// Q&A CASE STUDY
Weston College Elevate Campus Cybersecurity with KHIPU’s Managed Firewall Service.
Weston College, a leading educational institution serving nearly 30,000 learners across the country, faces the daily challenge of securing a vast and complex network. With three main campuses, numerous satellite centres, and over 4,000 devices connected, the College’s IT team, led by Head of IT Kerrie Monk, must ensure the smooth operation of critical systems while safeguarding sensitive student and staff data.
Recognising the scale of these challenges, Kerrie and her team approached KHIPU to provide a fully-managed firewall service. Now fully operational, the following is an interview with Kerrie to uncover the story behind the deployment…
KHIPU: What are some of the challenges you face when preparing students for a rapidly evolving workforce, particularly with regard to security?
KM: We constantly face new requirements, especially from a security point of view. Our challenge is ensuring that students are prepared for the workforce, regardless of their industry—whether it’s cybersecurity or hairdressing. Everyone uses computers in some capacity. At our college, we cover so many industries under one roof, which makes our job more challenging. We have to support different types of software, and some are more secure than others. This creates a range of challenges across the college.
“We, like the majority of the education sector, don’t have the internal expertise or budget to handle it all ourselves. Recruiting, training and, ultimately, retaining, skilled personnel is tough for organisations across the board.”
KHIPU: What would you say are your biggest cybersecurity challenges at present?
KM: Our biggest challenge is one shared by the entire sector: end-user training and education. Ensuring that our users understand their role in cybersecurity is a constant for us. We need to make sure that our staff and students grasp basic concepts like Multi-Factor Authentication (MFA) and password security. This can be difficult because the solutions have to be accessible to everyone.
In addition to awareness and training, the frequency and complexity of cyber threats are our biggest concern. Operating in the Further Education sector, we’re often targeted, which puts extra pressure on us to cover all bases. That’s why we turned to JISC and KHIPU for support. We, like the majority of the education sector, don’t have the internal expertise or budget to handle it all ourselves. Recruiting, training and, ultimately, retaining, skilled personnel is tough for organisations across the board.
KHIPU: What Was the main driver behind opting for a managed firewall service?
KM: It’s staffing and recruitment. It’s so difficult to not only find the right people with the right levels of knowledge skillsets but also to retain them. We can hire someone at the pay level we offer, but once they are comfortable, they often move on to new challenges. Not only this, but hiring for specialist roles often creates a single point of failure – what happens when that person goes on holiday or gets sick? This is why we decided to go external for help with the managed firewall service. We aren’t trying to pass the risk off, but we need support to handle the ever-evolving cyber threat landscape.
KHIPU: What would you say are the key benefits of a managed firewall service?
KM: The proactive monitoring of threats is invaluable, and not having to worry about purchasing hardware is part of the package. The service includes a detailed scoping process, so the solution is tailored to our specific needs, including SSL encryption, network speed, and security configuration. The key thing to remember is that you can select the very best hardware, but without proper configuration, it’s useless. Having a managed service means multiple experts review and monitor the configuration, which brings us peace of mind.
The combined sector intelligence that KHIPU and JISC provide ensures that we are protected from the very latest threats all of the time!
KHIPU: Do you feel like the managed service offers an element of education or enablement for your team?
KM: Yes, definitely. Even though it’s a fully managed service, we have full visibility. Our team can log in, run reports, and diagnose issues before escalating them. This has helped us upskill the team. We occasionally have engineers on site, which also provides fantastic learning opportunities.
KHIPU: Was there ever a discussion about choosing a fully managed service versus a co-managed option?
KM: We would always choose the fully managed service. My concern with comanagement is not knowing where the responsibility ends. With a fully managed service, I know that all configurations are trusted and properly reviewed.
KHIPU: What are the key challenges for the education sector that a managed firewall service helps to address?
KM: The sheer number of potential vulnerabilities. My team and I simply don’t have the time or expertise to go through all the logs or detect subtle threats. The managed service provides multiple eyes on the problem and a depth of experience we don’t have. Around the clock support is another major challenge for us and the sector. We don’t want our staff checking for IOCs over the weekend or through the night and a fully managed helps us to relax out of hours. If a college nearby is compromised or reports an incident, we would previously had to rush to act, but with the manged firewall service in place, we know it is being taken care of.
KHIPU: What’s next for you and the college in terms of managed services?
KM: We’re really happy with the managed firewall service and are now looking at a SOC service with a SIEM solution for 24/7 monitoring of our entire network. Right now, our firewall is our first line of defence, but we need broader network protection.
KHIPU: How was the procurement process with Khipu & JISC?
KM: It was incredibly straightforward. Everything was laid out clearly, which made the process simple for us.
