Filter, secure, and raise awareness among Carcassonne City Hall employees and workstations.

 On the other hand, schools in the city, which have their own internet access, faced a different problem. The proxy provided by the French Ministry of Education, which was often slow and inadequate, blocked essential educational content and was therefore not deployed, creating a risk of non-compliance and vulnerability. An effective and easy-to-administer solution was therefore essential for these institutions.

In schools, Olfeo's "Cloud DNS" offering with PSI has made it possible to overcome the limitations of the French Ministry of Education's proxy. This solution, which outsources filtering management, has proven to be fast, efficient, and compliant with educational requirements. The decentralized approach has enabled schools to be protected without overburdening the town hall's technical teams. 

At the same time, the town hall has strengthened its cybersecurity with a multi-layered strategy in which Olfeo plays a key role by blocking malicious URLs, complementing firewalls and antivirus solutions. Finally, to integrate people into this strategy, the Olfeo Awareness solution was deployed to raise employee awareness of cybersecurity risks. This initiative was well received, and awareness campaigns, particularly on GDPR and phishing, generated real enthusiasm.

The first level of policy is no Internet access, which is entirely feasible for some biomedical equipment, for example. The second level is limited access with a whitelist allowing very restricted Internet access for the use of operating room devices, console packs, and other equipment of this type. The third level corresponds to the majority of the university hospital, which has what is known as "professional" access, where the various authorities have prioritized access related to the profession.

Another level that has been implemented is a category that could be described as VIP. This category responds to various specific and highly controlled use cases. It allows full access to commercial websites for buyers, for example. This category can allow specific access for psychologists who need to conduct research on sensitive websites, and this applies to various exceptions related to specific professions that can be found in a healthcare facility. The last category of users in place is very limited; it applies to developers who have more specific access needs, particularly for research and development needs that can be found in an institution such as the Poitiers University Hospital.

The daily reports generated by Olfeo also enable continuous monitoring of the network and facilitate proactive detection of anomalies. For schools, the DNS solution has enabled fast, compliant, and secure browsing, fully meeting educational needs.

In terms of cybersecurity, the multi-layered approach strengthens overall protection by effectively blocking threats at the web access stage. In addition, employee awareness training via Olfeo Awareness has not only reduced the risk of human error, but has also generated demand for more educational campaigns, demonstrating a real shift in awareness.

However, for this transition to be successful, it will be essential to promote close collaboration between different departments and encourage software publishers to change their practices. Despite these challenges, Dominique Amiel sees SSE as a natural and necessary evolution in response to current security issues.