Solutions for admission control and data loss prevention in a modern corporate network

Transcription

1 Solutions for admission control and data loss prevention in a modern corporate network 15 th Finance Tech Forum Yasen Spasov Sales & Pre-sales Manager

2 Executive Summary Founded in 1995 Subsidiary of INTRACOM Telecom (100%) which major shareholders are JSC SITRONICS (51%) and INTRACOM Holdings (49%) Main activities: design, development, implementation & support of high quality technologies and turnkey projects Number of employees: 60 Broad portfolio of several core business offerings: Wireless Network Systems Telco Software ICT Solutions and Services Variety of customers in the sectors of: Telecommunications Enterprise Financial Public Key partnerships with best-of-breed vendors Certified in accordance with EN ISO 9001:2008 standard requirements 2

3 Corporate World END USER EXPECTATIONS Over 15 Billion devices by 2015, with average worker with 3 devices New workspace: anywhere, anytime 71% Next Gen Y workforce do not obey policies 60% will download sensitive data on personal device IT TRENDS 50% workloads are virtualized - to increase efficiency 2/3 of workloads will be in the cloud by % of the world s mobile data traffic will be video in 2016 Mobile malware has doubled (2010 to 2011) 3 REDUCE SECURITY RISK IMPROVE END USER PRODUCTIVITY INCREASE OPERATIONAL EFFICIENCIES

4 Addressing the needs Cisco Identity Services Engine (ISE) Authorized Access How can I restrict access to my network? Can I manage the risk of using personal PCs, tablets, smart-devices? Access rights on-prem, at home, on the road? Devices are healthy? Guest Access Can I allow guests Internet-only access? How do I manage guest access? Can this work in wireless and wired? How do I monitor guest activities? Non-User Devices How do I discover non-user devices? Can I determine what they are? Can I control their access? Are they being spoofed? 4

5 Previous Cisco TrustSec Solution Portfolio Identity & Access Control Access Control System AnyConnect Identity & Access Control + Posture NAC Manager NAC Server NAC Agent Device Profiling & Provisioning + Identity Monitoring NAC Profiler NAC Collector Standalone appliance or licensed as a module on NAC Server Guest Lifecycle Management 5 NAC Guest Server

6 Next Generation Solution Portfolio Identity & Access Control Access Control System AnyConnect Identity & Access Control + Posture Device Profiling & Provisioning + Identity Monitoring NAC Manager NAC Server NAC Profiler NAC Collector Standalone appliance or licensed as a module on NAC Server ISE 6 Guest Lifecycle Management NAC Guest Server NAC Agent

7 Secure Access: Classification Attributes Who? Employee Attacker Guest What? Personal Device Company Asset How? Wired Wireless VPN Starbucks Headquarters When? Week Days Weekends 8:00 AM 6:00 PM (8:00am 5:00pm) PST 7

8 Providing the context essential to control Identity 1 Cisco ISE Profiling HTTP IEEE 802.1x EAP User Authentication NetFlow SNMP HQ Company Asset 2 Profiling to Identify Device VLAN 10 VLAN 20 4 Corporate Resources DNS RADIUS DHCP 2:38 p.m. Personal Asset 3 Posture of the Device Wireless LAN Controller Unified Access Management Policy Decision 5 Enforce Policy in the Network Internet Only 6 Full or Partial Access Granted 8

9 What is DLP? Where is your confidential data? How is it being used? How best to prevent its loss? DISCOVER MONITOR PROTECT DATA LOSS PREVENTION (DLP) 9

10 Symantec Products Storage Network Discover Data Insight Network Protect Endpoint Endpoint Discover Endpoint Prevent Network Network Monitor Network Prevent Management Platform Enforce Platform 10

11 for Storage Storage Network Discover Data Insight Network Protect Symantec Advantage The broadest coverage including file servers, databases, , websites, groupware Custom scan management: Inventory, incremental and parallel scans Identify frequent users of confidential information Data Insight Extensive fix capabilities: ERM and encryption support, plus custom FlexResponse actions 11

12 for Endpoint Endpoint Endpoint Discover Endpoint Prevent Symantec Advantage Efficient, unobtrusive discovery Content-aware coverage of all activity including USB, print, fax, , web Continuous protection even when disconnected from the corporate network Protect remote employee data even when in a private cloud Built-in agent management Extend endpoint security initiatives 12

13 for Network Network Network Monitor Network Prevent Symantec Advantage Scalable network monitoring Social media coverage Hosted messaging and web security services support Broad coverage of MTAs, gateways and proxies Integration with Symantec BrightMail Gateway (SBG) 13

14 Incident Review: Tablet Snapshot (Gmail) This Gmail incident shows the message was blocked and it shows exact matches. 14

15 Symantec Architecture MTA or Proxy SPAN Port or Tap Disconnected 15 SECURED CORPORATE LAN DMZ

16 Our Values Expertise local and international Experience solution provider Excellence drive customer s success through innovative solutions 16

17 INTRACOM BULGARIA S.A. 36 Dragan Tzankov Blvd., Interpred WTC, Block A, Floor 9, 1040 Sofia, Bulgaria tel.: fax: