Security 2.0: Balancing Business Enablement and Information Security

Transcription

1 Security 2.0: Balancing Business Enablement and Information Security 10 New Requirements for Your Business Brian Wrozek IT Security Director Texas Instruments

2 Why Your Current Firewall is Obsolete

3 More Boxes, More Cost, More Complexity

4 What Should You Do Now? INSANITY: Doing the same thing over and over again and expecting different results Page 4

5 Challenge for IT Vendors and IT Organizations Innovate or Die Page 5

6 Which Company is the Innovator? Page 6

7 This is all quite interesting but... What does this have to do with Network Security? Page 7

8 2007 The Need for Security Innovation Merely having an IPS in the same appliance as the firewall is not an NGFW. The products must be tightly coupled, interoperate, and have intelligent traffic handling, traffic inspection and blocking.

9 2007 Introducing Next-Generation Firewalls Applications - Users - Content

10 2009 Gartner Defines NGFW Requirements Application Awareness and Full Stack Visibility Integrated Rather Than Co-Located IPS Extra-Firewall Intelligence to Identify Users Standard First-Generation Firewall Capabilities Support bump in the wire Deployments

11 2010 Gartner MQ Who is the Innovator? Cisco Juniper Networks ability to execute McAfee Stonesoft WatchGuard Fortinet Check Point Software Technologies Palo Alto Networks SonicWALL NETASQ 3Com/H3C phion Astaro Source: Gartner niche players visionaries completeness of vision As of March 2010

12 Enterprise 2.0 is Just Getting Started

13 Gartner Recommendation Innovate Now Synchronize the refresh cycle of your network firewalls and IPS products, and use that opportunity to migrate to next-generation firewalls. Page 13

14 What Your Next Firewall Must Do for You and how it will help your business Page 14

15 1) Identify and Control All Applications, All Ports Applications ??? Internet applications account for 70%+ of corporate network traffic. Controlling all applications is necessary to control the business. Page 15

16 2) Identify and Control Encrypted SSL Traffic SSL Connections SMTP 465 SSL traffic accounts for 15-50% of network traffic on many ports. Businesses need to balance personal privacy with IT security. Page 16

17 3) Apply Policy Control to Unknown Traffic Unidentified Traffic SMTP 465 Custom??? Unknown traffic could be legitimate, or a threat to the business. All your traffic including unknown must be controlled by policy. Page 17

18 4) Identify and Control Security Circumventors Circumventors Proxy.Or g Circumventors create open paths for inbound threats, outbound leakage. Blocking circumventors is necessary for risk mitigation. Page 18

19 5) Control Applications Sharing a Single Session Multiple applications can be launched in a single session. Visibility and policy control must be maintained throughout session. Page 19

20 6) Control Functions Within Specific Applications Admin Docs Wiki Blog Groove Sharepoint is a collaborative application with multiple functions. Businesses must control functions by user for safe enablement. Page 20

21 7) Scan Collaborative Apps for Threats, Leakage IPS Block Threats Prevent Leakage Collaborative applications improve communications and productivity. All inbound and outbound data must be scanned to protect the business. Page 21

22 8) Extend Visibility and Control to Remote Users Applications ??? (no downloads) (no posting) Employees are increasingly working outside the corporate network. Policies must be enforce based on laptop security, app functions. Page 22

23 9) Integrate Security Intelligence and Policy Control Network Traffic Applications Policy Content Users Security policies must be unified and simplified to be effective. Controlling applications, users, content ensures IT-business alignment.

24 10) Ensure App Visibility Does Not Slow Business Applications ??? Visibility and control must be fully enabled, continuous process This process must not impact performance of the business. Page 24

25 The Value of Innovation to Your Business Regain visibility and control of three key business assets: Applications safely enable Enterprise 2.0 for the business Users ensure that they are safe and productive Content stop threats to business, control data leakage

26 Where to Find This Innovation Next-Generation Firewalls Complete visibility and control of all Applications, Users, and Content Performance up to 20Gbps

27 Elegant Integration of Next-Generation Firewall + IPS Step 1 Reduce the attack surface Step 2 Clean allowed applications Step 3 Alignment IT-business Block 113 P2P applications with a single policy Scan SharePoint for IIS and SQL related threats Minimize the risks Internet applications and threats Block evasive apps IPS cant see Limit high risk applications to specific users Scan Facebook for application threats Koobface, etc. Disable high risk app functions Maximize the rewards

28 Learn More About Next Generation Firewalls Page 28

29 Thank You!