
Identify application usage
A project team begins using a new task tracker or personal file-sharing service that has not been reviewed by IT.
Industries|IT/ITES
SaaS visibility and one-console control for delivery centres

A project team begins using a new task tracker or personal file-sharing service that has not been reviewed by IT.

SecureWebAccess records requests to recognised applications and enforces the configured allow or block policy for the relevant user group.

IT teams can review available application-usage logs and use them to understand which tools are accessed by different teams and devices.
Why it matters

Understand which recognised web applications users and devices are accessing.

Restrict client-dedicated teams to approved collaboration, ticketing and code-hosting tools.

Apply endpoint web policies to engineers working from home as well as those in delivery centres.

Export usage logs to Splunk, Elasticsearch or a CEF-compatible SIEM for investigation and review.
Use Cases
01
A services firm operates multiple delivery centres, but its security team cannot readily identify every SaaS application used across its projects ahead of an ISO 27001 surveillance audit.
SecureWebAccess records web-application requests matched against its named application lists. The available logs can be exported to the organisation’s SIEM for review by user, device, team and delivery centre.
The security team gains evidence of application usage without relying only on surveys or declarations from project managers.
02
A team dedicated to a client must use only the collaboration, ticketing and code-hosting tools approved under the client’s contract.
Configure an allowlist for the team’s group and a default block for other applications. A designated subgroup can retain access to a specific client partner platform where required.
The team works within the configured application policy, and the delivery head has clearer evidence of which applications are allowed or blocked.
03
Developers use consumer AI assistants while working with client code, and a desktop utility on an engineering laptop connects to an unapproved file-sharing service.
Application lists can be used to allow or block supported applications for relevant user groups. Request logs can identify the process associated with a connection, helping the endpoint team investigate unexpected application activity.
IT teams gain greater control over access to approved tools and can investigate connections made by unapproved desktop applications.
See how SaaS Visibility works
Discover which cloud apps staff are using and control access to them, so no unapproved SaaS tool handles customer data, with SecureWebAccess.
Read the full solution →See how COSGrid provides solutions for OT & ICS
Let’s see how COSGrid gives plant and industrial networks clear visibility and compliance-ready audit trails, without disrupting operations.
Explore the Industry →See MPLS Migration works
Move branches and ATMs off costly MPLS links to secure, centrally managed connectivity, with ReFleX WAN keeping banking traffic prioritised.
Read the full solution →
Delivery centres maintain separate consoles and duplicate user groups or application definitions across networking and security products.

Move selected functions onto COSGrid products managed through Guider, using shared policy objects where supported.

Update the relevant shared definitions centrally so supported products and delivery centres can use the same policy model.
Why it matters

Maintain consistent client-account policies across delivery centres where supported products share the relevant policy objects.

Reduce repeated configuration when a new client team or application is introduced.

Give network and security teams a common management console for supported COSGrid products.

Consolidate functions one product at a time, rather than requiring an immediate, large-scale migration.
Use Cases
01
A services firm wins a new client and distributes the project team across two delivery centres, each with its own access, firewall and web-security rules.
Define the client team’s group and application objects in Guider and reuse them across supported access, firewall and web policies.
Both centres can follow a consistent policy model for the client team, reducing duplicated configuration and policy drift.
02
A firm opens a delivery centre in a new city and needs network connectivity and security policies configured without repeatedly sending engineers on site.
ReFleX WAN supports provisioning of the centre’s edge appliance through Guider using zero-touch provisioning. The centre can adopt the organisation’s established configuration and policy model where supported.
The new delivery centre can be brought into the central management approach without building an entirely separate operational stack.
03
A group operates an IT services business and a BPO business, each requiring separate policy and data administration.
Z3 SASE and Guider support multi-tenancy, allowing business units to operate within separate tenant environments.
The group can manage separate business-unit environments through a common platform rather than maintaining unrelated management stacks.
See MPLS Migration works
Move branches and ATMs off costly MPLS links to secure, centrally managed connectivity, with ReFleX WAN keeping banking traffic prioritised.
Read the full solution →See how COSGrid provides solutions for OT & ICS
Let’s see how COSGrid gives plant and industrial networks clear visibility and compliance-ready audit trails, without disrupting operations.
Explore the Industry →See Branch Link Resilience Control
Keep branches online through link failures by switching traffic automatically across multiple connections, with ReFleX WAN.
Read the full solution →
Engineers report slow access to a client ticketing system, code repository or other work application.

The network team examines link latency, jitter, packet loss, traffic-flow records and relevant connection-path diagnostics where available.

Use the evidence to determine whether further investigation should focus on the delivery-centre network, WAN path, remote-access path or client application.
Why it matters

Give network, infrastructure and application teams evidence to support the next troubleshooting step.

Review delivery-centre link performance before attributing a slowdown to the client application.

Share relevant network evidence when the issue appears to be outside the services firm’s environment.

Use traffic-flow records to understand link utilisation and assess whether traffic was classified and prioritised as intended under the configured QoS policy.
Use Cases
01
A group of engineers at one delivery centre reports that a client’s ticketing application is slow, while engineers at other centres do not report the same issue.
The network team reviews ReFleX WAN link-quality measurements and available traffic-steering information for the time of the complaint.
The team can assess whether the delivery-centre WAN link is a likely contributor before escalating the issue to the client’s application team.
02
An engineer working from home accesses a client application through the COSGrid secure-access service and experiences recurring performance problems.
Where the device and platform provide the relevant connection-path diagnostics, administrators can review available evidence about the path between the endpoint, secure-access service and application.
The service desk can make a more informed decision about whether to investigate the home connection, secure-access path or client application.
03
Engineers at a delivery centre report that a client’s code repository becomes slow in the evening, when large builds and backups are running.
NetFlow/IPFIX records can help the network team understand what other traffic was using the delivery-centre link at the time. The team can review whether repository traffic was classified and prioritised as intended under the configured QoS policy.
The team can make evidence-based decisions about QoS or traffic steering, rather than immediately escalating the issue to the client. Application-side diagnostics may still be needed when the cause lies within the client’s application.
See MPLS Migration works
Move branches and ATMs off costly MPLS links to secure, centrally managed connectivity, with ReFleX WAN keeping banking traffic prioritised.
Read the full solution →See how COSGrid provides solutions for OT & ICS
Let’s see how COSGrid gives plant and industrial networks clear visibility and compliance-ready audit trails, without disrupting operations.
Explore the Industry →See Branch Link Resilience Control
Keep branches online through link failures by switching traffic automatically across multiple connections, with ReFleX WAN.
Read the full solution →Necessary Cookies
Performance Cookies
Targetting Cookies
Functional Cookies