DLP @CASB @SD-WAN Protecting your cloud journey - Kfir Mesika Channel Account Manager - Israel & Cyprus - 2o InfoCom ...
←
→
Page content transcription
If your browser does not render page correctly, please read the page content below
Protecting your cloud journey @DLP @CASB @SD-WAN Kfir Mesika Channel Account Manager – Israel & Cyprus
Four Elements Of Digital Transformation That Create
Advantage And Risk
“Your IT infrastructure is going “Data is the new oil and “Workforce, devices, and business “Employees and partners
to the cloud, driven by business artificial intelligence the new processes are collaborate using all of a
need and speed.” engine of the digital economy.” globally hyperconnected.” company’s assets.”
Cloud IT creates security blind spots More critical data is being created Network transformation to support A critical need is created to ensure
and fragmented security than properly protected. cloud-centric IT breaks existing trusted interactions across the
management and accountability. security architectures. extended enterprise.
Data should flow freely across the
business. Personnel and IoT devices are
security vulnerabilities.
Forcepoint Proprietary © 2019 Forcepoint | 2
We used to KNOW where our data is…
And how to defend it…
Add Classification Label: Forcepoint Private | Forcepoint Proprietary | Public © 2019 Forcepoint | 3
The challenge has changed
Add Classification Label: Forcepoint Private | Forcepoint Proprietary | Public © 2019 Forcepoint | 4
Where Are You In Your Digital Transformation Journey?
Digital Transformation Stage*
Just Getting Well Ahead of Peer Industry
Started Underway Group Leading
(25%) (42%) (20%) (13%)
Salesforce.com Office 365 Workday Public-Cloud First
Example IT Initiatives Cloud Email SAP Concur Cloud ERP SaaS-First
Private Cloud Private Cloud + AWS SD-WAN/Direct-to-Cloud Full BYOD Support
Box.com Zoom / Slack AWS + Azure
Threat Protection DLP UEBA Zero Trust
Example Security
NGFW CASB AI / ML CARTA
Technologies Email SOAR Human-Centric
Secure Web Gateway
Infrastructure-Centric Information-Centric Analytics-Centric Behavior-Centric
*from Gartner’s 2019 CIO Agenda: Secure the New Foundation for Digital Business
Security Maturity
Forcepoint Proprietary © 2019 Forcepoint | 5
Forcepoint Offers A Broad Continuum Of Capabilities
Secure Cloud Adoption and Critical Data and Intellectual Property Workforce and Supply
Network User Protection Protection Chain Protection
Security Initiatives Security Initiatives Security Initiatives
• Secure the adoption of SaaS & cloud • Next-gen your data protection • Stop data loss from insiders and
• Enable direct-to-cloud connectivity and • Protect data in the cloud compromised users
security for remote offices • Discover data in a hybrid environment • Prevent sabotage and financial loss
• Protect off-network users • Confidently verify regulatory compliance • Protecting your supply chain
• Modernize your hybrid IT network (e.g., GDPR and HIPAA)
• Deploy a cloud converged security model
from the cloud
Converged Security Capabilities
Forcepoint Proprietary © 2019 Forcepoint | 6
Forcepoint Cloud Offering
Secure Cloud Adoption and
Network User Protection
Security Initiatives
• Secure the adoption of SaaS & cloud
• Enable direct-to-cloud connectivity and
security for remote offices
• Protect off-network users
• Modernize your hybrid IT network
• Deploy a cloud converged security model
from the cloud
Behavioral
Analytics
Forcepoint Proprietary © 2019 Forcepoint | 7
BEST IN CLASS CAPABILITIES
Forcepoint Forcepoint
Forcepoint Forcepoint
UEBA Mail Relay
Insider Threat AMD
Forcepoint Forcepoint Forcepoint
Forcepoint Web Gateway
Data Guard NGFW & DLP
SD-WAN
Forcepoint
CASB
© 2019 Forcepoint | 8
BEST IN CLASS CAPABILITIES
Cuts network expenses by 50%, reduces
cyberattacks by up to 86%, slashes
incident response time as much as 73%.
