Overview. HPE Complete SafeBreach

Transcription

1 Overview HPE Complete SafeBreach The HPE Complete SafeBreach Breach and Attack Simulation Platform enables organizations to answer the most fundamental yet challenging - question when it comes to cybersecurity risks: How secure are we? SafeBreach safely simulates breach scenarios across the entire cyber kill chain to 1) identify gaps and weaknesses in a customer s environment; 2) prove where security measures are working as expected; 3) get a healthy measure of ROI on investments in firewalls, anti-virus, and other security technologies; and, 4) ultimately prevent data breaches from happening. There are two components to the SafeBreach Breach and Attack Simulation Platform: 1) SafeBreach simulators that play the role of the virtual hacker, and, 2) SafeBreach Management Console that aggregates and analyzes results of simulations. Every SafeBreach simulation is executed on and between cloud, network and endpoint simulators, ensuring there is no destructive impact or risk to production systems, data, applications, or other resources. Simulations are based on thousands of real hacker breach methods like ransomware, brute force, covert data exfiltration and more in the SafeBreach Hacker s Playbook TM. Developed by SafeBreach Labs TM - our elite team of ethical hackers and security researchers - the Hacker s Playbook TM is continuely updated and expanded with new methods, and can be enahnced with threat intelligence indicators of compromise to emulate specific adversaries of concern for the customer (i.e. by nation-state or known adversaries who target verticals like Financial Services, Healthcare, or Retailers). SafeBreach software products are available on HPE Catalog via HPE Complete program. HPE Complete- Resell of Third Party Branded Products HPE Complete is a resource enabling the purchase of best in class third party branded products with the added reliability of Hewlett Packard Enterprise s interop assurance for a complete validated solution, all via one HPE purchase order. Benefits One Stop Shop - Purchase complete solutions from HPE that include best in class third party branded products, all on a single HPE purchase order Validated solution - Confidence of The HPE interop assurance validation for third party branded products that complement HPE Storage & Server solutions Customer Experience - Hewlett Packard Enterprise ensures complete customer satisfaction, by troubleshooting the solution and facilitating third party expertise for the installation, support and warranty of their products Unique Value Minimize risk, complexity and cost when deploying multi-vendor products and technologies into the HPE ecosystem For more information please refer HPE Complete on HPE.com Page 1

2 Models Hewlett Packard Enterprise is making the following SafeBreach SKUs available via HPE Complete: SafeBreach Management Console SKUs SafeBreach Mgmt Console Sub 1yr LTU Q1M58A SafeBreach Endpoint Software SKU SafeBreach Endpoint 1-5/Sim 1yr LTU SafeBreach Endpoint 6-15/Sim 1yr LTU SafeBreach Endpoint 16-25/Sim 1yr LTU SafeBreach Endpoint 26-50/Sim 1yr LTU SafeBreach Endpoint /Sim 1yr LTU SafeBreach Endpoint /Sim 1yr LTU SafeBreach Endpoint /Sim 1yr LTU SafeBreach Endpoint /Sim 1yr LTU SafeBreach Cloud Software SKUs SafeBreach Cloud 1-5/Sim 1yr LTU SafeBreach Cloud 6-15/Sim 1yr LTU SafeBreach Cloud 16-25/Sim 1yr LTU SafeBreach Cloud 26-50/Sim 1yr LTU SafeBreach Cloud /Sim 1yr LTU SafeBreach Cloud /Sim 1yr LTU SafeBreach Cloud /Sim 1yr LTU SafeBreach Cloud /Sim 1yr LTU SafeBreach Network Software SKUs SafeBreach NW 1-5/Sim 1yr LTU SafeBreach NW 6-15/Sim 1yr LTU SafeBreach NW 16-25/Sim 1yr LTU SafeBreach NW 26-50/Sim 1yr LTU SafeBreach NW /Sim 1yr LTU SafeBreach NW /Sim 1yr LTU SafeBreach NW /Sim 1yr LTU SafeBreach NW /Sim 1yr LTU SafeBreach Docker Software SKUs SafeBreach Docker 1-5/Sim 1yr LTU SafeBreach Docker 6-15/Sim 1yr LTU SafeBreach Docker 16-25/Sim 1yr LTU SafeBreach Docker 26-50/Sim 1yr LTU SafeBreach Docker /Sim 1yr LTU SafeBreach Docker /Sim 1yr LTU SafeBreach Docker /Sim 1yr LTU SafeBreach Docker /Sim 1yr LTU SafeBreach Quick Start Software SKU SafeBreach Quick Start LTU Q1M26A Q1M27A Q1M28A Q1M29A Q1M30A Q1M31A Q1M32A Q1M33A Q1M34A Q1M35A Q1M36A Q1M37A Q1M38A Q1M39A Q1M40A Q1M41A Q1M42A Q1M43A Q1M44A Q1M45A Q1M46A Q1M47A Q1M48A Q1M49A Q1M50A Q1M51A Q1M52A Q1M53A Q1M54A Q1M55A Q1M56A Q1M57A Q8Y28A Page 2

