Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security...

24
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential Presentation_ID © 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential Presentation_ID Ahmed Etman [email protected] Borderless Network Lead, Africa & Levant Cisco Security Borderless Network Strategy

Transcript of Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security...

Page 1: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID © 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID

Ahmed [email protected] Network Lead,Africa & Levant

Cisco Security Borderless Network Strategy

Page 2: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 2

Traditional Corporate Border

Corporate Border

Branch Office

Applications and Data

Corporate Office

Policy

Attackers CustomersPartners

Page 3: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 3

Mobility and CollaborationIs Dissolving the Internet Border

Corporate Border

Branch Office

Applications and Data

Corporate Office

Policy

Attackers Customers

Home Office

Coffee Shop

Airport

Mobile User Partners

Page 4: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 4

Cloud Computing Is Dissolving the Data Center Border

Corporate Border

Branch Office

Applications and Data

Corporate Office

Policy

Attackers

Home Office

Coffee ShopCustomers

Airport

Mobile User Partners

Platformas a Service

Infrastructureas a Service

Xas a ServiceSoftware

as a Service

Page 5: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 5

Customers Want Business Without Borders

Corporate Border

Branch Office

Applications and Data

Corporate Office

Policy

Attackers

Home Office

Coffee ShopCustomers

Airport

Mobile User Partners

Platformas a Service

Infrastructureas a Service

Xas a ServiceSoftware

as a Service

Page 6: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 6

Cisco’s Architecture for Borderless Network SecurityPolicy

Corporate Border

Branch Office

Applications and Data

Corporate Office

Home Office

Attackers Coffee ShopCustomers

Airport

Mobile User Partners

Platformas a Service

Infrastructureas a Service

Xas a ServiceSoftware

as a Service

Page 7: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 7

BorderlessData Center

3

BorderlessInternet

2

BorderlessEnd Zones

1

Cisco’s Architecture for Borderless Network SecurityPolicy

Corporate Border

Branch Office

Applications and Data

Corporate Office

Attackers Coffee ShopCustomers

Airport

Mobile User Partners

Platformas a Service

Infrastructureas a Service

Xas a ServiceSoftware

as a Service

Page 8: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 8

BorderlessData Center

3

BorderlessInternet

2

BorderlessEnd Zones

1

Cisco’s Architecture for Borderless Network Security

Corporate Border

Branch Office

Applications and Data

Corporate Office

Policy(Access Control, Acceptable Use, Malware, Data Security)4

Home Office

Attackers Coffee ShopCustomers

Airport

Mobile User Partners

Platformas a Service

Infrastructureas a Service

Xas a ServiceSoftware

as a Service

Page 9: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 9

Intelligent End Point Traffic RoutingPillar 1: Borderless End Zone

Persistent ConnectivityAlways On, Location AwareAuto Head-end DiscoveryIPsec , SSL VPN, DTLS

Advanced SecurityStrong Authentication

Fast, Accurate ProtectionConsistent Enforcement

Broadest CoverageMost OS’s and Protocols

Windows MobileApple iPhone

Page 10: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 10

Always On Security and ProtectionTraditional VPN

Protected Un-Protected

Page 11: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 11

Always On Security and ProtectionTraditional VPN

Protected

Cisco Borderless Network Security

Page 12: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 12

Always On Security and ProtectionAnytime, Anywhere, Any Device

Sitting in a Park

Cape Town, South AfricaCape Town, South Africa

At a Coffee Shop

Sydney, AustraliaSydney, Australia

In the Office

San Jose, CaliforniaSan Jose, California

Page 13: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 13

Pillar 2: Borderless Security ArrayAdvanced Scanning and Enforcement Capabilities

Access Control | Acceptable Use | Data Security |Threat ProtectionIntegrated into the Fabric of the Network

Access Control | Acceptable Use | Data Security |Threat ProtectionIntegrated into the Fabric of the Network

