Protecting the Irreplacable. November 2013 Athens Ian Whiteside, F-Secure

Transcription

1 Protecting the Irreplacable November Athens Ian Whiteside, F-Secure

2 PC Sales continue to fall. Lack of innovation and no excitement Windows 8 doesn t seem to have excited the consumers Tablets and Smart devices on a rise Enterprise deployment cycles budgetary constraints Desktop virtualization and cloud client computing deployments accelerate

3 The PC market today

4 What is Virtualization Virtualization is really a whole family of technologies and not just one thing Server virtualization Application virtualization Desktop virtualization Presentation virtualization Profile virtualization A virtual machine (VM) is a software implementation of a machine (i.e. a computer) that executes programs like a physical machine. In computing, a hypervisor, also called virtual machine monitor (VMM), allows multiple operating systems to run concurrently on a host computer a feature called hardware virtualization. The hypervisor presents the guest operating systems with a virtual platform and monitors the execution of the guest operating systems. Virtual desktop Infrastructure (VDI) is a desktop-centric service that hosts users desktop environments on remote servers and/or blade PCs, which are accessed over a network using a remote display protocol.

5 What issues are looking to be solved Virtual solutions help solving Critical BYOD and CYOD questions Hardware utilization and cost reductions Elasticity 5

6 Industry analysts Gartner in general predicts steady VDI growth for the next 3-5 years 6

7 VDI/Client virtualization market 7

8 Most important IT priorities over the next months, by company size 8

9 Problem: Manage and secure mixed environments? VDI VDI VDI VDI VM VM VM VM VDI VDI VDI VDI VM VM Physical server Physical server Desktop Desktop Desktop Desktop Desktop TS TS TS vsphere vsphere XenApp XenApp XenApp KVM Hyper-V Hyper-V Physical server Physical server Desktop Desktop Desktop Desktop AWS AWS

10 The Security Manager with a Headache 10

11 How does this all relate to F-Secure A virtual desktop is no more secure than a standard desktop A virtual desktop also needs to be up to date with the latest patches for all your applications A virtual desktop needs to be treated as a standard desktop but does need special consideration and specialized security solutions in most cases 11

12 Performance vs Protection Performance Protection 12

13 Our credentials.. We are impressed with the roadmap and strategy vision the company has laid out for the next 2 years Performance Strongest strategy Best Protection Award 2011 and 2012 March real world Protection Tests 100% Out of all corporate endpoint protection products we've reviewed, F-Secure Client Security offered by far the best protection 13

14 Security challenges with VDI In addition to security threats known in physical environments, virtualized environments pose specific risks: Hypervisor is software and thus vulnerable to attacks based on (un)known exploits VMware ESX source code 'leaked online Using unpatched or outdated templates for creating new VMs Uncontrolled generation, usage and movement VMs (so called VM creeping ) VM-to-VM, VM-to-hypervisor network eavesdropping Information disclosure (when VM is in storage or transit) CPU and I/O congestion 14

15 The security Challenges 15 F-Secure Confidential

16 Limitations of agent-less solutions Complex malware (like Zeus) run solely in memory and don t create malicious files on the file system, which makes it difficult to detect using standard file-based interception. Signature-based scanning is ineffective against modern day malware Blocking exploits and sophisticated attacks requires multi-layer protection, thus technologies like HIPS and behaviour based scanning can be difficult (if not impossible) to implement without an agent running on a virtual machine. End-point security is not just anti-malware. For both physical and virtual environment it is highly recommended to have patch management, device control, application firewall, password management and identity protection in place. 16

17 Aim for best protection and better performance (*) see notes SVCE must provide 100% detection against real-world attacks like we do with our existing end-point protection products SVCE performance must be on par or better than competition (**) see notes 17 F-Secure Confidential

18 The problem. Current solutions do not offer enough protection. 18

19 Introducing SVCE

20 F-Secure vision As companies will use mixed environments based on different VI/VDI platforms and running different guest operating systems, F-Secure will commit into the hypervisor agnostic, virtualization friendly security solution providing the best protection possible for virtual desktops and servers. 20 F-Secure Confidential

21 How it works F-Secure Policy Manager provides centralized management installed on physical and virtual machines. F-Secure Policy Manager Console is the administration console to define policies, deploy F- Secure software and monitor status of security. F-Secure Client Security and F-Secure Server Security endpoint security protection installed on physical or virtual desktops and servers respectively. F-Secure Management Agent communicates with F-Secure Policy Manager, applies defined policies and sends status information and alerts to the Policy Manager Server. F-Secure Automatic Update Agent responsible for downloading and installing software and database updates. F-Secure Offload Scanning Agent offloads malware scanning and content reputation checking to minimize the performance impact. F-Secure Scanning and Reputation Server the virtual appliance based on hardened Linux platform. It provides malware scanning and content reputation services. 21 F-Secure Confidential

22 Technical details F-Secure Security for Virtual and Cloud Environments is comprised of: F-Secure Client Security F-Secure Server Security F-Secure Scanning and Reputation Server This Beta release of the SVCE solution supports the following virtualization platforms: VMware vsphere 5.0, 5.1 with VMware vcenter Server 5.0, 5.1 Citrix VDI-in-a-Box 5.x for VMware ESXi F-Secure Security for Virtual and Cloud Environments solution can protect virtualized servers and desktops running the following operating systems: Microsoft Windows XP with Service Pack 3 Microsoft Windows Vista with Service Pack 2 or newer Microsoft Windows 7 with Service Pack 1 or newer Microsoft Windows 8 Microsoft Windows Server 2003 with the latest service pack Microsoft Windows Server 2003 R2 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Small Business Server 2003 Microsoft Small Business Server 2003 R2 Microsoft Small Business Server 2008 Microsoft Small Business Server 2011, Standard edition Microsoft Small Business Server 2011, Essentials Microsoft Windows Server 2012 Microsoft Windows Server 2012 Essentials 22 F-Secure Confidential

