01
Client Profile & Background
A large automotive parts manufacturing company in Bekasi, Indonesia, with over 2,000 employees across three shifts. The facility spans 50,000 square meters and includes production lines, warehouses, R&D labs, and administrative offices. The company handles sensitive intellectual property and operates under strict international quality standards.
The existing access control system was outdated, relying on standalone magnetic stripe readers and paper logs. This setup created security gaps, including unauthorized access to restricted areas, difficulty in tracking employee movements, and compliance risks. The IT team sought a modern, integrated solution that could centralize management and provide real-time visibility.
02
Technical Challenge
The primary challenge was the lack of integration between access control and other security systems. The legacy system had 15 separate databases for different zones, leading to inconsistencies and delays in updating access rights. For example, when an employee left the company, it took up to 72 hours to revoke access across all zones. Additionally, the system could not log entry attempts in real-time, making forensic analysis difficult after a security incident.
Network segmentation was another issue. The access control controllers were connected to the same flat network as production machinery, exposing them to potential cyber attacks. A vulnerability assessment revealed that 30% of controllers had default passwords. The company needed to isolate the access control network and enforce strong authentication without disrupting production uptime.
03
Implemented Solution
We deployed a multi-layered access control solution using HP ProLiant servers running a centralized access management platform from Lenel. Biometric readers (fingerprint and facial recognition) from HID were installed at all entry points, integrated with existing employee ID badges. The system connects to a Fortinet firewall with IPSec VPN for secure remote management and network segmentation. All access logs are stored on a Synology NAS with 10TB capacity, configured for real-time replication to a secondary site.
For the production floor, we implemented role-based access control (RBAC) that restricts entry to specific zones based on job function and shift. The system automatically updates access rights from the HR database, reducing provisioning time to under 5 minutes. We also integrated the access control system with the existing Enterprise CCTV system, enabling video verification of access events. The network was segmented using VLANs and firewall rules, with all access controllers placed in a dedicated subnet monitored by the Fortinet firewall.
04
Results & ROI
The new system reduced unauthorized entry attempts by 95% within the first month. Access provisioning time dropped from 72 hours to under 5 minutes, saving 20 man-hours per week for the security team. The integrated logging and video verification improved incident response time from 4 hours to 15 minutes. The network segmentation eliminated the vulnerability of default passwords and reduced the attack surface by 80%. Overall, the company achieved compliance with ISO 27001 and local data protection regulations, avoiding potential fines of up to IDR 500 million.
The ROI was realized within 8 months due to reduced security personnel costs and lower risk of IP theft. The system's scalability allows for future expansion to new facilities without major reconfiguration. The client is now exploring integration with Hybrid Cloud for remote access management and Backup & Disaster Recovery for the access control database.
