Customer Success Stories

The Challenge: Supporting UN Operations in High-Risk Environments Worldwide

UNDSS coordinates security for UN operations in some of the world's most challenging and dangerous environments, from peacekeeping missions to humanitarian assistance programs. Their global mandate requires reliable communications across diverse operational theaters, each presenting unique connectivity and security challenges:

• Global UN Mandate: Supporting UN operations spanning 193+ member countries with diverse regulatory environments, carrier relationships, and security requirements.
• Conflict Zone Communications: Ensuring reliable, secure communications in active conflict areas like Gaza and Ukraine where traditional infrastructure is damaged, unreliable, or potentially compromised.
• Peacekeeping Operations: Providing connectivity for UN peacekeepers and personnel in remote areas where cellular infrastructure may not exist or be trustworthy.
• Security Imperatives: UN operations require the highest levels of communication security, with protection from potential state-level surveillance and interference.
• Rapid Deployment Requirements: Emergency situations requiring immediate secure communication capabilities for crisis response and personnel safety.
• Multi-Agency Coordination: Need for seamless communication between different UN agencies, peacekeeping forces, and humanitarian partners operating in the same regions.

The Solution: UN-Grade Hybrid EVNO/Private Network Architecture

Pente Networks designed a comprehensive hybrid solution specifically architected for UN global operations, seamlessly integrating global EVNO capabilities with rapid-deployment private networks to provide UNDSS with unprecedented operational flexibility and security coverage:

• UN-Scale EVNO Platform: Pente's SaaS-based EVNO suite providing global roaming capabilities across 180+ countries with wholesale rates, supporting the full scope of UN operations worldwide with unified SIM management.
• Ruggedized Edge Deployment: Military-grade, compact HyperCore EdgeMini units pre-configured for rapid deployment in hostile environments, creating secure private LTE/5G networks for UN personnel and peacekeeping operations.
• Unified UN Network Identity: Single SIM cards and network profiles enabling seamless handoffs between global roaming (EVNO) and private network zones without service interruption, critical for mobile UN operations.
• Multi-Modal Backhaul: Comprehensive backhaul options including satellite links, terrestrial internet, and mesh networking for complete coverage in any operational environment.
• UN-Grade Security Framework: Military-level end-to-end encryption, private APNs, zero-trust architecture, and secure tunnel establishment ensuring all UN communications remain protected from state-level threats.
• Global Command & Control: Centralized HyperCore Control Center providing UN administrators with unified management of both EVNO subscriptions and distributed private network deployments across all UN missions worldwide.

The Deployment: Supporting UN Global Operations

• Global UN EVNO Platform: Established comprehensive EVNO platform with carrier relationships across 193 UN member countries, providing UN personnel with secure global roaming capabilities for all peacekeeping and humanitarian missions.
• Conflict Zone Private Networks: Deployed ruggedized private network extensions in active conflict zones including Gaza and Ukraine, creating secure UN communication bubbles independent of local infrastructure with HelpNGO as implementation partner.
• Peacekeeping Mission Support: Integrated rapid-deployment Network-in-a-Box solutions into UN peacekeeping logistics, enabling immediate secure communications establishment for new missions within hours.
• Seamless UN Operations: UN personnel moving between different operational theaters experience automatic transitions from private networks to global roaming without losing secure connectivity or requiring device changes.
• Multi-Agency Integration: Enabled seamless communication coordination between different UN agencies, peacekeeping forces, and humanitarian partners operating in shared regions.

Results & Benefits: Transforming UN Global Communications

• Unified UN Operations: Single platform managing secure connectivity across all UN operational environments from headquarters to the most remote conflict zones.
• Enhanced Mission Security: Military-grade security ensuring sensitive UN communications, peacekeeping coordination, and diplomatic operations remain protected from state-level surveillance and interference.
• Cost Optimization for UN Budget: Significant reduction in global connectivity costs through EVNO wholesale rates, optimizing UN operational budgets across all missions and agencies.
• Rapid Mission Deployment: Capability to establish secure communications infrastructure for new UN missions anywhere in the world within hours, critical for crisis response and peacekeeping operations.
• Operational Continuity: Seamless secure connectivity ensuring UN personnel maintain communication regardless of local infrastructure conditions or geopolitical situations.
• Scalable UN Architecture: Solution scales from small diplomatic missions to large-scale multi-country peacekeeping operations using the same secure technology platform.
• Multi-Agency Coordination: Enhanced communication coordination between UN agencies, peacekeeping forces, and humanitarian partners across shared operational areas.

