Server EDR Security Project for a HK Government Department

Learn more

Challenges

As a core department of the Hong Kong Special Administrative Region Government overseeing food safety, environmental hygiene and public health regulation, the organization initiated Phase I of its EDR security initiative to protect approximately 1,300 PC and server endpoints running heterogeneous operating systems including Windows Server, RHEL, Ubuntu, SUSE and Windows PC. With cyberattacks against government agencies growing increasingly sophisticated, the department urgently required a comprehensive EDR (Endpoint Detection and Response) framework to deliver real-time detection, automated response and rapid forensics against advanced threats such as ransomware, fileless attacks and memory-based attacks. The solution was required to comply with HKSAR Government data localization mandates, ensuring all security audit data remained on-premises within jurisdictional boundaries; integrate seamlessly with the existing Active Directory domain environment; support an English-language management interface; and guarantee high availability of management nodes to maintain business continuity.

Solution

Server EDR Security Project for a HK Government Department
Leagsoft deployed the LV7000 EDR security platform for the department, comprising EDR-Acuta endpoint agents, LV7000 Controller management nodes in hot-standby configuration, and a clustered EDR-AcutaDB audit database architecture. This established a unified, cross-platform endpoint protection system integrating signature-based, behavioral and AI-driven engines for multi-layered threat detection. The solution delivers defense-in-depth capabilities including ransomware protection, system vulnerability scanning, anti-brute-force protection for SMB/RDP sessions, granular USB device control and trusted process whitelisting. It supports automated response orchestration via playbooks, incident forensic analysis and recovery of ransomware-encrypted files. The platform is deeply adapted for Windows and Linux server environments, synchronizes with Active Directory for unified identity management, adopts fully on-premises deployment to ensure data sovereignty, and provides a comprehensive English-language management console.

Benefits

Upon completion, the department achieved unified security management across 1,300 PC and server endpoints, significantly improving endpoint threat visibility and automated response efficiency.
Through Leagsoft's AI-powered behavioral detection and playbook-driven automated response mechanisms, the system effectively blocks ransomware and Advanced Persistent Threat (APT) intrusions, substantially reducing the detection and response cycle for security incidents.
The platform fully satisfies HKSAR Government requirements for localized data storage, compliance auditing and high-availability operations, providing a continuous and reliable security foundation for food safety regulation and environmental hygiene management.
This project stands as a benchmark for large-scale, mixed-endpoint EDR deployment within Hong Kong government departments.