SR B25 Symantec.cloud Security Solutions: Expert Insights into , Web, Endpoint and IM Security Best Practices

Transcription

1 SR B25 Symantec.cloud Security Solutions: Expert Insights into , Web, Endpoint and IM Security Best Practices Ronald Poserina Director, Systems Engineering SR B25: Symantec.cloud Security Solutions 1

2 Session Agenda 1 The Challenges of Managing IT 2 Latest Trends from the Threat Landscape 3 The Symantec.cloud Solution 4 Recommendations and Best Practice 5 Q&A 2

3 The Security Challenges 3

4 IT Pressure with Managing Security Being asked to do more with less Upgrades, Patching & Maintenance of current solutions Investing in new technology to address changing business requirements Keeping up with the threat landscape Demand to support more devices Mobile workforce Protection that follows the user 4

5 Challenges with a Multiple Vendor Approach Juggling multiple vendor relationships Inability to reduce costs through bundling Multiple products to manage Differing platforms and technologies to support and learn Technical support 5

6 The Threat Landscape 6

7 Global Intelligence Network Identifies more threats, takes action faster & prevents impact Calgary, Alberta Dublin, Ireland San Francisco, CA Mountain View, CA Culver City, CA Austin, TX Pune, India Chengdu, China Chennai, India Taipei, Taiwan Tokyo, Japan Worldwide Coverage Global Scope and Scale Rapid Detection 24x7 Event Logging Attack Activity 240,000+ sensors 200+ countries and territories Malware Intelligence 135M+ systems monitored 11 security response centers Vulnerabilities 50,000+ vulnerabilities 15,000+ vendors 105,000+ technologies Spam/Phishing 5M+ decoy accounts 8B+ messages/day 1B+ web requests/day Preemptive Security Alerts SR B25: Symantec.cloud Security Solutions Information Protection Threat Triggered Actions SYMANTEC VISION

8 Malicious Attacks Are Growing 2011 Statistics from v17 Symantec ISTR 5.5B Attacks blocked by Symantec +81% 403M Unique Variants of Malware +41% 4,597 Web Attacks per Day +36% 4,989 New Vulnerabilities -20% 8 Zero-Day Vulnerabilities -43% 315 New Mobile Vulnerabilities +93% 75% Spam rate -34% 8

9 Which Website is More Dangerous? 9

10 Most Harmful Websites by Categories 10

11 Social Media Changes Everything 11

12 12 SYMANTEC VISION 2012

13 President s 13 Forum and WSML 2012 SYMANTEC VISION 2012

14 Advanced Targeted Attacks Your Assumptions are Wrong 14

15 Dispelling Assumptions about Targeted Attacks Only Large Organizations are Targets 50% are against 2,500 or larger 17% are targeted at 250 or less Only Gov t or Defense Sectors are Targets 70% of targeted are against other sectors Only CEO s or Senior Managers are Targets 58% of people targeted are non-execs Most targeted people are in sales, PR, HR 15

16 That s where we come in 16

17 Our Goal: Simplify IT & Increase Your Security Posture Management Traffic Shaping AV / AS / Content High Availability HQ Office Branch Office #1 Branch Office #2 Messaging Web Filtering AV / AS / Content Filtering High Availability Messaging AV / AS / Content Filtering High Availability Messaging Management AV / AS / Content Filtering Web Web High Availability Endpoint Security AV / AS / Content High Availability Filtering AV / AS / Content High Availability Filtering Centralized Management Server High Availability Management Overhead Simplified Procurement Performance Tuning High Availability Deployment Policy Administration Patching IT Admin Testing Capacity Planning Upgrades SR B25: Symantec.cloud Security Solutions SYMANTEC VISION

18 Benefits of Symantec.cloud Easy to deploy/manage Subscription pricing Little or no software Integrated solutions Automatic updates Market leading SLA s Easy to scale 24 x 7 support 18

19 Symantec.cloud Security Solutions Security.cloud AntiVirus AntiSpam Image Control Content Control Encryption.cloud Boundary Encryption (TLS) Policy Based Encryption (Push/Pull) IM Security.cloud Endpoint Protection.cloud Back-up Exec.cloud Web Security.cloud AntiVirus & AntiSpyware URL & Content Filtering Roaming User Protection Enterprise Vault.cloud 19

20 Global Infrastructure = Greater Visibility and Protection Incorporating 17 data centers spanning four continents Every data center is scalable and secured to the highest standards (ISO27001/SAS70II/ISAE 3402) Clustered high performance servers, each cluster has full redundancy 20

21 Identifying more threats, taking action faster & preventing impact Relevant Global Expertise Billions of connections and Web requests/week Accurate In-depth Analysis Zero hour protection IT Policies and Controls Skeptic Multi-protocol Converged Threat Protection Threat intelligence shared across , Web, and IM Security.cloud Web Security.cloud Instant Messaging Security.cloud SR B25: Symantec.cloud Security Solutions SYMANTEC VISION