3 Features and Benefits Comprehensive breach and attack simulations SafeBreach simulators for cloud, network and host to support all possible enterprise environments Dashboard summarizing results of simulations along with historical trends and risk scoring Breach Explorer provides complete visibility into cyber kill chain Ability to customize simulator role (i.e. point of infiltration, lateral movement, or exfiltration) and simulated asset (e.g. credit cards, source code, SSNs, patient or customer data) to address enterprise risk to data breach or compliance violation Integrated reports on risks across the kill chain -- infiltration, lateral movement, exfiltration and prioritization based on risk Remediation and integration Ability to send data to Security Information and Event Management Systems (SIEM tools like ArcSight, Splunk, etc.) for further analysis by Security Analysts Integration with ticketing systems like ServiceNow and Jira to initiate blue team fixes Schedule simulations reruns as necessary upon execution of fixes Ability to export simulations results into Microsoft Excel Leading security research support In-depth SafeBreach s Playbook TM, made up of thousands of real hacker breach methods simulating attacks like endpoint infection, brute force, covert exfiltration, ransomware and more. Research-as-service by SafeBreach Labs supporting unique attack simulations requested by customers Ability to categorize breach methods by techniques, attacker sophistication and protocol Details provided for every breach method that can be exported to SIEMs and ticketing systems Transformation of threat intelligence indicators of compromise to breach methods Benefits Quantify enterprise cyber-related Risk associated with data breaches by identifying gaps and weaknesses ahead of an actual breach Baseline Digital transformation projects associated with the move to hybrid cloud Gauge compliance posture for GDPR, PCI, HIPAA, and more Measure ROI on investments in security infrastructure Understand the risks associated with M&A activity by assessing the susceptibility to a breach in target companies Page 3

