Fencing the Cloud. Roger Casals. Senior Director Product Management. Shared vision for the Identity: Fencing the Cloud 1

Transcription

1 Fencing the Cloud with Identity Roger Casals Senior Director Product Management Shared vision for the Identity: Fencing the Cloud 1

2 Disclaimer Copyright 2014 Symantec Corporation. All rights reserved. Forward-looking Statements: Any information regarding pre-release Symantec offerings, future updates or other planned modification is subject to ongoing evaluation by Symantec and therefore subject to change. This information is provided without warranty of any kind, express or implied. Customers who purchase Symantec offerings should make their purchase decision based upon features that are currently available. Shared vision for the Identity: Fencing the Cloud 2

3 The Perfect Storm SECURITY & PRIVACY CLOUD MOBILITY BYOD API COMPLIANCE INTERNET OF THINGS Shared vision for the Identity: Fencing the Cloud 3

4 Network Outside Inside Evolving IT Trends: Mobile and Cloud Corporate-Owned Personally-Owned Devices Shared vision for the Identity: Fencing the Cloud 4

5 Network Out side Inside Evolving IT Trends: Mobile and Cloud Corporate-Owned Personally-Owned Devices Shared vision for the Identity: Fencing the Cloud 5

6 Evolving Fencing the IT Trends: Cloud Mobile and Cloud Shared vision for the Identity: Fencing the Cloud 6

7 Information Protection Flow Identity Assurance: 2FA Context Aware Auth: RBA Authentic. & Authorizat.: SSO Content Aware Security: DLP & Encry VIP VIP IA SIAM Info-Gate DLP & PGP Shared vision for the Identity: Fencing the Cloud 7

8 Information Protection Threat Aware Malware, Advanced Persistent Threads Content Aware Applications and Data ATP Context Aware Identity and Devices Info-Gate DLP & PGP Access Control Gateway VIP IA VIP SIAM Perimeteral Security Foggy Security Shared vision for the Identity: Fencing the Cloud 8

9 Information Protection Threat Aware Malware, Advanced Persistent Threads Content Aware Applications and Data ATP Context Aware Identity and Devices Info-Gate DLP & PGP Access Control Gateway VIP IA VIP SIAM Perimeteral Security Foggy Security Shared vision for the Identity: Fencing the Cloud 9

10 Symantec Validation and Identity Protection (VIP) Strong Security and a Better User Experience Broad Credential Options Mobile credential with Push Verification Out-of-Band Messaging Embedded VIP Credential Intel IPT Hardware Tokens Risk-based Authentication Device ID and user behavior Challenge risky logins Transaction monitoring Enterprise integration Popular enterprise applications, such as VPNs, SSO Custom app integration via API Shared vision for the Identity: Fencing the Cloud 10

11 Hardware Token Mobile, Desktop Software Embedded SMS Voice Call Device Fingerprint Registered Computer Intelligent Authentication VIP Access Push Two-Factor Authentication Options Symantec VIP Standalone OTP Credentials Out-of- Band Tokenless NEW! Shared vision for the Identity: Fencing the Cloud 11

12 Symantec Identity Access Manager Single Sign-on with Strong Authentication Identity-based Access Control User Directory Public and private cloud applications Shared vision for the Identity: Fencing the Cloud 12

13 Symantec Identity Access Manager Symantec Security Gateway SYMC-hosted Update Repo Optional Browser Add-on End User Self-Service Portals SSO Portal User Management Portal Identity Core Services Identity Protection Services ID-bridge SSO / SSP Auth Processor App Connectors ID-Service Connectors VIP Client Certificates 3 rd Parties (RADIUS) ID-service relay Message Bus Config & Status Database SW & Config Service update Svc Symantec Security Gateway Platform App Server Context Service Policy Engine Messaging Service HA & Replica Services Reporting Services Log Service Hardened CentOS Hardened CentOS / Virtual Appliance Admin Console Framework (authentication, roles, reporting) Deployment, Configuration and Policy Management Platform Configuration & Management Shared vision for the Identity: Fencing the Cloud 13

14 Symantec Identity Access Manager Shared vision for the Identity: Fencing the Cloud 14

15 Symantec Information Gateway extends context-aware and content-aware information protection to cloud services Symantec Information Gateway Visibility Compliance Intelligence Security Gain visibility into what cloud services are used by your employees Extract intelligence into how they are using them, implement security to protect information in those services Demonstrate compliance to accelerate cloud service adoption Shared vision for the Identity: Fencing the Cloud 15

16 The Information Gateway provides context-aware and content-aware secure data access in the cloud INFORMATION GATEWAY DLP Admin Console - Policy Admin, Reporting & Auditing Proxy Mail Transfer Agent VIP Content-Aware Data Classification (DLP int.) SIAM Context-Aware Data Classification (IA & VIP int.) Key Management Services Encryption & Tokenization Services PGP Server Offline Data Scanning Engine App-Connector Framework Storage-Connector Framework Shared vision for the Identity: Fencing the Cloud 16

17 VISION OF THE FUTURE Id everything Avoid good data Unified Information Management Identity Unified Security Avoid bad guys to get out to get in Shared vision for the Identity: Fencing the Cloud 17

18 VISION OF THE FUTURE Id everything Avoid good data Unified Information Management Identity Unified Security Avoid bad guys to get out to get in Shared vision for the Identity: Fencing the Cloud 18

19 IDENTITY OF EVERYTHING UNIVERSAL IDENTITY AND TRUST MODEL INTELLIGENT AUTHENTICATION OF USERS, DEVICES BIOMETRICS, LOCATION, CONTEXT, BEHAVIOR A FUTURE WITH NO PASSWORDS Shared vision for the Identity: Fencing the Cloud 19

20 Thank you! Roger Casals: Fencing the Cloud YOUR FEEDBACK IS VALUABLE TO US! Please take a few minutes to fill out the short session survey available on the mobile app the survey will be available shortly after the session ends. Watch for and complete the more extensive post-event survey that will arrive via a few days after the conference. To download the app, go to or search for Vision 2014 in the itunes or Android stores. Shared vision for the Identity: Fencing the Cloud 20