Device connects
An engineer connects a laptop to the network at a regional utility office.
How it works in Energy & Utilities
ZT-NAC checks
The solution checks whether the device is registered and meets configured posture requirements, such as patch level, antivirus status and disk encryption.
Access is controlled
Compliant devices are allowed according to policy, while unregistered or non-compliant devices are denied or quarantined.
Why it matters
Benefits for Energy & Utilities
Consistent device admission
Apply a common device-admission policy across field offices and regional locations without requiring a switch or VLAN redesign at every site.
Reduced exposure from compromised devices
Restrict non-compliant laptops before they can become an entry point to shared business systems.
Controlled contractor access
Require contractor and vendor laptops to be registered before they are admitted to the network.
Centralised enforcement
Help a small central IT team manage device admission across locations with limited local IT support.
Use cases
Three site challenges. One secure network.
01
Out-of-date laptop at a remote field office
Scenario
An engineer returns to a field office with a laptop that has been offline for weeks and has missed important security updates.
What the solution does
ZT-NAC checks the laptop against configured posture requirements and quarantines it through its host firewall if it fails.
Outcome
The laptop remains restricted until it meets the utility's security requirements, reducing its exposure to shared systems.
02
Contractor laptop at a regional office
Scenario
A contractor connects an unregistered laptop to an available network port while working on a utility project.
What the solution does
ZT-NAC denies the device by default until utility IT registers it and it meets the required posture.
Outcome
An unknown contractor device does not receive unrestricted access to the utility's office network.
03
One device policy across multiple offices
Scenario
Central IT manages many utility offices spread across a large service area, with limited technical staff at individual locations.
What the solution does
ZT-NAC applies the same agent-based, host-firewall enforcement wherever the supported agent is deployed.
Outcome
The utility can maintain consistent admission controls without relying on local IT staff to configure each site's network.
Keep Exploring
Go Deeper
See how device compliance works
Check every laptop, workstation, and branch device against the bank’s security policy before it connects, using ZT-NAC.
Read the full solution →Retail
See how COSGrid provides solutions for Retail
Let’s see how COSGrid enables secure remote access and network visibility across stores, warehouses, and head office.
Explore the Industry →The Next Solution
See how audit visibility works
Keep a clear, searchable record of network activity so the bank can show auditors and regulators exactly what happened and when, with NetShield NDR.
Read the full solution →How it works in Energy & Utilities
An audit question arises
The security team needs to investigate which devices communicated with a billing system hosted in the head-office data centre.
Network activity is examined
NetShield NDR analyses available network traffic and flow metadata to identify communications between devices and systems.
Evidence is reviewed
The utility correlates available network records with access logs and other security evidence to investigate the activity.
Why it matters
Benefits for Energy & Utilities
Improved network visibility
Gain additional context about communication between regional offices, endpoints and data-centre systems.
Visibility into encrypted connections
Use available TLS handshake and flow metadata without decrypting traffic at this detection layer.
Support for incident investigations
Review the communication patterns of a potentially compromised device to help determine which systems it contacted.
Broader device coverage
Network-level visibility can include devices that do not run an endpoint agent, subject to the available traffic visibility and sensor deployment.
Use cases
Three site challenges. One secure network.
01
Reviewing access to billing systems
Scenario
An internal audit team needs to investigate communications with customer billing and data systems hosted in the utility's data centre.
What the solution does
NetShield NDR is designed to provide network-level evidence of device communications, which can be reviewed alongside available access records.
Outcome
The audit team has additional evidence for investigating network activity instead of relying exclusively on authentication records.
02
Investigating a compromised field laptop
Scenario
A laptop at a remote division office is found to be compromised, and the security team needs to establish which internal systems it contacted.
What the solution does
NetShield NDR analyses available network flows associated with the device, including encrypted connections through metadata.
Outcome
The team can use observed communication patterns to scope the incident and guide its investigation.
03
Monitoring devices without endpoint agents
Scenario
A regional office operates printers and older servers that cannot run the utility's endpoint security agent.
What the solution does
NetShield NDR is designed to provide visibility into network traffic involving those devices when the relevant traffic is visible to its sensors.
Outcome
The utility can investigate communications involving more than just agent-managed endpoints.
Keep Exploring
Go Deeper
See how audit visibility works
Keep a clear, searchable record of network activity so the bank can show auditors and regulators exactly what happened and when, with NetShield NDR.
Read the full solution →Retail
See how COSGrid provides solutions for Retail
Let’s see how COSGrid enables secure remote access and network visibility across stores, warehouses, and head office.
Explore the Industry →The Next Solution
See how In Country Security Control
Keep security functions, access logs, and traffic data inside the bank’s own environment and national borders, with deployment records ready for auditors.
Read the full solution →How it works in Energy & Utilities
Define access requirements
The utility identifies the applications employees and external vendors need, along with its requirements for access infrastructure and logs.
Deploy the appropriate access solution
SwiftZAccess provides browser-based access for authorised vendors, while MicroZAccess provides per-application access for supported managed devices.
Maintain visibility and control
The utility manages access policies and reviews available access records within the chosen deployment model.
Why it matters
Benefits for Energy & Utilities
Control over vendor access
Give external service providers access to specific authorised web applications without placing their devices on the utility's network.
Application-level employee access
Restrict managed-device users to the internal applications approved for their roles.
Deployment choice
Self-host SwiftZAccess in the utility's own environment where required, subject to the deployment architecture.
Support for governance reviews
Use deployment records and available access logs to help answer questions about where access infrastructure runs and where records are maintained.
Use cases
Three site challenges. One secure network.
01
Outsourced vendor access to an internal application
Scenario
An outsourced billing-support provider needs to use one internal web application from devices that the utility does not manage.
What the solution does
SwiftZAccess can be self-hosted in the utility's environment and configured to provide the vendor with browser access to the approved application only.
Outcome
The vendor can perform its assigned work without receiving broad network access or installing an agent on its device.
02
Field engineers accessing internal applications
Scenario
Engineers at regional offices and field locations need to reach approved utility applications from managed laptops.
What the solution does
MicroZAccess applies per-application access policies to authorised devices through its peer-routed mesh architecture.
Outcome
Engineers can reach the applications required for their work without being granted unrestricted network-level access.
03
Answering data-location and governance questions
Scenario
A utility's risk committee asks where its access infrastructure operates and where access records are maintained.
What the solution does
The utility reviews its deployment configuration and available records for the self-hosted SwiftZAccess components and its MicroZAccess deployment.
Outcome
The utility can document the actual deployment and data-handling arrangements. Regulatory compliance must be assessed against the applicable requirements and the complete deployment architecture.
Keep Exploring
Go Deeper
See how In Country Security Control works
Keep security functions, access logs, and traffic data inside the bank’s own environment and national borders, with deployment records ready for auditors.
Read the full solution →Retail
See how COSGrid provides solutions for Retail
Let’s see how COSGrid enables secure remote access and network visibility across stores, warehouses, and head office.
Explore the Industry →The Next Solution
See how device compliance works
Check every laptop, workstation, and branch device against the bank’s security policy before it connects, using ZT-NAC.
Read the full solution →