Forcepoint Forcepoint
Forcepoint Forcepoint
UEBA Mail Relay
Insider Threat AMD
Forcepoint Forcepoint Forcepoint
Forcepoint Web Gateway
Data Guard NGFW & DLP
SD-WAN
Forcepoint
CASB
© 2019 Forcepoint | 9
5
Things you need to
know about
Forcepoint NGFW &
SD-WAN solution
© 2019 Forcepoint | 10#1 Networking
© 2019 Forcepoint | 11Forcepoint Builds on Gartner’s Definition of SD-WAN
Replace WAN routers Integrate WAN router + NGFW
Mix transports & ISPs for each site
Support multiple WAN connections
Optimize apps’ use of links & bandwidth
Simplify WAN management, Unify policies for connectivity + security
configuration and orchestration Manage >1500 sites in one console
Provide secure VPNs, Automate VPN setup with site drag-and-drop
integrate additional network services Service-chain Web Security + CASB in cloud
© 2019 Forcepoint | 12Digital Transformation is Changing Distributed NETWORKs
Performance needs of Move from costly hub-and-spoke MPLS to
interactive SaaS apps Direct-to-Cloud networks using broadband
Enterprise Workloads Support DevOps’ virtual deployments with visibility
moving to the Cloud and enforcement across DC/edge/branch/clouds
BYOD
Balancing Access
vs Segment networks and expose services securely
IoT
with Compliance & IoT
Security Service Reduce complexity and cost by integrating
Consolidation connectivity, security, Web, and Cloud infrastructure
© 2019 Forcepoint | 13#2 Security
© 2019 Forcepoint | 14Enterprise Grade Security
Forcepoint
BEST TCO
STRONGEST SECURITY
NGFW NGIPS
6th Consecutive Time 3nd Consecutive Time
“The Forcepoint 2105 had the
highest security effectiveness in the
NSS Labs 2018 NGFW Group Test
and its throughput was rated even
higher than Forcepoint’s claimed
performance.”
Vikram Phatak
CEO
NSS Labs
© 2019 Forcepoint | 15#3 Management
© 2019 Forcepoint | 16Distributed Connectivity+Security: Centralized MGMT
Manage Branches • Edge • Data Centers • Cloud from one console
See what’s happening everywhere & interactively drill down
Turn sophisticated business processes into automated policies
Update hundreds of locations in minutes, not hours
© 2019 Forcepoint | 17Human Centric Policy
© 2019 Forcepoint | 18#4 Architecture
© 2019 Forcepoint | 19Network Security Powered by Human Analytics
Cloud Services CASB
CASB Threat w/ DLP
App Risk Intelligence
Advanced
URL Web
Install IP & File Malware
Cloud Reputation Filtering Security
Detection UEBA
Unified Appliance with Deep Security Built-in coming
Physical, Virtual, Cloud
DLP Data Loss Prevention
SD-WAN NGFW IPS VPN Segmentation ECA IT Insider Threat
Endpoint
Anti- Virtual Endpoint
Decryption Proxies Endpoint Context
Evasion Contexts Awareness
Integration
Centralized Management • High Availability
Security Management Console
Unified Policies, Dashboards & Reports
© 2019 Forcepoint | 20#5 TCO
© 2019 Forcepoint | 21Unified Appliances
CLOUD
6200 Series AWS
Max 66 interfaces Azure Data Center
FW 240 Gbps, IPS & NGFW 22 Gbps
VIRTUAL
3300 Series Hyper-V,
KVM Campus
Max 35 interfaces
VMware
FW 80-160 Gbps, IPS & NGFW 9-15 Gbps ESXi & ESX
2100 Series
Max 28 interfaces Edge
FW 60-80 Gbps, IPS & NGFW 5-7.5 Gbps
1100 Series
12 interfaces + opt. 2 modules Office
FW 50-60 Gbps, IPS & NGFW 1.5-3 Gbps
300 Series (desktop) 320X (ruggedized)
5 interfaces + opt. 2 modules and WLAN on 325 4 interfaces + WLAN Branch
FW 4 Gbps, IPS & NGFW 200 Mbps FW 2 Gbps, IPS & NGFW 200 Mbps
100 Series (desktop)
10 interfaces (8 switch ports) + WLAN on 325 SOHO
FW 1.5 Gbps, IPS & NGFW 150 Mbps
© 2019 Forcepoint | 22GROWING ACCLAIM FOR FORCEPOINT
Solo Visionary 2018, Enterprise Firewall #1 in Security Customers Who Move to
Recommended for Short Lists Recommended for Short Lists Forcepoint Experience
CONNECTIVITY
70%
Less Planned
Top NGFW Maintenance
2018
SECURITY
86%
Fewer
Cyberattacks
Top NGIPS
2018
MANAGEABILITY
53%
Less IT
Staff TimeBEST IN CLASS CAPABILITIES
Identify Shadow IT
Control cloud services
Protect Web traffic
Forcepoint Forcepoint
Forcepoint Forcepoint
UEBA Mail Relay
Insider Threat AMD
