Novell Cloud Security Service Reducing Risk by Securing the Cloud. Stefan Stiehl Senior Sales Technology Specialist

Transcription

1 Novell Cloud Security Service Reducing Risk by Securing the Cloud Stefan Stiehl Senior Sales Technology Specialist

2 Disclaimer for Product in Development Unpublished Work of Novell, Inc. All Rights Reserved. This work is an unpublished work and contains confidential, proprietary, and trade secret information of Novell, Inc. Access to this work is restricted to Novell employees who have a need to know to perform tasks within the scope of their assignments. No part of this work may be practiced, performed, copied, distributed, revised, modified, translated, abridged, condensed, expanded, collected, or adapted without the prior written consent of Novell, Inc. Any use or exploitation of this work without authorization could subject the perpetrator to criminal and civil liability. 2 General Disclaimer This document is not to be construed as a promise by any participating company to develop, deliver, or market a product. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. Novell, Inc. makes no representations or warranties with respect to the contents of this document, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. The development, release, and timing of features or functionality described for Novell products remains at the sole discretion of Novell. Further, Novell, Inc. reserves the right to revise this document and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. All Novell marks referenced in this presentation are trademarks or registered trademarks of Novell, Inc. in the United States and other countries. All third-party trademarks are the property of their respective owners.

3 Pressures Facing Your Customers Security and Compliance Secure access to resources Track who did what when Simplify and control multiple username and passwords Cost Reduction Mandate Manage different web applications Reduce hardware and software costs Lower help desk costs Business Agility Add/remove applications Add/change/remove users Add/remove partners Integrate new businesses 3 Many of these concerns can be solved using an identity and access management solution (IAM)

4 What is Identity and Access Management (IAM)? IAM solutions address the fundamental problem of managing who has access to what, Benefits of IAM include Single sign on (SSO) to different internal and external applications Manage changes to user identities and access rights Reduce password-related calls to the help desk Ensure that users have the right access to right resources Manage access for partners, customers and other users outside the organization Keeps sensitive information behind the firewall 4

5 Creating IT Administration Nightmare User data/ permissions User data/ permissions User data/ permissions User data/ permissions Users User data/ permissions Enterprise Challenge Multiple usernames/passwords IT Department Multiple identity silos Disparate administration tools Directory User data/ permissions Apps Challenge in timely deprovisioning accounts of ex-employees Systems/ tools 5

6 Novell Cloud Security Service Novell Cloud Security Service is the only multi-tenant identity and access management solution that allows you to manage a multi- SaaS environment and also provide its customers with a secure gateway to SaaS applications. 6 Confidential material, not for distribution without permission

7 NCSS Key Features 7 Active security services for annexing cloud services into an enterprise, including federated authentication and provisioning, role mapping, audit event routing, workflow participation, and secure locality based storage Connectors to SaaS and PaaS providers enterprise Identity systems Deployment, configuration and monitoring tools for service management of NCS by cloud providers Per-enterprise view and management of their use of SaaS and PaaS, and the connections to their internal systems

8 Conceptional Use Cases

9 IdP in Cloud using Secure Bridge Use Case Secured Customer to Cloud User Store User Store NCS Secure Bridge Novell Cloud Security Services IdP AuthN Service 2 SAML1, SAML2, WS-Fed Relying Party Participant SaaS Application User Authentication 1 3 User Accesses SaaS Resources User 9

10 IdP in Cloud using Secure Bridge Use Case Secured Customer to Legacy System User Store Hosting Center User Store NCS Secure Bridge Novell Cloud Security Services IdP AuthN Service SSO Form Fill over SSL Legacy Application User Authentication 1 3 User Accesses Legacy Application User 10

11 Novell Cloud Security Services Use Case Customer to Cloud IdP Participant User Store IdP Service AuthN Service SSO via SAML1, SAML2, WS-Fed, InfoCard Novell Cloud Security Services 2 SAML2 Relying Party Participant SaaS Application User Authentication 1 3 User Accesses SaaS Resources User 11

12 Implementation Cases

13 Managed Service Provider View Single-Tenant Implementation Scenario 13

14 Managed Service Provider View Multi-Tenant Implementation Scenario 14

15 Enterprise Customer View Scoped Implementation Scenario 15

16 Implementation Scenarios

17 NCSS Small Deployment 1 Multi-tenant Director With configuration backup/restore services 1-10 Customers/Tenants, each with 1 Secure Bridge and 1-2 Security Brokers connecting to 1-20 SaaS applications Director Provider Console Customer Console Audit Collection/Reporting Billing Collection/Reporting Multi-tenant Operations Customer Connections Security Brokers SaaS Connections Tenant A... Tenant B Tenant C 17

18 NCSS Medium Deployment Multi-tenant Director Cluster** 1-8 Directors Director Cluster Provider Console Customer Console Audit Collection/Reporting 1-50 Tenants, each with 1 Secure Bridge and 1-5 Security Brokers connecting to 1-50 SaaS applications Billing Collection/Reporting Multi-tenant Operations Database Cluster Customer Connections Tenant A Security Brokers... SaaS Connections Tenant B Tenant C 18 **Requires clustered DB server deployment

19 NCSS Large Deployment Database Cluster Multi-tenant Director Cluster** 1-5 Directors Console hosting Multi-tenant Operations 1-5 Audit Servers 1-5 Billing Servers Director Cluster Audit Cluster Billing Cluster Tenants, each with 1 Security Broker and 1-5 Security Brokers connecting to SaaS applications Customer Connections Security Brokers SaaS Connections Tenant A Tenant B Tenant C 19 **Requires clustered DB server deployment

20 Interfaces to Cloud Security

21 Novell Cloud Security Services Service Provider View Configuring Director 21

22 Novell Cloud Security Services Service Provider View Configuring Director 22

23 Novell Cloud Security Services Service Provider View Configuring Connectors 23

24 Novell Cloud Security Services Service Provider View Configuring Customers 24

25 Novell Cloud Security Services Service Provider View Cost Accounting 25

26 Novell Cloud Security Services Service Provider View Cost Accounting 26

27 Novell Cloud Security Services Service Provider View Single Tenant Home Panel 27

28 Novell Cloud Security Services Service Provider View Single Tenant Billing 28

29 Novell Cloud Security Services Customer View Home Panel 29

30 Making IT Work As One 30

31 Unpublished Work of Novell, Inc. All Rights Reserved. This work is an unpublished work and contains confidential, proprietary, and trade secret information of Novell, Inc. Access to this work is restricted to Novell employees who have a need to know to perform tasks within the scope of their assignments. No part of this work may be practiced, performed, copied, distributed, revised, modified, translated, abridged, condensed, expanded, collected, or adapted without the prior written consent of Novell, Inc. Any use or exploitation of this work without authorization could subject the perpetrator to criminal and civil liability. General Disclaimer This document is not to be construed as a promise by any participating company to develop, deliver, or market a product. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. Novell, Inc. makes no representations or warranties with respect to the contents of this document, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. The development, release, and timing of features or functionality described for Novell products remains at the sole discretion of Novell. Further, Novell, Inc. reserves the right to revise this document and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. All Novell marks referenced in this presentation are trademarks or registered trademarks of Novell, Inc. in the United States and other countries. All third-party trademarks are the property of their respective owners.