4 HPE Complete SafeBreach Configuration Information The HPE Complete SafeBreach configuration are as follows: Step-1 Select Console SafeBreach Management Console SafeBreach Mgmt Console Sub 1yr LTU SafeBreach Management Console 1yr Subscription LTU Q1M58A Step-2 Select Subscription Step-2 Select Subscription SafeBreach Endpoint Subscriptions SafeBreach Endpoint 1-5/Sim 1yr LTU SafeBreach Endpoint Simulators 1yr Subscription per Simulator LTU SafeBreach Endpoint 6-15/Sim 1yr LTU SafeBreach Endpoint 1-5 Simulators 1yr Subscription per Simulator LTU SafeBreach Endpoint 16-25/Sim 1yr LTU SafeBreach Endpoint 6-15 Simulators 1yr Subscription per Simulator LTU SafeBreach Endpoint 26-50/Sim 1yr LTU SafeBreach Endpoint Simulators 1yr Subscription per Simulator LTU SafeBreach Endpoint /Sim 1yr LTU SafeBreach Endpoint Simulators 1yr Subscription per Simulator LTU SafeBreach Endpoint /Sim 1yr LTU SafeBreach Endpoint Simulators 1yr Subscription per Simulator LTU SafeBreach Endpoint /Sim 1yr LTU SafeBreach Endpoint Simulators 1yr Subscription per Simulator LTU SafeBreach Endpoint /Sim 1yr LTU SafeBreach Endpoint Simulators 1yr Subscription per Simulator LTU SafeBreach Cloud Subscriptions SafeBreach Cloud 1-5/Sim 1yr LTU SafeBreach Cloud 1-5 Simulators 1yr Subscription per Simulator LTU SafeBreach Cloud 6-15/Sim 1yr LTU SafeBreach Cloud 6-15 Simulators 1yr Subscription per Simulator LTU SafeBreach Cloud 16-25/Sim 1yr LTU SafeBreach Cloud Simulators 1yr Subscription per Simulator LTU SafeBreach Cloud 26-50/Sim 1yr LTU SafeBreach Cloud Simulators 1yr Subscription per Simulator LTU SafeBreach Cloud /Sim 1yr LTU SafeBreach Cloud Simulators 1yr Subscription per Simulator LTU SafeBreach Cloud /Sim 1yr LTU Q1M26A Q1M27A Q1M28A Q1M29A Q1M30A Q1M31A Q1M32A Q1M33A Q1M34A Q1M35A Q1M36A Q1M37A Q1M38A Q1M39A Page 4

5 Configuration Information SafeBreach Cloud Simulators 1yr Subscription per Simulator LTU SafeBreach Cloud /Sim 1yr LTU SafeBreach Cloud Simulators 1yr Subscription per Simulator LTU SafeBreach Cloud /Sim 1yr LTU SafeBreach Cloud Simulators 1yr Subscription per Simulator LTU Q1M40A Q1M41A Step-2 Select Subscription SafeBreach Network Subscriptions SafeBreach NW 1-5/Sim 1yr LTU SafeBreach Network 1-5 Simulators 1yr Subscription per Simulator LTU SafeBreach NW 6-15/Sim 1yr LTU SafeBreach Network 6-15 Simulators 1yr Subscription per Simulator LTU SafeBreach NW 16-25/Sim 1yr LTU SafeBreach Network Simulators 1yr Subscription per Simulator LTU SafeBreach NW 26-50/Sim 1yr LTU SafeBreach Network Simulators 1yr Subscription per Simulator LTU SafeBreach NW /Sim 1yr LTU SafeBreach Network Simulators 1yr Subscription per Simulator LTU SafeBreach NW /Sim 1yr LTU SafeBreach Network Simulators 1yr Subscription per Simulator LTU SafeBreach NW /Sim 1yr LTU SafeBreach Network Simulators 1yr Subscription per Simulator LTU SafeBreach NW /Sim 1yr LTU SafeBreach Network Simulators 1yr Subscription per Simulator LTU Q1M42A Q1M43A Q1M44A Q1M45A Q1M46A Q1M47A Q1M48A Q1M49A Step-2 Select Subscription SafeBreach Docker Subscriptions SafeBreach Docker 1-5/Sim 1yr LTU SafeBreach Docker 1-5 Simulators 1yr Subscription per Simulator LTU SafeBreach Docker 6-15/Sim 1yr LTU SafeBreach Docker 6-15 Simulators 1yr Subscription per Simulator LTU SafeBreach Docker 16-25/Sim 1yr LTU SafeBreach Docker Simulators 1yr Subscription per Simulator LTU SafeBreach Docker 26-50/Sim 1yr LTU SafeBreach Docker Simulators 1yr Subscription per Simulator LTU SafeBreach Docker /Sim 1yr LTU SafeBreach Docker Simulators 1yr Subscription per Simulator LTU Q1M50A Q1M51A Q1M52A Q1M53A Q1M54A Page 5

