O-I Glass, Inc., is a $4.6B producer of distinctive glass bottles and jars; its buyer roster contains producers of Scotch whiskey, French wine, German cola, Spanish olive oil, Caribbean rum, New Zealand pale ale, smoothie photographs, juices, mineral water, milk, and yogurt.
Headquartered in Ohio, O-I had been working an MPLS community to attach its 25,000 staff unfold throughout 70 crops in 19 nations. However change was wanted, says CIO Rodney Masney, to maintain tempo with the migration of functions to the cloud, the shift of employees to dwelling workplaces, and the corporate’s efforts to re-imagine the glass manufacturing course of.
“The wants of the enterprise modified materially when it comes to pace, efficiency, connectivity and suppleness into our crops, and all of our places all over the world,” says Masney.
O-I made a decision to switch the MPLS community from AT&T with safe entry service edge (SASE) from Cato Networks. Masney stories that the transition has been quick, easy and price efficient—he estimates the financial savings at 20% to 30%.
The swap to SASE enabled O-I to extend WAN bandwidth by an element of three, which has translated into “higher interplay with cloud functions, a greater consumer expertise, and higher collaboration throughout the group.”
It additionally created the chance for O-I to deploy HoloLens, the Microsoft augmented actuality/combined actuality system, for distant engineering on the manufacturing facility flooring.
Drivers for utilizing SASE
Covid was a contributing issue, however not the principle driver for the transfer away from MPLS. When the pandemic hit, the corporate shortly ramped up what it calls “linked work” for workplace staff, who now have the choice to work from the workplace or from dwelling. “We prefer to say that folks have a alternative. They will work from wherever they do their finest daily,” says Masney.
Constructing a hybrid work setting on a world scale required a special mind-set in regards to the community, safety, and efficiency for workers wherever they’re positioned, says Masney.
However an much more vital driver was digital transformation. The aim was to ship elevated efficiency at decreased prices, whereas sustaining excessive requirements for safety. “Any IT skilled who isn’t mendacity awake at night time worrying about cybersecurity in all probability isn’t paying consideration,” Masney provides.
He describes the O-I strategy this fashion: “We’re not a cloud-first firm. We’re a cloud-where-it-makes-sense firm. Meaning monetary sense and sense for our enterprise. We use Azure providers the place it is smart, and SaaS the place it is smart, and on-premises the place it is smart.”
The biggest cloud workload is Workplace 365, says Masney, with 25,000 staff on Outlook, Groups, SharePoint, OneDrive, and so forth. The corporate is an SAP store for its core ERP programs, and makes use of a wide range of different SaaS functions, resembling SAP Success Elements for HR-related capabilities.
He provides, “That leads much more to a SASE resolution like Cato the place we are able to leverage their capabilities whether or not issues are on or off premise, or your persons are on or off premise.”
Whereas glass making is an historic artwork, fashionable glass container manufacturing is a extremely subtle, automated course of. Glass is discovering renewed recognition as a sustainable, recyclable different to plastic, and O-I’s technique is to drive progress by transitioning to a modular glass manufacturing line that gives the flexibleness and agility wanted to shortly fill customized orders.
How O-I Glass selected a SASE vendor
Masney stated his crew carried out proof of ideas with a number of SASE suppliers. He was searching for one that would ship the service shortly, that would guarantee safety on the community edge, and that would result in price financial savings. He was additionally searching for a vendor whose technique and imaginative and prescient matched O-I’s long-term objectives.
SASE is a service that encompasses a number of applied sciences, resembling SD-WAN, Zero Belief Community Entry (ZTNA), firewall-as-a-service (FWaaS), cloud-access safety dealer (CASB), and safe net gateway (SWG). Masney says the Cato providing checks all of these bins.
His preliminary estimate was that the worldwide rollout would take 12 to 18 months, however O-I used to be in a position to deploy at most websites inside six months. His crew began transitioning from AT&T’s VPN service in July and accomplished that a part of the venture by September. “I’m a go-fast type of man. This know-how actually helps you speed up deployment,” says Masney.
