Today s workforce is Mobile. Cloud and SaaSbased. are being deployed and used faster than ever. Most applications are Web-based apps

Transcription

1

2 Today s workforce is Mobile Most applications are Web-based apps Cloud and SaaSbased applications are being deployed and used faster than ever

3 Hybrid Cloud is the new normal. % plan to migrate >50% of their Apps to the Cloud Sources: State of Application Delivery Survey, 2016

4 Why are Apps moving to the cloud? Improve Time to Market Reduce OpEx Reduce CapEx Sources: F5 State of Application Delivery Survey, 2016

5 Sources: ²Forbes, ³F5 State of Application Delivery Survey, 2016

6 From what we can see in the market Majority of our customers adopt the following Hybrid Cloud Strategy Move non Critical Apps to SaaS New Apps with a Cloud 1st Strategy Migrate some existing Apps to a Private Cloud Trend to move to Non Mission Critical Apps to SaaS Focus on their business Move from Capex to Opex basic IT services

7

8 90% 28% Firewalls IDS/ IPS DLP SIEM Anti Virus 28% Firewalls IDS/ IPS DLP APT Anti Virus

9 Challenges of Managing Access Today Rapidly expanding, changing mobile workforce Explosion in number of users, use cases, in-use devices Increased virtualization Fast rising number of security threats and attacks Need to manage access based on identity and context

10 AAA Management with 3rd parties Apps in the Cloud still need to follow the same security mechanisms User Acceptance multiple passwords.

11 User s Authentication and Experience Credential in many places? Password bucket Pa55W0rd? ;PassWor99 Pa5Sw)rD! abc123 Office365 L4-7 Services Identity & Authorization Concur Expenses Application Data Center Salesforce

12

13

14 Pa55W0rd L4-7 Services Identity & Authorization Application Data Center

15 User Identity just User ID User ID Location End point Device health Device type Malware Sensitive Data Human Allow Deny Challenge OTP Client Cert. User ID Location End point Device health Device type Malware Sensitive Data Human Allow Deny Challenge OTP Client Cert.

16 User Identity and Device Information Network / + + Connection Application Health and Risk

17 Authentication Device type and integrity OS Operating system Browser Location Access method!!! App location App importance and risk v3.1 App type/ version Network integrity Network quality and availability Connection integrity

18 Authentication, authorization, and SSO to all applications Virtual Apps VDI Secure Web Gateway Websites/Web Applications Apps Access Management Remote Access and Application Access Enterprise Apps Virtual Edition Appliance Chassis Mobile Apps Enterprise Mobility Gateway Identity Federation/SSO Cloud, SaaS, and Partner Apps

19 Users Adaptive Auth Federation (SAML) SSO Selection Endpoint Validation SAML Pass-through Simple Assertion Apps Token Kerberos Delegation Password Step-Up Auth Dynamic Forms Certificates Fraud Protection Certificates Private/Public Cloud Transforms one type of authentication into another Supports various standards-based protocols (SAML, Kerberos, NTLM) Enables flexible selection of SSO techniques appropriate to the application Allows for centralized session control of all applications, even SaaS apps

20 Pa55W0rd SAML SP Office 365 SAML IdP SAML SP Identity & Authorization Concur Expenses Application Data Center SAML SP SalesForce

21 Anonymous access to and re-validation of AD, LDAP, or RADIUS flat-file authentication per request within an access session, for accessing additional, sensitive web URIs, or to extend a session XYZ Corporation XYZ Corporation Mobile User Private Cloud Apps Public Cloud Apps Corporate or personal device, remote/mobile user LOGIN AD, LDAP, RADIUS Enterprise Corporate Users Corporate device, internal user Single-factor or multifactor authentication Remote User LOGIN AD, LDAP, RADIUS Directory Services Contractor XYZ Corporation Corporate Applications F5 Networks & Veracomp LOGIN F5 Networks, Inc CONFIDENTIAL INTERNAL USE ONLY AD, LDAP, RADIUS 22

22 XYZ Corporation On-Premises Infrastructure Corporate Users Public Cloud Private Cloud LOGIN Users SAML Identity management Multi-factor authentication Attackers SAML Real-time access control Access policy enforcement Directory Services Corporate Applications Office 365 Google Apps Salesforce Identity federation SaaS

23

24 Dramatically reduces costs Delivers seamless access Increases user productivity Simplifies administration Enhanced adaptive access and authentication

25 Simplifies Improves performance and usability, while simplifying administration Secures Enhances application and virtualized apps and desktop security Protects Expands data loss prevention and guards against web-based attacks

26 CONTEXT Federated identity Single sign-on Granular access control VISIBILITY Inbound / Outbound Dynamic service chaining Broad ecosystem support CONTROL Web Application Firewall Anti DDoS Web fraud

27 Think differently about security. Protect your apps, secure your data. Choose a platform for security consolidation that gives you a secure visibility zone for tomorrow. Get better value today from existing investments.

28 (Availability) (Confidentiality) (Confidentiality) (Integrity) (Availability) (Confidentiality) (Integrity) (Availability) (Integrity)

29

30

31

32

33

34