Walter Bogorad, Lead Architect Aman Manik, Principal Product Manager. Secure File Sharing Using Norton Zone powered by Symantec

Transcription

1 Secure File Sharing Using Norton Zone powered by Symantec Walter Bogorad, Lead Architect Aman Manik, Principal Product Manager Secure File Sharing Using Norton Zone powered by Symantec 1

2 Agenda Norton Zone powered by Symantec Secure Access and Sharing Policies Mobile Security Encryption and Key Management Q & A Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

3 The explosive growth of mobility, consumerization, and BYOD has transformed the IT world like few trends have before. T. McClure Enterprise Strategy Group (ESG) Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

4 Growth driven by rapid employee adoption Employees are solving for themselves Creates a difficult situation for IT IT needs to maintain control and security of information assets Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

5 What is EFSS? Enterprise file sync and share Largely consumer beginnings Enables sharing files for collaboration, synching across devices Addresses limitations of sharing via and FTP Offered in public cloud, hybrid and private on premise models Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

6 Norton Zone is the first public cloud sync and share service with advanced encryption and key management. M. Fleming, C. Kolodgy, C. Gopal IDC Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

7 Norton Zone is a secure file sharing solution for anytime, anywhere access 100% SaaS offering Unlimited storage Strong security Convenient control interface for IT Sync across multiple platforms Ideal for easily sharing files with anyone Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

8 Norton Zone is built and managed by Symantec experts who understand IT needs 25+ years of experience in securing the world s data Employs Industry leading security testing Symantec focuses on file safety and security first Protecting 135+ million consumers via Norton brand Protecting 100% of the Fortune 500 Threat modeling Penetration testing Security auditing from multiple experts SOC1 and ISO certified SYMC runs its own data center for security Files encrypted using patented key encryption Files are scanned for malware and viruses before being shared Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

9 Secure Access and Sharing Policies Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

10 Norton Zone enables single sign on using industry standard SAML 2.0 OTP App 2FA Provider Ability to authenticate and import user details Automated user provisioning and de-provisioning Enterprise 2-factor authentication options Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

11 Norton Zone Security and Sharing Policies Security Set Inactivity Timeout Disable Desktop Sync Collaboration Restrict Sharing Links Restrict Sharing By Domain Restrict Sharing to Business Users Individual Specify Mobile Access Enable Offline Viewing Disable Desktop Sync Restrict Sharing` Links Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

12 Mobile Security Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

13 Mobile Security Centralized SSO Data Encryption Data Containment Directory authentication Encryption of offline data Open-in controls, copy/paste, share controls, etc. Zone manages these security elements through Mobile Policies Device Management App Wrapping Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

14 Norton Zone Mobile Policies Require Additional Passcode Restrict Access By Platform Prevent Offline Viewing Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

15 Norton Zone Device Management View All Devices Linked to a User Remotely Unlink Remotely Wipe Local Content Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

16 Norton Zone and Symantec App Center Separate Wrapped Zone Apps managed through Symantec App Center Encryption (FIPS) at rest on mobile device Disable ios7 features Symantec App Center Apply mobile specific policies Policies Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

17 Encryption and Key Management Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

18 Data susceptibility to breach Data at Rest Data in Transit Duration Long (days) Short (ms) Medium Location Persistent Deterministic (file system) Volatile Non-Deterministic (server farm VM) Breach Susceptibility More Less Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

19 Encryption approaches Server Side Client Side Implementation and management effort Ability to include addon services Low High High Low Key location Provider Client Privacy Provider can access data at will Complete Confidentiality Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

20 Client side encryption constraints Trust No One Popular sentiment among bloggers BUT Client side encryption has significant constraints Enterprises need: DLP e-discovery off-boarding, etc. Value Add-Ons: Search Thumbnail Generation Antivirus Scan Trust Required to Install Client Anyway Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

21 Introducing Symantec Multiblind Key Encryption (MBKE) Server side encryption Easy File Sharing Support for Add-ons DLP ediscovery Anti-virus MBKE Client side encryption Data Confidentiality At Rest Provider cannot access customer data at will Drawing benefits from both approaches Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

22 Encryption Primer Symmetric Asymmetric Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION 2014

23 MBKE in action: User uploads file User A Record Public Key User A Encrypted Private Key File Record File Key SYMANTEC VISION 2014

24 MBKE in action: User A Shares File with User B User A Record Public Key User A Encrypted Private Key User B Record File Record for A Public Key Encrypted Private Key File Record for B User B SYMANTEC VISION 2014

25 MBKE integration with Symantec Encryption Management Server (SEMS) User A Record Public Key User A Encrypted Private Key File Record SEMS SYMANTEC VISION 2014

26 Future of encryption and key management Encryption on end points Encryption outside public clouds Currently on Mobile devices Extend to desktops Provide DRM capabilities Provider cannot see neither key no content Encryption either on-prem or in private cloud Patent pending Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

27 Key Takeaways File sharing is increasingly becoming an enterprise requirement Success requires addressing end user desires but also corporate operational and information security needs Norton Zone is robust and easy-to-use secure file sharing with: Security minded design A patented encryption approach Highly rated end user apps Easy Administration Secure authentication Mobile security Symantec owned datacenters Secure File Sharing Using Norton Zone powered by Symantec SYMANTEC VISION

28 Thank you! YOUR FEEDBACK IS VALUABLE TO US! Please take a few minutes to fill out the short session survey available on the mobile app the survey will be available shortly after the session ends. Watch for and complete the more extensive post-event survey that will arrive via a few days after the conference. To download the app, go to or search for Vision 2014 in the itunes or Android stores. 28

29 Thank you! Walter Bogorad Aman Manik (925) (650) Copyright 2014 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice. Secure File Sharing Using Norton Zone powered by Symantec 29