Executive Summary

Comcast Corporation required enhanced support and maintenance for its RSA Adaptive Authentication Manager, focusing on continuous monitoring, rules engine optimization, and user experience improvements. Zephon, as a subcontractor under Cognizant Technologies, delivered a resilient, automated, and user-friendly authentication system that reduced false positives, improved log management, and empowered users to self-maintain their multi-factor authentication (MFA) settings.

Key Challenges

• Authentication Security Risks: Need to optimize risk-based authentication and cyber threat hunting

• Manual System Recovery: No automated fail over mechanisms for authentication service outages

• False Positives in Rules Engine: High volume of incorrect risk-based authentication denials

• User Experience Gaps: No self-service functionality for managing MFA methods

  
  

Solution Delivered

Zephon provided strategic enhancements, automation, and continuous monitoring, including:

• Disaster Recovery & Load Balancing Architecture: Documented existing and future system architecture for Geo-based load balancing and disaster recovery.

• Performance & Reliability Automation: Developed utilities to auto-start failed instances and implement automated log archiving and rotation.

• Risk-Based Authentication Optimization: Tuned rules engine to significantly reduce false positives while improving cyber threat hunting capabilities.

• Identity Threat Monitoring: Analyzed potential credential breaches and integrated findings with SOC for faster incident response.

• MFA Self-Service Portal: Developed a custom self-service application, allowing users to manage MFA methods, integrated with Azure AD Conditional Access.

  
  

Results & Business Impact

• Automated System Recovery: Authentication services now auto-restart on failure, reducing downtime.

• Improved Authentication Accuracy: False positives drastically reduced, improving the user experience while maintaining security.

• Enhanced Security & Compliance: Authentication and authorization logs now available for eDiscovery requests and audits.

• User Empowerment & Productivity: Enterprise users can now self-manage their MFA methods, reducing IT support dependency.

  
  

Why Zephon?

Zephon specializes in hassle-free cybersecurity solutions that reduce operational burdens, improve security, and optimize authentication experiences. Our expertise in adaptive authentication, automation, and security monitoring ensures higher availability, reduced risk, and increased efficiency.

Technical Approach & Implementation

Security & Authentication Enhancements

• Optimized Risk-Based Authentication: Reduced authentication disruptions by fine-tuning RSA Adaptive Authentication rules engine.

• Automated Failover & Recovery: Developed scripts for auto-restarting failed authentication services and log rotation automation.

• Enhanced Identity & Threat Analytics: Proactively identified risky authentications and reported potential credential breaches.

  
  

User Experience & Compliance Improvements

• Self-Service MFA Management: Developed and integrated a custom MFA self-service portal with Azure AD Conditional Access.

• Authentication & Authorization Logging: Enabled secure storage and retrieval of logs for eDiscovery and audit compliance.

  
  

Methodologies & Tools

• Jira | RSA Adaptive Authentication Manager | Bash Scripts | Tomcat | Java | Spring Boot | Azure AD Conditional Access

  
  

Conclusion

Zephon successfully enhanced Comcast’s authentication infrastructure, improved security monitoring, and automated system recovery, ensuring higher security, better user experience, and greater operational resilience. Our solutions enabled faster response to authentication threats, streamlined identity management, and minimized IT overhead.

For organizations seeking to optimize authentication security, automate risk management, and improve user experience, Zephon provides proven expertise in cybersecurity automation and resilience.

Hassle-Free Cyber. Delivered.