Rapid7 > Case Studies > Nexpose is a “Tireless Force Multiplier” at the University of Mary Washington

Nexpose is a “Tireless Force Multiplier” at the University of Mary Washington

Customer Company Size

Large Corporate

Region

America

Country

United States

Product

Rapid7 Nexpose

Tech Stack

Virtual Machines

Implementation Scale

Enterprise-wide Deployment

Impact Metrics

Customer Satisfaction
Digital Expertise
Productivity Improvements

Technology Category

Cybersecurity & Privacy - Network Security
Cybersecurity & Privacy - Security Compliance

Applicable Industries

Education

Applicable Functions

Business Operation

Use Cases

Intrusion Detection Systems
Regulatory Compliance Monitoring
Remote Asset Management

Services

System Integration
Training

About The Customer

The University of Mary Washington (UMW) is a higher education institution with a robust IT infrastructure. Clay Calvert, the Director of IT Security, is one of the 40 members of the IT staff. He is responsible for overseeing IT security issues, adhering to state and PCI guidelines, and conducting security awareness training. The university's IT department began using Rapid7 Nexpose in April 2007 to enhance the security of its extensive computing infrastructure. Calvert, being the sole person focused entirely on security, finds Nexpose invaluable for automating tedious tasks and providing insights that would otherwise require specialized skills.

The Challenge

University of Mary Washington needed to prove their compliance with PCI DSS and state security requirements. The IT department needed to help safeguard its extensive computing infrastructure.

The Solution

The University of Mary Washington implemented Rapid7 Nexpose to streamline their IT security operations. Rapid7 provided a virtual machine to get started, which was easy to set up and began delivering useful information within the first day. Nexpose automates many of the repetitive and time-consuming tasks, such as looking for sequel injections or cross-site scripting, which would otherwise take hours. The tool also allows for granular permission assignments, enabling system and database administrators, as well as the university's webmaster, to scan only the systems they are responsible for. An account was also created for the IT auditor, allowing them to scan all systems without changing settings.

Operational Impact

Rapid7 Nexpose significantly reduced the time spent on repetitive security tasks, allowing the IT staff to focus on more critical issues.
The tool's ability to granularly assign permissions ensured that only authorized personnel could scan specific systems, enhancing security and accountability.
Nexpose's ease of use and quick setup allowed the IT department to start benefiting from its features almost immediately.
The university plans to use Nexpose for their upcoming Microsoft Active Directory migration, highlighting its versatility and reliability.
Calvert uses Nexpose for both penetration testing and regular vulnerability testing, demonstrating its multifunctional capabilities.