“The proactive monitoring of threats is invaluable, and not having to worry about purchasing hardware is part of the package. The service includes a detailed scoping process, so the solution is tailored to our specific needs, including SSL encryption, network speed, and security configuration. The key thing to remember is that you can select the very best hardware, but without proper configuration, it’s useless. Having a managed service means multiple experts review and monitor the configuration, which brings us peace of mind.”
Kerrie Monk
Head of IT at Weston College
// Case Studies
You may also like.
Loretto School
SOC in a Box
In this Q&A case study discover how Loretto School re-evaluated their cybersecurity strategy, and implemented KHIPU Networks SOC in a Box.
Royal Central School of Speech & Drama
Network Infrastructure - Firewalls - NOC
In this Q&A case study, Charles Bermudez, Deputy Director of IT at RCSSD shares their journey, from identifying critical needs to the selection and implementation of cutting-edge solutions from HPE Aruba Networking and Palo Alto Networks, all supported around the clock by the expertise of KHIPU’s Network Operations Centre (NOC).
Canterbury Christ Church University
SOC Services
Canterbury Christ Church University implements KHIPU’s SOC to provide 24x7x365 visibility and protection against Cyber Threats. Canterbury Christ Church University, in partnership with KHIPU, transforms and leverages existing security tools into a 24x7x365 Security Operations Centre (SOC) protected environment with sector-wide immediate response, remediation and proactive threat hunting capabilities.
Liverpool John Moores University
Palo Alto Networks Firewall Infrastructure Upgrade
When their existing firewall infrastructure reached its end of life, LJMU seized the opportunity not just to upgrade, but to fundamentally enhance their security posture. This case study details how they improved their security posture, streamlined policy management, and enhanced their VPN capabilities. Discover the tangible benefits of a modern approach to network security in higher education.
TEC Partnership
SOC
TEC Partnership, one of England’s largest providers of further and higher education, faced the challenge of securing a vast and complex network spanning multiple campuses. With limited resources and disparate security systems, they were vulnerable to cyber threats. By deploying KHIPU’s SOC services, TEC Partnership embarked on a journey to transform their cybersecurity posture.
Barton Peveril Sixth Form College
SOC
After almost 6 months of using KHIPU's Security Operations Centre (SOC) services, we asked Charlie Davis, IT Manager at Barton Peveril to share his views and experiences on how the SOC was performing amidst the ever-changing cyber threat landscape.
Royal Academy of Music
SOC
After almost 12 months of using KHIPU’s Security Operations Centre (SOC) services, we asked Sebastian Groves, Infrastructure and Cyber Security Manager at the academy, to share his views and experiences on how the SOC has performed amidst the ever-changing cyber threat landscape.
Weston College
KHIPU Managed Firewall Services
Weston College, a leading educational institution serving nearly 30,000 learners across the country, faces the daily challenge of securing a vast and complex network. With three main campuses, numerous satellite centres, and over 4,000 devices connected, the College's IT team, led by Head of IT Kerrie Monk, must ensure the smooth operation of critical systems while safeguarding sensitive student and staff data.
Barton Peveril Sixth Form College
HPE Aruba Networking - Palo Alto Networks
Largest Sixth Form College in the UK accelerates connectivity & cyber security with KHIPU, HPE Aruba Networking & Palo Alto Networks solution. Like the majority of further- and higher education institutions, Barton Peveril Sixth Form College is facing a common set of networking and cyber security challenges. With students and staff members each accessing the network via an increasing number of devices, in addition to those
University of Witwatersrand (Wits)
Palo Alto Networks Cortex
In response to escalating cyber threats, University of the Witwatersrand needed a comprehensive cybersecurity solution to protect its extensive network of 41,000 students and staff. Partnering with KHIPU Networks and Palo Alto Networks, Wits implemented the advanced Cortex XDR and XSOAR platform. This unified system delivers extended protection, detection, and response capabilities across the university's network, ensuring the safety of its entire community.
University of Sunderland
Palo Alto Networks Prisma Access
In the wake of a significant cyberattack, the University of Sunderland needed to rapidly review its cybersecurity strategy. A change came in the form of Palo Alto Networks and KHIPU Networks. A single, unified network security and secure access service edge (SASE) platform strategy is helping to secure the University’s technical security integrity - and its future.
The King Alfred School
HPE Aruba Secure Campus Network
The King Alfred School (KAS) is a leading Co-Educational Independent Day School dedicated to fostering a vibrant learning environment for students aged 4-18. With so many pupils, ensuring a seamless educational experience in today’s technology-driven world presented a unique challenge for the school’s IT team.