Cisco IronPortEmail Security Appliance

Cisco AdaptiveSecurity Appliance / IPS

Cisco IntegratedServices Routers

Cisco IronPortWeb Security Appliance

13

VM Software Security Module Hybrid HostedAppliance

Page 14: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 14

HTTP Is the New TCP

Instant MessagingPeer to Peer

File Transfer Protocol

Understanding Web Traffic14

Page 15: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 15

Advanced Content Analysis

15

SSN Detection

Rule Is Matched MultipleTimes to Increase Score

Unique Rule Matches Are Met

Matches Are Foundin Close Proximity

Proper NameDetection

Page 16: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 16

Advanced, Proactive Threat ProtectionCisco Security Intelligence Operations

GlobalThreat

TelemetryGlobalThreatTelemetry

8:03 GMT Sensor Detects Hacker Probing

Bank Branchin Chicago

Ad Agency HQ in London

ISP Datacenterin Moscow

8:00 GMT Sensor Detects New Malware

8:07 GMT Sensor Detects New Botnet

8:10 GMTAll Cisco Customers Protected

8:10 GMTAll Cisco Customers Protected

Cisco SensorBase

Threat Operations Center

AdvancedAlgorithms

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 16

Higher Threat Coverage, Greater Accuracy, Proactive Protection

Page 17: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 17

AppServer

DatabaseServer

WebServer

Physical Security Device

Virtual Contexts

Pillar 3: Secure Virtualized Data CenterSecure Physical Infrastructure1

Page 18: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 18

AppServer

DatabaseServer

WebServer

Physical Security Device

Virtual Contexts

Pillar 3: Secure Virtualized Data Center

AppServer

DatabaseServer

WebServer

Hypervisor

Physical Security Device

Virtual Contexts

Connect Physical Security to Virtual Machines with Cisco’s SIA2Secure Physical

Infrastructure1

Service Chaining

Page 19: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 19

AppServer

DatabaseServer

WebServer

Physical Security Device

Virtual Contexts

Pillar 3: Secure Virtualized Data Center

AppServer

DatabaseServer

WebServer

Hypervisor

Physical Security Device

Virtual Contexts VIRTUAL SECURITY

AppServer

DatabaseServer

WebServer

Hypervisor

Connect Physical Security to Virtual Machines with Cisco’s SIA2Secure Physical

Infrastructure1 Embed Security in the Virtual Switch3

Service Chaining

Page 20: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 20

Pillar 4: Rich Policy Enables “Ubiquitous”, Consistent Control

Who? What? When? Where? How?

3 Policy On and Off Premise

2 Dynamic Containment Policy

1 AccessPolicy

Page 21: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 21

Access Control

Access Control Policy

In a Cisco Secure and Protected Borderless Network

Access Control Violation

Remote WebEx Participant

Page 22: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 22

In a Cisco Secure and Protected Borderless NetworkAcceptable Use

Employee in Marketing Department

Acceptable Use Policy

Access Control Violation

Page 23: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 23

In a Cisco Secure and Protected Borderless NetworkData Security

Data SecurityPolicy

Data SecurityViolation

Employee at Unmanaged Device

Page 24: Cisco Security Borderless Network Strategy · Advanced, Proactive Threat Protection Cisco Security Intelligence Operations Global Threat Telemetry Global Threat Telemetry 8:03 GMT

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID

Key Takeaways

Cisco’s security strategy has 4 pillars:The End ZoneThe Internet EdgeThe Data Center, and Policy

Cisco security is positioned to secure the Borderless Network Experience

Security is a journey … Not a destination


Preparing for the Unthinkable - Amazon Web Services · 2018-11-19 · Backed by Cisco Talos threat intelligence Over 250 full time threat researchers Millions of telemetry agents

Preparing for the Unthinkable - Amazon Web Services · 2018-11-19 · Backed by Cisco Talos threat intelligence Over 250 full time threat researchers Millions of telemetry agents

Cisco Threat-Focused Next Generation Firewall

Cisco Threat-Focused Next Generation Firewall

Cloud-Managed Security Appliances€¦ · Backed by Cisco Talos threat intelligence Over 250 full time threat researchers Millions of telemetry agents 4 global data centers Over 100

Cloud-Managed Security Appliances€¦ · Backed by Cisco Talos threat intelligence Over 250 full time threat researchers Millions of telemetry agents 4 global data centers Over 100

TRAINING PROGRAM FOR INSTRUMENTATION, * TELEMETRY, … · TRAINING PROGRAM FOR INSTRUMENTATION, TELEMETRY, AND EXERCISE ERGOMETRY BACKGROUND Estimating the Threat The overriding military

TRAINING PROGRAM FOR INSTRUMENTATION, * TELEMETRY, … · TRAINING PROGRAM FOR INSTRUMENTATION, TELEMETRY, AND EXERCISE ERGOMETRY BACKGROUND Estimating the Threat The overriding military

Testing the Telemetry Medical Devices...Cisco HealthPresence Pod Installation Guide OL-23358-01 Chapter 6 Testing the Telemetry Medical Devices Procedures Testing Medical Devices with

Testing the Telemetry Medical Devices...Cisco HealthPresence Pod Installation Guide OL-23358-01 Chapter 6 Testing the Telemetry Medical Devices Procedures Testing Medical Devices with

Unified Threat Management NGFW - Cisco · Firepower Threat Defense New unified software software, application firewalling and threat ... Cisco® 2016 Annual Security Report *Median

