Streamlining User, Data and Network Defense in a Multi-Level Environment Steve Stratton Sr. Director Product Management

Transcription

1 Streamlining User, Data and Network Defense in a Multi-Level Environment Steve Stratton Sr. Director Product Management Copyright 2016 Forcepoint. All rights reserved.

2 CYBER TRENDS Increasing Connectivity More Dangerous Threat Landscape Evolving Requirements Dissolving Security Perimeter Persistent Adversaries More Advanced Integrations Mobility and Cloud Computing Advancements in Data Driven Attacks Evolving Security Controls Increasing Data Mobility Increasing Data Complexity Increasing Data Volume Copyright 2016 Forcepoint. All rights reserved. 2

3 CROSS DOMAIN AND NEED TO ACCESS Cross Domain Solutions provide secure mechanisms to access data in multiple security domains Access to networks and data at different classifications, compartments, or under different authorities Many missions are now dependent on using data that is located in multiple enclaves Stove-pipes are no longer effective The need to access must be balanced against the need to protect What risk does the connection introduce to the environment? How is that risk captured, mitigated and monitored? Copyright 2016 Forcepoint. All rights reserved. 3

4 CROSS DOMAIN ACCESS PROBLEM Copyright 2016 Forcepoint. All rights reserved. 4

5 TRUSTED THIN CLIENT FEATURES & BENEFITS Secure, simultaneous cross domain access to critical agency resources from a single endpoint Centralized management and monitoring Streamlines administration while increasing enterprise data security Increased productivity, lowers costs, high security posture, prevention of data spills and leakage Hardware and virtual desktop infrastructure (VDI) agnostic, supports numerous peripherals Reduces desktop hardware and allows for space reclamation Reduces infrastructure for cabling and cooling Supports accessories including webcams, smartcards, multi-media redirection & unified communications (Citrix Microsoft Lync Support) Remote access capability and extension to mobile devices Included on the Unified Cross Domain Services Management Office (UCDSMO) Baseline Top Secret and Below Interoperability (TSABI) Secret and Below Interoperability (SABI) Copyright 2016 Forcepoint. All rights reserved. 5

6 TRUSTED THIN CLIENT CONFIGURATION FLEXIBILITY Direct Hardware Support Thin client hardware Dell/Wyse, HP, etc. Standard PCs Hardware reuse Required for (8) monitor deployments List of certified hardware is available Hosted Deployments Type II hypervisors VMware Player Oracle VM VirtualBox Type I hypervisors XenClient XenClient XT KVM Trusted Thin Client Remote Access Packaged configuration that supports multiple VMs for Suite B, CSfC approved communications Trusted Access Mobile Android redisplay Currently single level Copyright 2016 Forcepoint. All rights reserved. 6

7 VDI SYSTEM ARCHITECTURE OVERVIEW Users Traditional DDC/ZDC (Connection Broker) Domain Controller Network B Database Server Desktop Delivery Application Delivery Provisioning Server (OS & Applications) XenServer Network-based Print Services Storage Appliance Multiple Monitors Distribution Console vcenter (Connection Broker) Domain Controller Network C Database Server ThinApp ESX Server Desktop Images Network-based Print Services Storage Appliance Remote Access Virtual Access Connection Broker Domain Controller Network D Database Server VERDE -- Linux Provisioning Server (OS & Applications) Desktop Images Network-based Print Services Storage Appliance 11/10/ Copyright 2016 Forcepoint. All rights reserved. 7

8 TRUSTED THIN CLIENT UCDMO Baseline Technology Classification levels clearly displayed Consolidated access with Trusted Thin Client Copyright 2016 Forcepoint. All rights reserved. 8

9 ENTERPRISE DISTRIBUTION CONSOLE SPANNING A C C E S S Copyright 2016 Forcepoint. All rights reserved. 9

10 HIGH RISK NETWORK MITIGATION OPTION Double VDI Hop Architecture Provides protocol break and data transformation through the use of a second VDI solution Different vendors/implementation for high risk networks Copyright 2016 Forcepoint. All rights reserved. 10

11 TRUSTED THIN CLIENT SMALL TO LARGE Tactical Customer Example Submarine Radio Room Navy CANES Enterprise Customer Example Intelligence Community Enterprises FBI Customer with 56 networks OCONUS deployments Australia, Canada, UK Over 100,000 Seats In Operation Copyright 2016 Forcepoint. All rights reserved. 11

12 SUMMARY You can! Improve your cyber defense through a reduction in end user computing devices Make use of trusted operating systems and applications that are much easier and less costly to manage then single silo traditional systems Streamline user access to multiple backend systems and data sources at different classification levels Create new COI and enclaves in minutes versus days mission speed Provide significant power, weight, cooling and device costs savings. Copyright 2016 Forcepoint. All rights reserved. 12

13 Thank You 11/10/ Copyright Copyright Forcepoint. Forcepoint. All rights All rights reserved. reserved. 13

14 Overview Streamline User, Data, and Network Defence in a Multi-Level Environment will discuss how you can make it harder for adversaries to find and breach your most sensitive data when faced with the distributed realities of a multi-level environment consisting of 2, 3, 4 or more networks. Trusted Thin Client, an authorised multi-level access solution, provides the capability to consolidate one of the more vulnerable aspects of your environment: many endpoint devices per user, all with local storage. Trusted Thin Client reduces the attack surface by replacing separate endpoints for each network with a single read-only device. Leveraging virtual desktop infrastructure (VDI) technologies, all desktop images and data are stored and managed in a central datacentre. This approach separates the data from the device and delivers seamless access to all allowed networks from approved devices and locations.