Case Study - Escapo


Pharmaceutical Wholesaler Securely Connects with 125 Retail Outlets


The medical, pharmaceutical, and disability products wholesaler and distributor Escapo, founded in Mechelen, Belgium in 1964, supplies products to pharmacies, medical retailers, and hospitals.

The company's 125 customer locations, each with its own Linux servers with PC clients, are connected to Escapo's central infrastructure via a branch office VPN and Firebox® X Edge, which allows direct electronic payments from the cash registers over the Internet. Loyalty card balance records, database replication, and Internet and email traffic are all channeled centrally via the VPN to Mechelen in a process known as split tunneling.

The Challenge

IT department manager Karin Vercammen said, "It's essential that we offer our customers a secure network environment, first and foremost to safeguard sensitive patient information, but also to keep the total cost of ownership down. Before the WatchGuard® architecture was put in place, our helpdesk was almost overrun with workstations clogged up with spyware and adware. Today, these problems are the exception rather than the rule, even though the number of workstations has grown exponentially to over 600. This is exactly why we chose WatchGuard's powerful firewalls."

Escapo's online customers also use ViaNova and ViaCerta applications to place orders. "We receive orders via FTP, and then process these on our own systems," explains IT worker Tom Emmerechts. "We also give them feedback on products we can't supply, so they can source them elsewhere rather than letting their own customers down."

One unusual feature of Escapo's operations is its highly automated warehouse, with the vast majority of orders being picked by SDA, TDA, and OSR robots controlled by the SAP® enterprise resource planning solution.

The Watchguard® Solution

Managing firewalls used to entail a great deal of time and effort. "Making configuration decisions was very time-consuming, because we had to run configuration files on three firewalls," says Emmerechts. "Also, we wanted to connect medical supply stores to our network infrastructure - this had to be done securely, and in our previous set-up, that would have required a fourth firewall."

Escapo called in its IT consultant Eric Billiard of AG Solution, who carried out a detailed review of its requirements and recommended acquiring the WatchGuard extensible threat management (XTM) appliance.

Escapo diagram


In order to guarantee network availability, the company required appliance redundancy - what WatchGuard terms a "high-availability cluster." If the primary Firebox® fails, a secondary one quickly takes over, thus providing Escapo and its customers with optimum protection against spam, harmful websites, and other online threats at all times.

The choice of WatchGuard has allowed customers to use a cheaper Internet connection, and with 125 customers, this results in a considerable overall saving. Before the system was implemented, it was calculated that the savings could amount to more than €200,000 a year. "In this respect, Firebox X Edge's support for dynamic IP addresses is a big advantage," says Emmerechts. "WatchGuard XTM makes it possible to create stable, permanent VPN tunnels with dynamic IP addresses."

WatchGuard spamBlocker screenshot

WatchGuard spamBlocker stats: Practically no false positives and still 97% score on Spam/Bulk, without a difficult-to-maintain blacklist

Because WatchGuard uses recurrent pattern detection technology for protection, the quantity of spam that gets through is minimal. Emmerechts adds, "Tests showed that there were almost no false positives with WatchGuard. We didn't need to spend time creating long, difficult-to-maintain blacklists and whitelists, despite the fact that pharmacists commonly stock a number of products that generate a lot of spam, such as Viagra®."

Karin Vercammen

XTM has also been a good choice in terms of scalability. Because everything is based on a single appliance, licence costs do not increase as the number of users behind the firewall rises. Karin Vercammen adds, "The fact that WatchGuard was such a good value for the money obviously played an important part."



Download Printable Version

All Case Studies

Firebox X Edge's support for dynamic IP addresses is a big advantage. WatchGuard XTM makes it possible to create stable, permanent VPN tunnels with dynamic IP addresses.

Tom Emmerechts, IT Specialist



About WatchGuard

WatchGuard has deployed nearly a million integrated, multi-function threat management appliances worldwide. Our signature red boxes are architected to be the industry's smartest, fastest, and meanest security devices with every scanning engine running at full throttle. Why buy WatchGuard? Find out here.



  • Global Headquarters
    505 Fifth Avenue South, Suite 500
    Seattle, WA 98104, United States
  • Phone
    1.800.734.9905 US & Canada