d<\/p>\n\n\n\n<p><strong>Thwarting persistent cyberattacks<\/strong><\/p>\n\n\n\n<p>In addition to better data centre visibility, Cisco Tetration &#8211; along with an entire suite of Cisco security products &#8211; has dramatically improved the bank\u2019s cyber defences. Like all of South Africa\u2019s \u2018big four\u2019 banks, FNB is under persistent, multifaceted attacks by cybercriminals and malware.<\/p>\n\n\n\n<p>Cisco Stealthwatch and Cisco Tetration work in tandem to provide continuous, real time monitoring of all network traffic. <a href=\"https:\/\/umbrella.cisco.com\/\">Cisco Umbrella<\/a> and Cisco Advanced Malware Protection (AMP) scour the traffic to detect anomalies, malicious behaviour and malware. And Cisco Identity Services Engine (ISE) takes action when problems are identified.<\/p>\n\n\n\n<p>\u201cAll of our Cisco security products are tightly integrated, giving us multi-layered protection from the core to the edge,\u201d Pretorius says. \u201cStealthwatch identifies anomalies, ISE immediately quarantines them and then we use Tetration to get an incredibly detailed picture of what happened and what was affected. In the past, we had to comb through firewalls, hundreds of logs and dozens of network devices just to get a fraction of the picture.\u201d<\/p>\n\n\n\n<p>With Cisco Tetration working in concert with Cisco security products, FNB\u2019s malware infection rate has dropped from 9% to 0.1%. Whereas the bank used to have thousands of infected endpoints at any given time, Pretorius says FNB now has less than 100 compromised machines on average.<\/p>\n\n\n\n<p><strong>Looking ahead<\/strong><\/p>\n\n\n\n<p>With vastly improved troubleshooting and security, Pretorius is now working to enhance the automation and compliance reporting of FNB\u2019s three data centres. Key to those efforts are Cisco ACI, the industry\u2019s leading software-defined networking (SDN) solution, and Cisco Network Assurance Engine, or NAE, a comprehensive intent assurance solution that mathematically verifies the entire data centre network for correctness.<\/p>\n\n\n\n<p>\u201cCisco ACI will help us automate our processes, enforce network and application policies and segment our data,\u201d Pretorius explains. \u201cOnce ACI is fully installed, Cisco NAE will give us assurance and show compliance, which will stop auditors from running scripts in our environment.\u201d<\/p>\n\n\n\n<p>Cisco ACI will also help FNB move to a DevOps model of continuous application development and deployment. Instead of working two weekends every month &#8211; in the middle of the night &#8211; to implement changes and deploy new applications, Pretorius\u2019 team will be able to do so at any time, without disrupting service availability.<\/p>\n\n\n\n<p>\u201cIn addition to security, visibility and availability, Cisco technologies give all of us the ability to sleep at night,\u201d Pretorius says. \u201cAnd ever since Tetration was launched, not a single outage has been blamed on the network.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"<p>First National Bank (FNB) is the oldest bank in South Africa and one of the country\u2019s \u2018big four\u2019 financial institutions. It is a division of FirstRand Limited, a large financial services conglomerate, which trades on the Johannesburg Securities Exchange under the symbol FSR. FNB is also listed on the Botswana Stock Exchange under the symbol [&hellip;]<\/p>\n","protected":false},"author":36,"featured_media":34191,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[565,34,338,38,9059,13,262],"tags":[13167,13164,13165,13166,453],"class_list":["post-34190","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-banking-finance","category-case-studies","category-case-study-newsletter","category-networking","category-south-africa","category-top-stories","category-used","tag-botswana-stock-exchange","tag-first-national-bank","tag-firstrand-limited","tag-johannesburg-securities-exchange","tag-south-africa"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/34190","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/users\/36"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/comments?post=34190"}],"version-history":[{"count":5,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/34190\/revisions"}],"predecessor-version":[{"id":34732,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/34190\/revisions\/34732"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media\/34191"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media?parent=34190"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/categories?post=34190"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/tags?post=34190"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}