Sheffield Hallam University
SOC Services
A single, unified KHIPU and Palo Alto Networks endpoint and network security solution including Next Generation Firewalls and KHIPU'S 24x7 SOC. Solution: Next-Generation Firewalls, Cortex XDR, Cortex XSOAR, and Panorama; KHIPU SOC
Loretto School
SOC in a Box
Scotland's oldest and most presitgious private school announces the acquisition of KHIPU's Security Operations Centre (SOC) services to further enhance their cyber security capabilities. Solution: KHIPU Security Operations Centre (SOC)
Leicester College
SOC Services
KHIPU Networks Deliver Cost-Effective Education Sector-Specific Automated Endpoint Response Solution to Leicester College With an automated endpoint protection solution from KHIPU, Leicester College have now achieved an additional layer of proactive cyber security whilst freeing-up their more highly skilled technical resources to focus on high-level tasks Solution: KHIPU 'SOC Lite'
Canterbury Christ Church University
SOC Services
Canterbury Christ Church University implements KHIPU’s SOC to provide 24x7x365 visibility and protection against Cyber Threats Solution: KHIPU Security Operations Centre (SOC)
Bridgend College
Cloud Security
Immutable backup solution becomes a crucial asset in protecting Bridgend College against ransomware. Learn how KHIPU Networks and Rubrik helped Bridgend College recover quickly from ransomware attacks.
Colchester Institute
Cloud Security
Why having a ransomware Incident Response Plan and Solution is critical in today’s fight against cyber crime. Learn how Colchester Institute partnered with KHIPU and Implemented Rubrik for their outstanding protection and recovery from cyber breaches, coupled with ease of deployment and management.
University of Derby
SOC Services
Implementing a world-class SOC at the University of Derby The University of Derby has standardised on a proven Palo Alto Networks security solution, delivered as part of an eXtended Managed Detection and Response (XMDR) service powered by KHIPU Networks Security Operations Centre (SOC).
TEC Partnership
SOC Services
Proactively protecting one of England’s largest providers of further and higher education The TEC Partnership is reaping the rewards of the Palo Alto Networks portfolio, delivered as an eXtended Managed Detection and Response (XMDR) service powered by KHIPU Networks’ Security Operations Centre (SOC).
University of the Free State (UFS)
NGFW & Secure Remote Access
Securely expand remote access capacity with little time, no onsite access, and a limited budget University Rapidly Deploys Pandemic Remote Access Solution to Facilitate Teaching and Learning for 41,000 South African Students During Lockdown. Solution: Palo Alto Networks
Aldenham Foundation
Endpoint Security
Securing a Dynamic Learning Environment Learn how Aldenham Foundation secured their network and endpoints across multiple locations while pursing a cloud-first strategy. Solution: Palo Alto Networks
Colchester Institute
Cloud Security
How Colchester Institute Recovered from a Crippling Ransomware Attack within Days Learn how Colchester Institute recovered from a crippling ransomware attack within days through the deployment of Rubrik. Solution: Rubrik
University of the Free State (UFS)
Preventing Malicious Email Attacks with Proofpoint.
Explore how University of the Free State (UFS) uses Proofpoint Enterprise Protection blocks attacks, secures email and ends blocklisting. Solution: Proofpoint
North-West University
Achieving an 80% increase in security efficiency with Palo Alto Networks portfolio.
Palo Alto Networks portfolio provides this top-three South African university with trusted, innovative cybersecurity. Security efficiency has increased by 80%, and the university is on track to achieve a Zero Trust architecture. Solution: Palo Alto Networks
University of Cape Town
Prevention against phishing attacks
Learn how the University of Cape Town implemented KHIPU's simulated phishing and cyber security awareness solution to reduce its risks of cyber attacks. Solution: Simulated Phishing and Cyber Security Awareness (Phishing As A Service - PhaaS)
University of Winchester
Pro-active and automated vulnerability scanning and management
The only way to manage vulnerabilities across large 1000+ server environments is through automation. Find out how the University of Winchester uses vulnerability management to protect against and prevent cyber threats. Solution: Vulnerability Scanning and Management (Greenbone)
University of Southampton
Maintaining academic freedom while simultaneously reducing security risks
Having over 30,000 users on your network accessing the internet needs next-generation security to ensure the environment is protected against cyber attacks. Learn how the University of Southampton maintains it secure posture and enhances the user experience. Solution: Palo Alto Networks NextGen Firewalls
St John’s College
Creating student bubbles to enhance the University experience
Learn how St John's College, University of Cambridge, provides their students with a simple on-boarding process for all of their devices when arriving at the institution - with zero intervention from IT support / helpdesks. Solution: HPE Aruba Networks WiFi Clearpass Policy Manager (NAC)