Jenny Craig Simplifies Security - InformationWeek
12:31 PM

Jenny Craig Simplifies Security

Security for its 515 nationwide weight-control centers was being managed remotely, resulting in excessive IT maintenance and a lack of visibility.

Jenny Craig Inc. last summer embarked on a strategy to simplify its security management. Security for its 515 nationwide weight-control centers was being managed remotely, resulting in excessive IT maintenance and a lack of visibility into systemwide security issues.

The catalyst for the security upgrade was plans for a new data warehouse and a Web-based client-profiling application. Before the $280 million-a-year company felt comfortable going live with applications chock-full of sensitive customer data, it needed to ensure safeguards were in place to protect that data.

Jenny Craig turned to network security-gear-maker Fortinet Inc. and several of its security appliances to centralize and strengthen its security.

With the Fortinet deployment under way, the company's antivirus and security-rule updates are now automatic. If a security incident does occur, Jenny Craig's IT staff can spot it right away. "Before, we didn't see these things. Now we can look in one place and see what's happening in each of the centers," says Jeff Nelson, Jenny Craig's IT director.

Before it began its security-management overhaul, Jenny Craig had been using VPN software that was loaded on each PC and remotely dialed into the corporate office. Other security safeguards, such as antivirus and firewall software, were deployed at each of its retail centers.

But over time, updating security software at each location became a "high-maintenance operation," Nelson says. To make matters worse, Jenny Craig had been routing all of the Web traffic from its retail centers through a dedicated server located at its home office for Web-content filtering, partly to prevent employees from accessing inappropriate Web content. That approach created a bottleneck and slowed down Web traffic.

The company began deploying about 100 FortiGate-60 appliances at 100 of its centers. The appliances provide antivirus and Web-based malicious-content protection, as well as integrated firewall, content filtering, VPN, and network-intrusion detection and prevention capabilities.

Jenny Craig also deployed two FortiGate-800 systems at its headquarters for secure high availability, as well as two FortiGate-400 systems at its Web-hosting provider to authenticate employee access to all of its intranet applications. To centrally manage the devices, Jenny Craig uses Fortinet's FortiManager software. Another benefit: Employees no longer have to launch VPN client software to access corporate applications. The FortiGate-400s now authenticate all employees accessing the intranet. This has reduced the number of calls coming into the IT help desk. "People would call support wondering why they couldn't access applications, and many times it turned out they forgot to launch the client VPN software," Nelson says.

With 110 weight-control centers secured with Fortinet gateways, Nelson says the next step over coming months will be to deploy a security gateway at each of its remaining corporate centers and franchises. Since the installation of the FortiGates, Nelson says, "we've not been hit with any malicious software."

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
How Enterprises Are Attacking the IT Security Enterprise
How Enterprises Are Attacking the IT Security Enterprise
To learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Register for InformationWeek Newsletters
White Papers
Current Issue
2017 State of the Cloud Report
As the use of public cloud becomes a given, IT leaders must navigate the transition and advocate for management tools or architectures that allow them to realize the benefits they seek. Download this report to explore the issues and how to best leverage the cloud moving forward.
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
Join us for a roundup of the top stories on for the week of November 6, 2016. We'll be talking with the editors and correspondents who brought you the top stories of the week to get the "story behind the story."
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll