Challenge

In the wake of the acquisition, Banorte’s technical support department was saddled with managing an assortment of terminal emulators that failed to meet current security standards. So the department set out to standardize host access across the board.

Experts from different areas – including systems, technical support, systems security, and quality control – tested myriad terminal emulators. Ultimately, they chose Reflection for the Web. They also employed Inffinix Conectividad, our longtime reseller in Mexico and Latin America, to help get Reflection up and running.

Easily installed on any web server and downloaded to the desktop browser on demand, Reflection for the Web gives local and remote users access to IBM mainframe, AS/400, HP, UNIX, and OpenVMS hosts. Its fully integrated Java client and proxy server provide uncompromised security, including data encryption and user authentication. Together, the Java client and proxy server shield mission-critical host information from spies, hackers, and other known security threats.

Solution

For the initial installation, Banorte’s technical support team wanted to connect branch bank servers to treasury management and control applications residing on an HP-UX host in Banorte’s brokerage division.

In just one week, employees at 700 branches were safely accessing the assigned brokerage applications over the Internet. “Implementation was quick and successful,” said Salvador Sierra Hernández, Banorte’s assistant director of technical support. “It was easy to customize Reflection for the Web to meet our needs. And because we didn’t have to physically install the client components on each terminal, we saved considerable time and money.”

Reflection for the Web supports open standards (including Java, SSL, and LDAP), so there were no problems integrating terminal sessions with Banorte’s intranet portal. Users simply click a web link to connect directly to the target host application. Behind the scenes, a Java applet is downloaded from the web server to the browser. Once downloaded, the applet connects directly to the host application, without going back through the server.

The applet contains only the specific functions required by each user, minimizing the footprint on the desktop. Upgrades are automatically deployed each time the user accesses the host application. The entire download and upgrade process takes seconds. Users aren’t even aware that it’s happening.

To protect the UNIX server running the brokerage applications, Banorte’s technical support team used a Reflection for the Web proxy server feature – Secure Token Authorization – to avoid the hassles and risks associated with deploying SSL client certificates to every remote user. Now, digitally signed tokens are deployed to authorized users by the Reflection management server when a secure session is loaded. This ensures that only authorized users can connect to the host system.

With Reflection for the Web, administrators have complete control over which emulation sessions a user or group can access. They can also create personalized sessions for users from any location, at the corporate office or branch level, which greatly simplifies management. “Any configuration changes made at the corporate office are automatically reflected in all sessions,” said Sierra Hernández. “Now we have everything centralized in the same place – the intranet.”

Results

Sierra Hernández has ongoing plans for Reflection for the Web. With the help of Inffinix Conectividad, he intends to roll the product out to all remaining branch banks, and eventually to affiliated businesses.

“Reflection for the Web has become the centerpiece of our information technology and a strategic tool for expanding our services,” he said. “We wanted the best and we found it in Reflection for the Web.”