This customer case study describes how a leading law firm moved its ERP to a new cloud in Vietnam and used Safous to give its finance team and ERP administrators secure access from day one. It is for IT and security teams that must open a business application to daily users and administrators without a VPN or internet exposure, and it covers the challenge, the solution and the results.
Download the PDF
Challenge
- Hard cutover deadline: the old remote access ended at migration, so new access had to work on day one.
- The ERP could not be exposed online, and VPN clients were too much for finance staff.
- Two kinds of access, one standard: finance staff use the ERP daily, while administrators need privileged access for maintenance.
- Daily ERP work needed responsive connections for users in Vietnam.
Solution
- The Safous AppGateway was up in under 10 minutes, with no network redesign and no hardware.
- The outbound-only AppGateway keeps the ERP invisible from the internet, and staff simply use a browser.
- Both groups sign in with MFA via the firm's identity provider and SSO; administrator sessions are controlled and logged.
- A Safous PoP in Vietnam keeps sessions local and fast, close to both users and the ERP.
Results
- No VPN to build, patch or support.
- No ERP exposure, and nothing to scan.
- One browser sign-in for finance staff.
- Administrator maintenance is controlled and audit-ready.
Frequently Asked Questions
Why did the law firm choose Safous?
Its ERP moved to a new cloud in Vietnam with a hard cutover deadline. It needed secure access for finance staff and administrators from day one, without exposing the ERP online or rolling out VPN clients.
How does access to the ERP work?
Users sign in from a browser with MFA via the firm's identity provider. Safous checks policy and connects through its Vietnam PoP and an outbound-only AppGateway, then signs users in to the ERP with SSO. Every session is logged.
Learn more: Privileged remote access guide, Safous Privileged Remote Access at a glance.
.png)