Forcepoint Forcepoint Forcepoint
Forcepoint Web Gateway
Data Guard NGFW & DLP
SD-WAN
Forcepoint
CASB
© 2019 Forcepoint | 24The continued transition to cloud
PRIVATE HYBRID PUBLIC
CLOUD CLOUD CLOUD
85% of customers 70% of IT Spend 40% of
have a multi-cloud will be cloud based by enterprises are
strategy 2020 cloud first
© 2019 Forcepoint | 25Are you Ready for the Next Wave of Shadow IT Innovation? Source: chiefmartec.com http://cdn.chiefmartec.com/wp-content/uploads/2016/03/marketing_technology_landscape_2016_3000px.jpg © 2019 Forcepoint | 26
BEST IN CLASS CAPABILITIES
Forcepoint Forcepoint
Forcepoint Forcepoint
UEBA Mail Relay
Insider Threat AMD
Forcepoint Forcepoint Forcepoint
Forcepoint Web Gateway
Data Guard NGFW & DLP
SD-WAN
Forcepoint
CASB
9 Times Gartner Leader
Single Management
One policy for all platforms
© 2019 Forcepoint | 27DATA SECURITY TODAY
Regulations Intellectual Property
Zero Perimeter WorldGENERAL DATA PROTECTION REGULATION: HOW FORCEPOINT CAN HELP
INVENTORY MAP, MANAGE & CONTROL PREPARE TO RESPOND
PERSONAL DATA PERSONAL DATA FLOWS IN A TIMELY MANNER
72
DLP: Discover, DLP: Network, Endpoint Command Center
Cloud, Endpoint Web & Email Security modulesDATA PROTECTION: VISIBILITY & CONTROL
Everywhere your people work & data resides
Forcepoint Security Manager: Single Point of Control & Risk-based User Insights
Forcepoint DLP – Cloud Apps: Forcepoint DLP – Endpoint:
Protect data at rest, in motion Protect data at rest, in motion
& in use & in use
Broad coverage of cloud aps Windows, Mac & Linux
Powered by Forcepoint CASB (v8.5)
Forcepoint DLP – Network: Forcepoint DLP – Discover:
Protect data in motion Protect data in rest
Flexible deployments Identify & remediate data
Gateway: appliance & VM Structured data (databases)
Integrated into Forcepoint Web & Email Office documents & emailsFEATURES & CAPABILITIES (NO NEED CASB LICENSE)
1 Data in motion AND data discovery Launch
Applications
2 One Policy to cover it all
3 Data Upload; Download; Sharing
Enterprise DLP features:
4 GDPR; Fingerprinting; Machine Learning;
Incident Risk Ranking; OCR (8.6);
5 Forcepoint hosted solutionBEST IN CLASS CAPABILITIES
Forcepoint Forcepoint
Forcepoint Forcepoint
UEBA Mail Relay
Insider Threat AMD
Forcepoint Forcepoint Forcepoint
Forcepoint Web Gateway
Data Guard NGFW & DLP
SD-WAN
Forcepoint
CASB
Cover ANY! Application
Inherited DLP
With behavioral analytics
© 2019 Forcepoint | 32ELIMINATE SECURITY BLIND SPOTS FOR any CLOUD APPS
FORCEPOINT CASB
DISCOVERY ENFORCEMENT RISK ASSESSMENT
Insight into what apps are Automated threat prevention and Contextual risk of apps, users,
being used by employees context-aware policy enforcement and security configurations
ACCOUNT TAKE OVER DATA PROTECTION DEVICE ACCESS CONTROL
ACCOUNT CONTROL & MONITORING AUDIT OF USER ACTIVITIES
© 2019 Forcepoint | 33Forcepoint CASB ADVANTAGES
BYOD access Cloud Monitoring
Cloud UEBA that
management and and control - ANY
is optimized to
control cloud application
cloud behavioral
and 1000s of
patterns
activities in each
Robust integration Proven Time-to- app
with Forcepoint Value with quick
solutions and other and easy
3rd party onboarding with
multi-modal support
© 2019 Forcepoint | 34Customers Trust Forcepoint for Cloud App Visibility
and Control
“Forcepoint CASB has given
us the visibility and control
that we need in order to fully
leverage the potential of
cloud applications on mobile
devices.”
Luis Aguiar, Manager –
Infrastructure Delivery Team
Leader, Metro Bank
© 2019 Forcepoint | 35BEST IN CLASS CAPABILITIES
Forcepoint Forcepoint
Forcepoint Forcepoint
UEBA Mail Relay
Insider Threat AMD
Forcepoint Forcepoint Forcepoint
Forcepoint Web Gateway
Data Guard NGFW & DLP
SD-WAN
Forcepoint
CASB
Converged integrated solutions
Best of breed + Consolidated
© 2019 Forcepoint | 36Thank you
Kfir.mesika@forcepoint.com
Forcepoint Proprietary © 2019 Forcepoint | 37Follow us!
@Forcepoint Forcepoint @ForcepontSec Forcepoint LLC Forcepoint
@ForcepointLabsYou can also read
