Office, warehouse and ERP traffic for a logistics company with twelve branches across Türkiye was unified on a single corporate VPN backbone.
The customer
A mid-sized company in domestic retail logistics, with twelve branches and an ERP server at head office. Two hundred and twenty active users across the branches, and roughly 18,000 ERP transactions a day.
The situation
Connectivity between branches had been built with separate VPN devices at each location and configurations that did not match one another. ERP access slowed through the day, and users were dropped from their sessions particularly during the hours when invoices were being issued. The IT team was managing different rules branch by branch, and there was no standard security policy.
At the same time, a suspected data leak in the previous year had pushed management towards making traffic between branches end-to-end encrypted and centrally monitorable.
What was done
Two Fortinet FortiGate firewalls were installed at the centre in high-availability mode, and enterprise-class VPN devices were shipped to every branch. Each branch was connected to the centre over IPsec site-to-site VPN, with an SSL-VPN profile defined for roaming users. Traffic policy became manageable from a single point through FortiManager.
ERP traffic was moved into a priority class under a QoS policy, and guest Wi-Fi and general internet were separated onto their own VLANs. A redundant internet line — xDSL with a mobile backup — was provisioned at each branch, giving SD-WAN-style load distribution: when the primary line drops, sessions move to the backup automatically.
On the security side, central log collection and SIEM-style correlation were commissioned, with automatic alert rules written for failed login attempts, suspicious geographic sign-ins and large data transfers. Every link is now followed around the clock by the Arbek alarm monitoring centre.
Results
- ERP access between branches accelerated over a single backbone; access complaints dropped off the agenda.
- Unplanned connectivity outages fell noticeably.
- The IT team’s per-branch management load fell as it moved onto one panel.
- Branch security policies were unified to a single standard, with full log records available for audit.