Vorstellung von MFA CASb

Transcription

1 Vorstellung von MFA CASb Censornet Lars Gotlieb Regional Manager DACH

2 Marktbewährte Technologie

3 What we do Unified Security Solution Cloud Application Control Hybrid Web Security Multi-factor Authentication Security

4 Multi factor authentification (SMS passcode)

5 SMS passcode - Market DACH» More than 4000 customers» plus Users» Recognized in the market» Whitelisted by DCSO

6 Adaptive Multi-Factor Authentication Ensures only the individuals allowed can access applications and data The level of authentication required depends on context User Authentication NON-TRUSTED LOCATION PASSCODE: bigwin COUNTRY: USA Org: JFK International Airport SMS PASSCODE Trust of location, IP-address device, increases with increasing number of successful log-ins Configurable text from the passcode policies Authorisation Enforcement Secure Device Provisioning The country the login attempt initiated from The owner of the IP-address that initiated the request

7 Security Real-time Authentication» No pre-issued passcodes» No seed files» Precondition for Session-specific OTP s» User notification capabilities 7

8 Security High Passcode Security Our One-Time-Passcodes are:» Challenge-based» Real-time» Session-specific (avoid Phishing!)» Time-restricted (default = 2 minutes)» Configurable number of characters (default = 6 characters)» Cryptographically Strong Random Codes (FIPS-140) The RNGCryptoServiceProvider generates cryptographically strong random numbers and has completed FIPS-140 evaluation. 8

9 Security Narrowing the Attack Surface Session-specific Location Aware Behavior Aware Time-restricted Challenge-based Real-time Adaptive Multi-factor Authentication VDI VPN Attack Cloud Services Surface Data Applications By employing Adaptive Multi-factor Authentication you can protect Traditional the most vulnerable Two-factor parts of your Authentication infrastructure. Username and Password 9

10 Administration Administration Flexible OTP Delivery» Broad range of OTP delivery options» Automatic failover» Location Aware Dispatching» OATH token support allows use of both hardware- and App tokens» Simultaneous use is possible 10

11 Gelobte support! Hello colleagues, with the super-fast help of the SMS Passcode support, the problem could be fixed within some minutes. Fastest support we ve ever had. Thank you! Udo Nassenstein IT Operations Daimler FleetBoard GmbH 11 SMS passcode - Stärker

12 USS - CASB

13 USS Solution overview Single Sign-on Password Reset Multi-Factor Auth. Security Cloud App Control Web Security Log-files Unified log to enable: Correlation of Data Machine Learning / AI Reports and Alerts

14 Unique Architecture Traditional Proxy: The whole web request is downloaded twice, once for the cloud proxy to decide if it is safe, and once for the end user User requests web resource Proxy requests web resource Proxy delivers web resource Proxy receives web resource Reduced latency, the users have the same web experience as they would without the security CensorNet way Cloud applications remain location aware for mobile users and don t Only the information Protocol take the location of the datacentre Method required to decide if the URL Query String web request Tablets/mobile is safe is devises with GPS Post don t Parameters give false results of identity Headers Web App sent to the proxy. If the theft/spoofing Classification Classification request is allowed the user goes directly to the website. User requests web resource User accesses web resource directly Product Portfolio Overview

15 Centralized Dashboard

16 Centralized Dashboard

17 Cloud Application Control - CASB/CAC

18 CensorNet Provides Complete Cloud Security Follow the person across multiple devices, networks and applications. Apply the same policy, permissions and control on web, and cloud applications consistently. Track data as it is moved between web applications and shared via , file sharing or social media. Monitor sensitive data from one console and track security events that involve more than one application or medium Spot use of unauthorised or risky cloud applications and prevent sensitive data from being shared. Benefit from the scalability and flexibility of cloud application adoption and BYOD without risking security.

19 Cloud Managed Platform» Unified Content Security Management and LOG coalition» Multi Tenant Management across platforms (Web, CAC, and MFA)» White Labeling» Easy provisioning of new customers and trial» Value added Security service for your customers» No expensive additional cost for H/W etc

20 Cloud Managed Platform» Web & CAC Security» The proxyless Solution» No API limitations» CAC enables highest level of security on Cloud Applications» Security» Real time Link Scan» Secure In-Box» Archiving» Multi Factor Authentication» Not just 2-factor authentication» User and behavior aware authentication» Extremely user friendly including Password Reset service

21 Censornet» Regain control of data and security

22 Complete Cloud Security Anyone, anywhere, any app, any device Lars Gotlieb Regional Manager DACH