Background:

The Non-Profit Association of the Franciscan Sisters of Olpe (GFO) operates over 45 facilities in North Rhine-Westphalia and Rhineland-Palatinate with approximately 10,000 employees, including 13 hospitals. The IT infrastructure includes approximately 5,000 PCs and thin clients, 1,500 networked medical devices, and 3,000 other systems. Securing this heterogeneous network while complying with KRITIS requirements was a key challenge for the GFO ITS IT team.

Challenge:

• Open hospital environments with physically accessible network jacks
• Integration and security of sensitive medical devices during ongoing hospital operations
• Secure implementation of BYOD (for staff and patients)
• Protection of highly sensitive patient data against unauthorized access
• Future-proof VLAN management for dynamic segmentation
• Cross-site access control without interrupting 24/7 operations

Solution:

In collaboration with its IT partner, GORDION Data Systems Technology GmbH, GFO opted for the ARP-GUARD network access control solution from ISL GmbH:

• Dynamic VLAN assignment for known device groups, such as mobile diagnostic equipment
• Automated detection and secure isolation of unknown devices
• Supplementary fingerprinting for devices without an 802.1X certificate
• VLAN portability for mobile work across locations
• Integration of VoIP and Wi-Fi systems via tagged VLANs
• Centralized management and automatic network segmentation via sensor architecture

Result:

• Automated VLAN switching per device group – without manual port configuration
• Reduced administrative overhead and increased efficiency in network maintenance
• Enhanced network security – only authorized devices are granted access
• Quick identification of end devices via graphical network topology
• Seamless integration into ongoing operations – no disruption to the hospital’s 24/7 routine

• Secure BYOD usage and simplified mobile working for employees
   

   

Conclusion:

With ARP-GUARD, GFO was able to implement a cost-effective, scalable, and KRITIS-compliant security solution that not only enhances the security of its IT infrastructure but also significantly reduces operational overhead. Thanks to close collaboration with GORDION, the project was implemented smoothly across all locations—laying a solid foundation for future digital development in the healthcare sector.