The Challenge: Communication Breakdown in Crisis

The 2025 Los Angeles wildfires presented an unprecedented challenge, not only threatening lives and property but also crippling essential communication lines. As the fires spread, key challenges emerged:

• Infrastructure Damage: Wildfires destroyed or damaged public cellular towers, fiber optic cables, and power lines, creating vast communication blackouts.
• Network Congestion: Remaining public networks in adjacent areas faced extreme congestion from emergency traffic and public use, rendering them unreliable for mission-critical coordination.
• Need for Speed: Establishing reliable communication hubs quickly was paramount for coordinating rescue operations, resource allocation, medical support, and volunteer efforts.
• Operational Complexity: Field teams needed communication solutions that were easy to set up and operate with minimal technical expertise in high-stress environments.

The Solution: Pente Network in a Box for Rapid Response

HelpNGO partnered with Pente Networks to utilize the 'Network in a Box' – a pre-configured, all-in-one Private LTE/5G solution designed for exactly these types of rapid deployment scenarios.

• Pre-Configured Kits: Complete packages containing Pente HyperCore EdgeMini, LTE/5G radios, and pre-provisioned SIMs.
• Self-Contained Operation: Independent private cellular networks requiring only power and optional backhaul.
• IT-Centric Management: Remote monitoring and management via the HyperCore Cloud Control Center once backhaul was established.
• Rapid Setup: Field-deployable within hours by non-technical personnel.
• Flexible Connectivity: Support for local and wide-area communication with satellite backhaul options.

The Deployment: Hours, Not Days

• Transport: Compact kits easily transported to strategic locations like incident command posts and evacuation shelters.
• Rapid Setup: Field teams could deploy basic systems in under an hour without specialized training.
• Instant Network Activation: Immediate local Private LTE/5G network establishment upon power-up.
• Flexible Backhaul: Connection to available satellite terminals or surviving infrastructure for extended reach.

Results & Benefits: Restoring Critical Communications

• Reliable Command & Control: Stable voice and data connectivity for coordination centers.
• Enhanced Field Operations: Reliable data access for mapping and situational awareness applications.
• Connectivity for Responders & Evacuees: Essential communication for first responders and limited access for evacuees.
• Ease of Use: Pre-configured nature allowed focus on primary mission without technical complexity.
• Security: Ensured sensitive operational communications remained on secure, private networks.
• Scalability: Additional kits deployed as needed to expand coverage.

The Challenge: Bridging the IT and Telecom Security Divide

Enterprises rely heavily on established IT security practices: Active Directory for user access, VLANs for network segmentation, and firewalls for policy enforcement based on IP addresses and applications. However, introducing 4G/5G devices via private cellular networks introduces complexities:

• Identity Misalignment: Cellular networks identify devices primarily by SIM (IMSI) and hardware (IMEI), which don't directly map to enterprise user identities (Active Directory) or IP-based network segments.
• Visibility Gaps: Standard IT tools often lack visibility into cellular-specific attributes, making it difficult to apply consistent security policies to mobile devices.
• Segmentation Risks: Mobile devices authenticated solely by the cellular core might gain unintended access to sensitive network segments, potentially bypassing existing IT segmentation rules.
• Increased Attack Surface: Adding mobile devices without a cohesive security strategy expands the potential attack surface and can inadvertently degrade overall security posture.
• Operational Complexity: Managing security policies across separate IT and cellular domains increases cost and complexity.

