Carrier Clinic's published case describes a behavioral healthcare provider using managed Network Box UTM to operate different internet-access policies and support a small IT team without dedicated security specialists.
Historical context: the deployment began in 2006, and Carrier Clinic authorized the case study in January 2012. The document describes the organization, systems, and outcomes at that time.
The problem: different access needs and limited security staffing
The clinic needed different access levels for staff, residents, and students. Its earlier device was difficult to manage and did not provide the content-filtering experience the team needed.
The managed deployment
Network Box supplied a managed UTM appliance with filtering, firewall, intrusion detection and prevention, and malware and spam controls. The clinic requested policy changes through the support team rather than operating each function itself.
Examples from the original case
- When a vendor changed IP addresses, the clinic needed its VPN configuration changed outside business hours. The case describes Network Box carrying out the requested change at 10 p.m.
- The clinic used a restrictive access model for non-privileged users, with permissions matched to its user groups.
- The network administrator described responsive support and visibility into blocked intrusion attempts and email activity.
The administrator explicitly distinguished observed blocked activity from damage that might otherwise have occurred. This case does not quantify avoided losses or establish a current compliance outcome.
Applying the operating lesson today
Define access groups, approved vendor paths, maintenance windows, and the owner who accepts each change. Clinical-system constraints and the handling of ePHI require explicit scoping for the current environment.
Read the original Carrier Clinic case study (PDF).
Explore managed cybersecurity for healthcare, Secure Web Gateway, and HIPAA and HITECH security support.