23

24

25 younited for Business File backup, sync and sharing Jukka Puputti, Regional Director

26 Your information is more valuable than the device

27 You manage the security of your PCs, laptops, servers and mobile devices from one place. Why not your content cloud solution? Protection Service for Business

28 F-SECURE PROTECTION SERVICE FOR BUSINESS COMBINING CONTENT AND SECURITY UNIFIED MANAGEMENT PORTAL younited for Business Protection Service for Business Servers Workstations Mobile & Tablet & Spam Software Updater 28 F-Secure Partner Confidential

29 THE MARKET IS THERE

30 MULTI-DEVICE WORLD SOCIAL NETWORKS/CLOUDS GROWTH OF STORED DATA STORE, SEARCH, STREAM, SHARE BYOD (Bring Your Own Device) FROM INTERNAL IT TO CLOUD CONSUMERIZATION OF IT FROM TO COLLABORATION

31 INDUSTRY ANALYSTS AGREE ON THE IMPORTANCE OF FILE SYNC AND SHARE SERVICES IN BUSINESS 31 F-Secure Partner Confidential

32 ADOPTION DRIVEN BY EMPLOYEES USING THE SERVICES ON THEIR OWN CAUSING HEADACHE FOR IT MANAGERS Source: Spice Works, Catching Up to the Cloud: Steady migration into cloud-based file sharing, , and productivity services. July 32 F-Secure Partner Confidential

33 WHY COMPANIES LOOK FOR FILE SHARING Source: Spice Works, Catching Up to the Cloud: Steady migration into cloud-based file sharing, , and productivity services. July 33 F-Secure Partner Confidential

34 TOP CONSIDERATIONS FOR SOLUTION SELECTION Source: Spice Works, Catching Up to the Cloud: Steady migration into cloud-based file sharing, , and productivity services. July 34 F-Secure Partner Confidential

35 OUR SOLUTION

36 younited for Business File backup, sync and sharing * Central Management PSB Portal 36 F-Secure Partner Confidential

37 CENTRALIZED BUSINESS ACCOUNT MANAGEMENT RETAIN IT CONTROL, WITHOUT SACRIFICING USER BENEFITS Web-based management portal Different views for service partners and customers Manage subscriptions, younited accounts for your employees, security of the computers/ mobile devices / servers As Managed Service Service Provider manages security for their customers As Self-Service End customer manages their own security As an admin you can see how much quota user has and how much has been used You can also see which devices he has connected to his account 37 F-Secure Partner Confidential

38 How is younited for Business different from the consumer version Feature Younited (for consumers) younited for Business Common Features Store, Sync, Share Access anywhere, any device Cloud aggregation Collaboration (coming) Centralized Account Management and Monitoring Users, quota, subscriptions, dashboard Flexible multi-user licensing and centralized company billing Local support and services (from reseller partners)

39 ACCESS ALL YOUR FILES AND INFORMATION FROM ANYWHERE, WITH ANY DEVICE And there is a lot more you can do with younited Enhance teamwork productivity Don t spam everyone's mail boxes with huge attachments The easiest way to share those flipboard drawings from a brainstorming session Have always the latest version of the documents with you, even offline Automatically have a copy of all your files in the cloud in case something happens Manage files even from your other clouds and do it safely

40 THE COMPETITION

41 WE TARGET THE SMB SECTOR EASY IS THE KEYWORD the way employees like it Enterprise focus SMB focus the way IT departments want to have it 51 F-Secure Partner Confidential

42 KEY COMPETITIVE ADVANTAGES Overall security not just the product, also company heritage and culture, European location Thanks to our partners, being close to the customers And the key unique product level features Safest cloud in world, e.g. automatic malware scanning built with award winning technology of F-Secure Cloud aggregation is a unique value proposition for users who already use other cloud services We support both backup and sync functionalities, not just one or the other We provide the best content centric user experience optimized for both PC and key mobile platforms 52 F-Secure Partner Confidential

43 THE BUSINESS OPPORTUNITY

44 BUSINESSES ARE MORE LIKELY TO PAY FOR CLOUD SERVICES THAN CONSUMERS 54 F-Secure Partner Confidential

45 HOW TO MONETIZE A CLOUD SERVICE OFFERING Customer Loyalty RETENTION, LIFETIME VALUE Indirect Revenue SERVICES, CROSS-/UPSELL Direct Revenue MARGIN FROM LICENSE SALE 55 F-Secure Partner Confidential

46 F-SECURE UNIQUELY FOCUSING IN SALES AND SERVICE OPPORTUNITY FOR THE PARTNERS Solution Provider Service Partner Service Partner Company Company Company Company Solution Provider Full Systems ownership Distribution & Ordering Billing & Provisioning Sales & marketing support SMB Local Ownership Smooth Experience Automatic Updates Branded Services Customer Ownership Sales & Marketing Billing 1 st Line Support

47 OUR REFERENCES

48 F-SECURE IS THE LEADING EUROPEAN CONTENT CLOUD PROVIDER, SERVING MILLIONS OF USERS

49 Protecting the irreplaceable f-secure.com

50