CHECK POINT CLOUDGUARD SAAS SUPERIOR THREAT PREVENTION FOR SAAS APPLICATIONS

Transcription

1 CHECK POINT CLOUDGUARD SAAS SUPERIOR THREAT PREVENTION FOR SAAS APPLICATIONS

2 OVER 70% OF ENTERPRISES ADOPTED CLOUD APPLICATIONS* ARE WE SECURE? *Gartner, 2016

3 SaaS Applications are being Hacked NOT EVERY CLOUD HAS A SILVER LINING Und die Einschläge kommen immer näher...

4 55% of breaches start with SaaS 1 in 2 SaaS breaches are through ACCOUNT TAKEOVER

5 THE CASE OF KAYE FINANCIALS Kaye moved its to the cloud Kaye s customers received invoices with fake bank accounts s were sent by hackers who took over Kaye s accountant account $2M Stolen Reported on July 2017 to Check Point IRT 5

6 IS YOUR FOCUS IN THE RIGHT PLACE? Z E R O - D AY T H R E AT S A C C O U N T TAKEOVER M A LWA R E D E L I V E RY SAAS SECURITY - WHAT S NEEDED? E X T E N S I V E T H R E AT P R E V E N T I O N, B L O C K I N G O F A C C O U N T TA K E O V E R S

7 INTRODUCING CLOUDGUARD SAAS SUPERIOR THREAT PREVENTION FOR SAAS APPLICATIONS 7

8 SCHÜTZEN SIE IHRE DATEN 8

9 CLOUDGUARD SAAS SUPERIOR SECURITY FOR SAAS APPLICATIONS ZERO-DAY THREATS PROTECTION COMPREHENSIVE THREAT INTELLIGENCE DATA LEAKAGE PREVENTION IDENTITY PROTECTION Prevent account takeovers SIMPLIFIED MANAGEMENT SHADOW IT DISCOVERY 9

10 HOW IT WORKS: Award-winning technologies CHECK POINT SECURITY STACK Identity Protection Authentication Zero-day Threats Protection Data Leak Prevention Documents Encryption Shadow IT Simplified Management 10

11 ELIMINATE REAL SAAS THREATS 11

12 CLOUDGUARD SAAS THREAT PROTECTION ZERO-DAY THREAT PROTECTION Prevent malware and zero-day threats from getting into SaaS apps Block phishing s for Office365 and Gmail 12

13 ADVANCED THREAT PREVENTION FIFTH GENERATION OF CYBER SECURITY Threat Emulation Blocks zero-day attacks The only evasion resistant CPU-Level sandbox Threat Extraction Delivers safe files Proactive prevention through file sanitation Anti-Phishing for SANDBLAST SCORED 100% BREACH PREVENTION Breach Prevention System Test 11/2017 Advanced protection of user s 13

14 THREAT PREVENTION FOR SAAS APPS HOW IT WORKS: Hacker Shares / s malicious content API: New File Detected Quarantine file Scan File Found malware Threat Prevention 14

15 CLOUDGUARD SAAS IDENTITY PROTECTION IDENTITY PROTECTION ID-Guard technology identifies imposturous access Blocks unauthorized users and devices, on mobile and PCs 15

16 ACCOUNT TAKEOVER WHAT IT LOOKS LIKE: Hacker Accesses App Stolen credentials Identity Provider ADFS, AzureAD, Okta 16

17 PREVENT ACCOUNT TAKEOVER WITH CLOUDGUARD SAAS IDENTITY PROTECTION Employee Accesses app Identifies Device Identity Provider Hacker Identifies Device Illegitimate Login Attempts to access with Stolen ID Identity Provider 17

18 CLOUDGUARD SAAS THREAT INTELLIGENCE COMPREHENSIVE THREAT INTELLIGENCE Comprehensive security coverage across the enterprise Shared threat intelligence across network, cloud, and mobile devices 18

19 Daily inputs from traffic across 150K security gateways world wide Translates threat intelligence data into actionable security protections Security updates in Real Time

20 CLOUDGUARD SAAS SIMPLIFIED MANAGEMENT SIMPLIFIED MANAGEMENT Deploy within minutes, scan instantly for previous threats Centralized configuration and monitoring through intuitive web console 20

21 CLOUDGUARD SAAS SHADOW IT DISCOVERY SHADOW IT DISCOVERY Easy discovery of shadow SaaS apps Granular, comprehensive shadow IT discovery with Check Point security gateways 21

22 COMPLEMENTING GRANULAR SHADOW IT CONTROL WITH CHECK POINT SECURITY GATEWAYS Over 7859 applications and in-app activities Highly granular policy with content, userawareness, and engagement policies 22

23 EXECUTIVE REPORTING WITH CHECK POINT SMARTEVENT 23

24 CLOUDGUARD SAAS SUPERIOR SECURITY FOR SAAS APPLICATIONS ZERO-DAY THREATS PROTECTION COMPREHENSIVE THREAT INTELLIGENCE DATA LEAKAGE PREVENTION IDENTITY PROTECTION Prevent account takeovers SIMPLIFIED MANAGEMENT SHADOW IT DISCOVERY 24

25 2 MOBILE CLOUD Capsule WorkSpace/Docs Threat Intelligence Infrastructure Advanced Threat Prevention Applications Zero-Day Threat Protection App Protection Network Protection Device Protection Remote Access Secure Business data Protect docs everywhere Adaptive Security Automation and Orchestration Cross Cloud Dynamic Policies Multi-Cloud Sensitive Data Protection End-to-end SaaS Security Identity Protection Hybrid Cloud Media Encryption Full Disk Encryption ENDPOINT Access/Data Protection Security Multi Layered Security Advanced Threat Prevention HEADQUARTERS Access Control Advanced Threat Prevention Segmentation Threat Prevention Baseline Anti-Ransomware Threat Prevention Forensics Access Control Advanced Secure Threat Media Prevention Secure Documents MGMT - Inbound Outbound Access Control Data Protection LAN VPN IDA BRANCH LAN

26 SAAS ANGRIFFE KÖNNEN VERHINDERT WERDEN PREVENTS ACCOUNT TAKEOVER BLOCKS ZERO-DAY ADVANCED THREATS END-TO-END SAAS SECURITY COVERAGE 26

27 THANK YOU 27