Defining SASE at the Largest Consumer Electronics Chain in the Nordics

Events like Black Friday are digital battlegrounds for retail IT teams with outdated IT systems. Legacy servers groan under unanticipated loads, inventory systems trail woefully behind sales, and point-of-sale (POS) stations lock up at critical moments. IT teams rush through war rooms, battling cascading failures across brittle infrastructure never intended to handle such extreme loads.

Elkjøp is the Nordics' largest consumer electronics retailer. with over 420 stores and 10,000 employees in four countries. As a market leader, Elkjøp must deliver seamless and consistent digital experiences, secure transactions, and fast operations, particularly during peak shopping seasons like Black Friday.

Modernizing IT to Keep Pace with Business Demands

Elkjøp's legacy IT infrastructure was impeding the business. The company was experiencing a severe IT infrastructure problem that prevented it from scaling, securing its operations, and facilitating modern retail needs. The classic hub-and-spoke MPLS network wasn't flexible enough to support our cloud-based retail operations.

Security was another major concern. Elkjøp manages over 860 security appliances across multiple vendors, which leads to fragmented security policies, operational inefficiencies, increased risk exposure, and slow response to threats and scalability. Our IT team grappled with other challenges as well, including:

● Slow network changes and lack of agility: IT wanted to build a network capable of keeping pace with rapid market changes and periods of high traffic. But with a legacy infrastructure, the team struggled to implement new services or security policies efficiently, which delayed innovation and threatened security. Simple network modifications took six weeks due to a lack of vendor coordination, ultimately slowing business operations. The inability to scale up or down easily made it difficult to adapt to seasonal demand variations.

● Legacy MPLS infrastructure hindered cloud adoption: IT built a cloud-based POS system utilizing cloud infrastructure, Kubernetes, Internet connectivity, and multi-factor authentication that can run on personal devices. However, the legacy hub-and-spoke MPLS network was inflexible and optimized for the cloud. High maintenance costs and low bandwidth made it difficult to support cloud-based workloads like Kubernetes-based POS systems.

● Fragmented security stack caused operational issues: Elkjøp managed security devices from various vendors, including firewalls, load balancers, and storage infrastructure, leading to latency in troubleshooting and policy deployment. Inter-vendor collaboration for network upgrades and security patches was slow and inefficient. Furthermore, monitoring security threats across the entire infrastructure was challenging due to the absence of centralized visibility.

● Peak season challenges: Black Friday and holiday shopping seasons require extensive pre-season audits to maintain network stability. However, the lack of centralized controls made emergency visits to the stores unavoidable. As a result, IT personnel had to remain on call 24/7 and travel to stores to perform emergency repairs whenever network breakdowns occurred.

Realizing a need for agility, security, and efficiency in operations, Elkjøp sought a next-generation cloud-based solution. We selected a SASE cloud platform to shift from a network and security stack to a cloud-native, software-defined platform. Cato's convergence of networking and security on a single, integrated platform appealed to our requirements.

With a phased rollout to over 420 stores, Elkjøp's integration was rapid and trouble-free. Pre-configured SASE sockets were shipped directly to our stores, allowing non-IT personnel to set up connectivity with minimal technical input. The roll-out was zero-touch, with store managers performing the installation by simply following quick setup instructions, supported remotely by IT. The stores connected to Cato's private network via encrypted and secure tunnels. Elkjøp migrated all of its infrastructure within a few months without disrupting business.

Key Benefits in Choosing SASE:

If you are unfamiliar with SASE, it is a decentralized model sometimes referred to as a cybersecurity “mesh” and expected to reach $6.63 billion by 2032.

● Instant network changes: Network modifications now occur in seconds instead of weeks, enabling IT teams to respond to business needs in real time. Dynamic scalability ensures seamless operations during peak seasons.

● Unified security: The SASE platform consolidates next-gen firewalls (NGFW), intrusion prevention, TLS and other tools, reducing complexity and strengthening security posture with encrypted traffic inspection.

● Centralized control: The single-vendor SASE approach eliminates the need for multiple security and networking providers. IT teams can monitor and respond to threats with centralized visibility and management. Security policies are implemented faster, and networks can be scaled without vendor delays.

● Stress-free Black Friday: Built-in failover mechanisms and secondary link testing eliminated half of pre-season readiness checks, reducing IT workloads and operational stress. Automated failover and traffic re-routing ensured uninterrupted services during peak shopping times. The ability to centrally manage all locations eliminated the need for emergency store visits during rush season.

● Improved remote access: SASE-based remote access enables secure remote connectivity for employees. Developers now enjoy smooth, secure network access, which boosts efficiency and collaboration.

A Future-Proof Partnership

The transition from our old systems to a SASE cloud has been a game changer for Elkjøp, setting the company up for long-term growth in the dynamic retail market. Elkjøp found the operational speed and resilience it needed and can now spend more resources on innovation and refining consumer products.

Featured

  • Accelerating a Pathway

    There is a new trend touting the transformational qualities of AI’s ability to deliver actionable data and predictive analysis that in many instances, seems to be a bit of an overpromise. The reality is that very few solutions in the cyber-physical security (CPS) space live up to this high expectation with the one exception being the new generation of Physical Identity and Access Management (PIAM) software – herein recategorized as PIAM+. Read Now

  • Protecting Your Zones

    It is game day. You can feel the crowd’s energy. In the parking lot. At the gate. In the stadium. On the concourse. Fans are eager to party. Food and merchandise vendors ready themselves for the rush. Read Now

  • Street Smarts

    The ongoing acceptance of AI and advanced data analytics has allowed surveillance camera technology to shift from being a tactical tool to a strategic business solution. Combining traditional surveillance technology with AI-based data-driven insights can streamline transportation systems, enhance traffic management, improve situational awareness, optimize resource allocation and streamline emergency response procedures. Read Now

  • The Progress of Biometrics

  • Next-Gen AI for Smart Cities

    The future of smart city technology is not being shaped in Silicon Valley — it is taking root in Dubuque, Iowa. With a population of about 60,000, this mid-sized city has become a live testbed for AI-driven traffic management thanks to a unique public-private collaboration led by Milestone Systems. Project Hafnia demonstrates how cities can transform urban mobility and safety through Responsible Technology—without costly infrastructure overhauls. Read Now

New Products

  • FEP GameChanger

    FEP GameChanger

    Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction.

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file.