22 Security.cloud AntiVirus & AntiSpam Skeptic Capabilities Malware DNA Phishing/Fraud Detection Targeted Attack Detection Binary Analysis Start-up Code Analysis Obfuscation/Encryption Known Security Vulnerabilities Spam Detection Rules Image Composition Analysis Link Following SR B25: Symantec.cloud Security Solutions SYMANTEC VISION

23 Policy Based Encryption.cloud Service for Key Features Scans against user policy and automatically encrypts sensitive s Fully hosted service, including management of digital certificates and encryption keys Wide range of delivery mechanisms Support for mobile platforms Secure reply and compose capabilities Read receipts automatically forwarded to senders Can be combined with Symantec.cloud Security services 23

24 How it Works - Delivery NO Encryption Platform PLAIN TEXT MIME MESSAGE Encryption Required? YES Encryption Key Found? YES NO ENCRYPTED S/MIME MESSAGE TLS Mail Server ENCRYPTED S/MIME (via web browser) Secure Mail Portal SIGNED NOTIFICATION Symantec.cloud Content Control Encryption platform SR B25: Symantec.cloud Security Solutions SYMANTEC VISION

25 Policy Based Encryption.cloud Recipient Interface Read the Secure Message SR B25: Symantec.cloud Security Solutions SYMANTEC VISION

26 Web Security.cloud Protect and Control Internet Access 26

27 Protecting the Mobile Workforce Smart Connect for Web Security.cloud Seamlessly logs in users in a variety of network environments Ideal for road-warrior users and frequent travelers Enforces policies and protects users as if they were inside your corporate LAN Runs as an agent on the endpoint. Data center Home Offices Public Wi-Fi Hotspots; Pay-for-use portals Corporate LAN & Regional Offices 27

28 Instant Messaging Security.cloud Key Features: Protects against viruses transmitted via UC and public IM Malicious URL detection Intuitive policy building capability including multiple rule stacking Logs message transcripts Secure directory synchronization Dashboard, summary, detailed and scheduled reporting Configurable and customizable system notifications 28

29 Endpoint Protection.cloud Comprehensive protection for your systems (AV, AS, Smart Firewall & IPS) Always-on protection for endpoints Web-based management console Security audit & customizable reporting Automatic definition updates and automatic software upgrades 29

30 ClientNet: Simple Yet Powerful 30

31 ClientNet Management Portal 31

32 ClientNet Benefits Consolidated view of all of your solutions Robust Tracing Tools Feature rich reporting Granular policy creation with directory integration Access & Manage your solutions from anywhere Ability to create users with differing levels of access Technical Support / Documentation / Help 32

33 Partner Management Management console for partners to manage multiple customers Trial Setup Reporting Configuration Presentation Identifier Goes Here SYMANTEC VISION

34 Industry Leading Service Level Agreements AntiSpam effectiveness Spam false positive rate AntiVirus false positive rate Service Availability Web Service Availability SLA 99% % SLA % % SLA % % SLA 100% 100% SLA 100% 100% Performance Service Level Agreement Performance: August 2011 to January 2012 SR B25: Symantec.cloud Security Solutions SYMANTEC VISION

35 Target Jan-09 Feb Mar April May June July Aug Sept Oct Nov Dec Jan-10 Feb Mar April May June July Aug Sept Support: Complementary AND top rated 24/7 97% Telephone, Portal & support 97% 97% 94% 96% 97% 93% 96% 93% 94% 95% 94% 94% 95% 96% 96% 96% 94% 97% 96% 96% 96% 97% Support Ticket Satisfaction Knowledgeable 1st & 2nd line support to actively manage and resolve client issues Target response times: 95% of critical issues: 2hrs 85% of major issues: 4hrs 75% of minor issues: 8hrs SR B25: Symantec.cloud Security Solutions SYMANTEC VISION

36 Benefits of SaaS for Addressing Security Protection & Control Cost Containment Staffing Reduce threats Minimize legal risk Increase productivity How to do more with less Reduce time to benefit CAPEX v OPEX Limited staffing resource Limited time to train Focus on core business SR B25: Symantec.cloud Security Solutions SYMANTEC VISION

37 Symantec.cloud: Market Leadership 10.9 million SaaS users 32,000 clients 104 Countries Leading provider of Web Security hosted services (IDC) Leader in Gartner MQ for Secure Gateway Worldwide leader in messaging security SaaS (IDC) 37

38 Recommendations and Best Practice Employ defense-in-depth strategies Antivirus on endpoints is not enough Use encryption to protect sensitive data Leverage web security solutions to enable safe interactions Include the mobile workforce in IT planning Use Data Loss Prevention to help prevent data breaches Be aggressive on your updating and patching Enforce an effective password policy Educate users on the changing threat landscape 38

39 Additional Hands On.Cloud Sessions LAB: SR L20 - Web Security.cloud Management Best Practices Monday 2:15-3:15 Room 121 LAB: SR L19 - Deep Dive: Security.cloud Management Wednesday 1:00-2:00 Room

40 Thank you! Ronald Poserina (646) Copyright 2011 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice. SR B25: Symantec.cloud Security Solutions 40