6 Configuration Information SafeBreach Docker /Sim 1yr LTU SafeBreach Docker Simulators 1yr Subscription per Simulator LTU SafeBreach Docker /Sim 1yr LTU SafeBreach Docker Simulators 1yr Subscription per Simulator LTU SafeBreach Docker /Sim 1yr LTU SafeBreach Docker Simulators 1yr Subscription per Simulator LTU Q1M55A Q1M56A Q1M57A Step-1 (optional) Select Quick Start SafeBreach Quick Start SKU (6 mo Trial) SafeBreach QuickStart LTU (6 mo Trial) SafeBreach QuickStart LTU includes 1 Management Console, mix of 20 Cloud, Network and/or Host/Endpoint Simulators Q8Y28A Page 6

7 Service, Support, Warranty and Other Information Service and Support Service and Support for SafeBreach products are provided directly by SafeBreach. For any support and generic queries please to SafeBreach licensors service delivery organization will be responsible for responding with a call, assigning a severity level to the call, and determining the service Severity Level acceptable to Hewlett Packard Enterprise customer. The support request will be processed by SafeBreach in accordance with the Severity Level agreed upon. Warranty Software For a period of ninety (90) days from the Start Date, SafeBreach warrants (a) that the media on which the software is delivered will be free of defects in material and workmanship, and (b) the software will operate substantially as set forth in the applicable SafeBreach specifications when used in accordance with the terms of the SafeBreach software license. End User's exclusive remedy and the entire liability of SafeBreach and its suppliers under this limited warranty will be replacement of the software media. Except for the foregoing, the software is provided AS IS. This limited warranty extends only to the End User as the original licensee. See other Warranty Limitations and Restrictions below. Restrictions SafeBreach warranties as set forth herein ( Warranty ) are contingent on proper use of the SafeBreach branded hardware and software ( Products ) and do not apply if (a) the Products have been modified without the written approval of SafeBreach, (b) the Products' serial number label is removed, (c) the Product has been damaged or subjected to abnormal physical or electrical stress, abnormal environmental conditions, misuse, negligence, or accident, or (d) the Product is licensed for beta, evaluation, testing or demonstration purposes. In order to ensure proper operation of SafeBreach products, it is required that all SafeBreach systems utilize only SafeBreach supplied optical transceiver components. SafeBreach reserves the right to void warranty and service support offerings if optical transceiver components other than those supplied by SafeBreach are used in the operation of SafeBreach products. The terms of the Warranty are limited to the remedies as set forth in this Warranty. This warranty is provided in lieu of all other rights, conditions and warranties. SafeBreach makes no other express or implied warranty with respect to the software, hardware, products, documentation or SafeBreach support, including, without limitation, any warranty of merchantability, fitness for a particular purpose and non-infringement of third party rights. SafeBreach does not warrant that any products will be error-free, or that any defects that may exist in its products can be corrected. In no event shall SafeBreach be liable for cost of procurement of substitute goods, lost profits or any other special, indirect, consequential or incidental damages (including but not limited to lost data), however caused whether or not SafeBreach has been advised of the possibility of such damages. Some jurisdictions do not allow limitation or exclusion of liability for consequential or incidental damages, so that limitation or exclusion may not apply. Return Policy for Resellers Stocking of HPE Complete SafeBreach products are not recommended. Please purchase accurate quantity required to fulfil the customer order. Page 7

8 Summary of Changes Date Version History Action Description of Change 04-Dec-2017 Version 2 Changed Added Quickstart SKU 25-Sept-2017 Version 1 Created All content created Sign up for updates Copyright 2017 Hewlett Packard Enterprise Development LP. The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein. Microsoft and Windows NT are US registered trademarks of Microsoft Corporation. Intel is a US registered trademark of Intel Corporation. Unix is a registered trademark of The Open Group. a enw Worldwide - V2 04-December-2017 Page 8