Masney employed a third-party service supplier to put in Cato SD-WAN {hardware} (which Cato refers to as sockets) at O-I places all over the world. Masney stated he ordered two home equipment per website for redundancy. That service supplier labored with Masney’s inside crew and Cato to verify every thing was correctly arrange and documented.
As a part of the transition from MPLS to SASE, O-I wanted to seek out an ISP to ship last-mile connectivity between its crops and Cato’s cloud. Apparently, Masney was in a position to proceed to work with AT&T, which now offers that high-bandwidth web transport in most places, besides the place O-I had pre-existing contracts with native ISPs.
“We’ve maintained an excellent relationship with AT&T,” says Masney. “SASE options are the way forward for how firms are going to work, whether or not it’s Cato or their opponents. However we managed it very professionally with AT&T and so they nonetheless have the chance to earn enterprise as a result of there are different issues of their portfolio that we are able to leverage.” O-I makes use of AT&T for mounted line voice, cell and different providers.
Masney provides that his general technique is to have robust relationships with a restricted variety of strategic distributors. And he hasn’t unplugged all of his MPLS hyperlinks. In some key places, MPLS is getting used to offer redundancy for mission-critical visitors.
The migration is now “90-plus p.c” accomplished. And within the remaining circumstances, he’s simply ready for the high-bandwidth web hyperlink to be arrange. “It’s not a Cato limitation, it’s bandwidth availability,” he explains.
SASE allows augmented-reality headsets
Masney explored augmented actuality a number of years in the past when Google Glass first got here out however says O-I didn’t have the infrastructure to help it. “With the assistance of Cato, we’ve enabled ourselves to do issues we couldn’t have finished previously.”
At present, O-I is utilizing HoloLens headsets to attach engineers who may be positioned at completely different crops or on completely different continents. “You might need an engineer in Toledo, Ohio, serving to somebody in Europe in a producing facility,” he says.
Every engineer could be sporting a headset and the on-site engineer in Europe would deploy the HoloLens front-facing digital camera to ship real-time video to the engineer in Ohio. The supporting engineer is then ready see what the opposite engineer is seeing and present real-time steering.
“Previously there would have been telephone calls or journey to the placement, which is time consuming and costly. This helps to keep away from delays in time to decision, says Masney.
Masney provides, “We’re utilizing Wi-Fi in our crops, then permitting video streams to go throughout the WAN to make use of on the opposite finish. It’s essential that they will see issues in actual time. Primarily based on our earlier know-how it was troublesome to do. [SASE] helps allow us in a means we wouldn’t have been in a position to do very readily or affordably by means of conventional telecom.”
The subsequent step is to increase the usage of HoloLens for functions like plant upkeep, simulations, and coaching. One vital issue that is available in play in a producing situation is the security of the employee sporting a headset. “We need to ensure we don’t impede the view of an worker in a producing plant the place plenty of issues are shifting unexpectedly,” explains Masney. However past that, “I see virtually limitless potential of that know-how,” he says.
SASE advantages
Masney cites a number of advantages related to the transfer to SASE. By shifting his WAN expenditures from MPLS to web bandwidth, he was ready not solely to spice up general bandwidth, but additionally create redundancy and suppleness. The Cato SD-WAN equipment can hook up with the web, to MPLS, and to mobile networks. Plus, he can extra readily increase bandwidth, if wanted.
Masney provides, “I see this as enabling different issues we have to do on the cybersecurity entrance to drive detection, identification, response and remediation within the occasion of a cybersecurity occasion. It liberates you to consider issues that you are able to do that had been traditionally a barrier.”
Along with fundamental SASE, O-I additionally purchased a last-mile service from Cato wherein the seller assumes accountability for monitoring and troubleshooting efficiency hiccups on the ISP’s finish. For instance, if there’s an issue, Cato would be the one opening hassle tickets with the provider and following by means of to verify the problem is resolved.
The SASE deployment is simply ending up, so Masney doesn’t have any metrics but on how the service will liberate his inside staffers to sort out different tasks, however he says, “I imagine we are going to see a chance to liberate capability to do different vital tasks that want our consideration.”
All in all, “It’s a reasonably distinctive end result on the finish of the day,” says Masney.
Copyright © 2023 IDG Communications, Inc.