Unified Threat Management NGFW - Cisco · Firepower Threat Defense New unified software software, application firewalling and threat ... Cisco® 2016 Annual Security Report *Median

AMP Threat Grid Appliance Administrator's Guide v2.1 · 2017. 1. 5. · Cisco AMP Threat Grid Appliance Administrator's Guide INTRODUCTION 1 INTRODUCTION A Cisco AMP Threat Grid Appliance

AMP Threat Grid Appliance Administrator's Guide v2.1 · 2017. 1. 5. · Cisco AMP Threat Grid Appliance Administrator's Guide INTRODUCTION 1 INTRODUCTION A Cisco AMP Threat Grid Appliance

Reimage the Cisco ASA or Firepower Threat Defense DeviceReimage the Cisco ASA or Firepower Threat Defense Device Reimage from ASA to Firepower Threat Defense 2. Download the Firepower

Reimage the Cisco ASA or Firepower Threat Defense DeviceReimage the Cisco ASA or Firepower Threat Defense Device Reimage from ASA to Firepower Threat Defense 2. Download the Firepower

Cisco Firepower Threat Defense Hardening Guide, Version 6 · CiscoFirepowerThreatDefenseHardening Guide,Version6.4 FirstPublished:2019-05-10 Cisco Firepower Threat Defense Hardening

Cisco Firepower Threat Defense Hardening Guide, Version 6 · CiscoFirepowerThreatDefenseHardening Guide,Version6.4 FirstPublished:2019-05-10 Cisco Firepower Threat Defense Hardening

Telemetry Overview Intern Conference · Telemetry Overview Intern Conference ... who are on IV Ntg, IV Heparin, GPIIbIIIa InhibitorCardiac arrest where the threat of a recurrent arrest

Telemetry Overview Intern Conference · Telemetry Overview Intern Conference ... who are on IV Ntg, IV Heparin, GPIIbIIIa InhibitorCardiac arrest where the threat of a recurrent arrest

F5 LABS THREAT ANALYSIS REPORT The 2016 TLS Telemetry Report - REPORT - The 2016 TLS... · F5 LABS 2016 TLS Telemetry Report ... social media sites, ... exactly how much more secure

F5 LABS THREAT ANALYSIS REPORT The 2016 TLS Telemetry Report - REPORT - The 2016 TLS... · F5 LABS 2016 TLS Telemetry Report ... social media sites, ... exactly how much more secure

Cisco Cyber Threat Defense: Detecting and Protecting Against Insider Threat

Cisco Cyber Threat Defense: Detecting and Protecting Against Insider Threat

Cisco Cyber Threat Defense 1.0 Design and Implementation Guide

Cisco Cyber Threat Defense 1.0 Design and Implementation Guide

Cisco Cyber Threat Defense Solution 1.1 Design and Implementation

Cisco Cyber Threat Defense Solution 1.1 Design and Implementation

Cisco Certifications Career Path · Cisco Edge Network Security Solutions (SENSS), lmplementrng Cisco Threat Control Solutions (SITCS), Implementing Cisco Secure Access Solutions

Cisco Certifications Career Path · Cisco Edge Network Security Solutions (SENSS), lmplementrng Cisco Threat Control Solutions (SITCS), Implementing Cisco Secure Access Solutions

Cisco Threat Response (CTR) and ESA Integration

Cisco Threat Response (CTR) and ESA Integration

Cisco Firepower Threat Defense Software on Select ASA ... · PDF fileCisco Firepower Threat Defense Software on Select ASA Hardware..... 6 Cisco ASA with FirePOWER Services

Cisco Firepower Threat Defense Software on Select ASA ... · PDF fileCisco Firepower Threat Defense Software on Select ASA Hardware..... 6 Cisco ASA with FirePOWER Services

CCNP Security SITCS · Implementing Cisco Secure Mobility Solutions (SIMOS) Implementing Cisco Threat Control Solutions (SITCS) Implementing Cisco Threat Control Solutions (SITCS)

CCNP Security SITCS · Implementing Cisco Secure Mobility Solutions (SIMOS) Implementing Cisco Threat Control Solutions (SITCS) Implementing Cisco Threat Control Solutions (SITCS)

Cisco Rapid Threat Containmnet

Cisco Rapid Threat Containmnet

VirtualWisdom and Cisco MDS 9700 32G Integration with SAN ... · TECH BRIEF VirtualWisdom and Cisco MDS 9700 32G Integration with SAN Telemetry Streaming Complete Cisco SAN visibility

VirtualWisdom and Cisco MDS 9700 32G Integration with SAN ... · TECH BRIEF VirtualWisdom and Cisco MDS 9700 32G Integration with SAN Telemetry Streaming Complete Cisco SAN visibility