The Solution: Unified Zero Trust with Pente HyperCore & Palo Alto Networks NGFW

Pente Networks and Palo Alto Networks have collaborated to deliver an integrated solution that bridges the gap between IT and private cellular security:

• Pente HyperCore Platform: Provides the private mobile core (EPC/5GC) and orchestration layer, designed 'with IT in mind.' It manages cellular connectivity, SIM/device identities (IMSI/IMEI), and maps mobile 'things' to specific enterprise network segments (VLANs).
• Palo Alto Networks Next-Generation Firewall (NGFW): Delivers ML-powered threat prevention, inspecting all traffic (including applications, threats, content) and tying it to the user and device. Crucially, it integrates with Pente to understand and incorporate 5G-native identities (IMSI/IMEI) into security policies.
• Palo Alto Networks IoT Security: Provides discovery, assessment, segmentation, and threat protection specifically for IoT and OT devices connecting via the private cellular network.
• Unified Visibility & Control: The NGFW gains visibility into traffic and its associated identities – not just IP address, but also IMSI, IMEI, user identity, application (App-ID), and device type.
• Granular Policy Application: Administrators can create comprehensive Zero Trust security policies leveraging all identity layers.

Use Cases & Benefits

• True Zero Trust for Private Wireless: Achieve granular, enterprise-level administrative control and visibility with security policies based on cellular subscription (IMSI) and device hardware (IMEI).
• Enhanced IoT/OT Visibility and Security: Gain deep visibility into IoT/OT devices connecting via private cellular, with device identification, risk assessment, and behavioral anomaly detection.
• Unified Security Posture: Apply consistent security policies across both wired and private wireless networks from a single platform.
• Complete Traffic Visibility: Gain insight into application usage and user activity for all devices on the private mobile network.

Key Benefits

• Unified Security Posture: Apply consistent security policies across both wired and private wireless networks.
• Simplified Management: Manage mobile connectivity like other IT resources using Pente's IT-centric approach.
• Secure Segmentation: Reliably enforce existing enterprise network segmentation for mobile devices.
• Complete Traffic Visibility: Gain insight into application usage and user activity for all devices.
• Reduced Risk: Minimize security risks associated with integrating mobile and IoT/OT devices.

The Challenge: Unpredictable Connectivity for Mission-Critical Broadcasts

Live news gathering and event broadcasting demand stable, high-throughput connectivity. However, crews often operate in locations where network conditions are unpredictable:

• Public Network Congestion: Large crowds at conventions, sporting events, or breaking news scenes overwhelm public cellular towers, leading to packet loss, buffering, and degraded video quality.
• Lack of Prioritization: Critical live feeds compete with general public data traffic, with no guarantee of bandwidth or low latency.
• Coverage Limitations: Remote locations or specific venues might have poor or non-existent public cellular coverage.
• Operational Complexity: Managing multiple SIMs from various public carriers for bonding units can be complex and costly, without ensuring performance.

The Solution: Pente Private Wireless Networks Integrated with LiveU

Pente Networks provides rapidly deployable, dedicated Private LTE/5G networks, creating a reliable 'connectivity bubble' specifically for broadcasting operations.

• Pente HyperCore Platform: The core of the solution, utilizing the SaaS-based HyperCore Cloud Control Center for management and often deploying the compact HyperCore EdgeMini on-location for local core processing and resilience.
• Dedicated Radio Access Network (RAN): Utilizing suitable indoor/outdoor radios to create the private cellular coverage zone.
• Seamless LiveU Integration: Pente private network SIM cards are added to LiveU's cellular bonding units (like the LU800 series).
• HyperCore Control Center: Enables remote monitoring, device provisioning (SIMs/eSIMs), and crucial network slicing capabilities.

The Deployment: Proven Success at High-Profile Events

• Major Political Conventions (DNC & RNC): Provided stable, dedicated connectivity for live coverage amidst enormous crowds and intense RF congestion.
• Presidential Inaugurations: Delivered reliable uplinks for broadcasters covering the event from various locations around the capital.
• High-Profile Sporting Events: Enabled robust connectivity for sideline reporting, remote camera feeds, and enhanced fan engagement applications.

Results & Benefits

• Uninterrupted High-Quality Transmissions: Eliminated issues caused by public network congestion.
• Guaranteed Bandwidth: Network slicing allowed critical video feeds to be prioritized.
• Ultra-Low Latency: Facilitated real-time remote production workflows.
• Operational Simplicity: Rapid deployment and IT-friendly management.
• Enhanced Reliability: Added a robust, dedicated connectivity layer to LiveU's bonding capabilities.
• Flexibility: Supported multiple broadcasters simultaneously on the same temporary network infrastructure.