2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 2

Transkript

1 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 2

2 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 3

3 Offentlig oppmerksomhet ILOVEYOU CODE RED SLAMMER MY DOOM STORM ZeuS Rustock.C Koobface Stuxnet Conficker SpyEye Cisco and/or its affiliates. All rights reserved. Cisco Public 4

4 Fokus på profitt Målrettede angrep Økonomisk gevinst Storskala ormer Source: ICR 2001, Cisco and/or its affiliates. All rights reserved. Cisco Public 5

5 Mobile Workers Personal Devices Hotspot VPN VPN Employee (Sales) Managed Desktop Printer (Payroll) Internet VPN Security Systems Employee (Finance) Managed Desktop Employee (Sales) Managed Desktop Printer (Sales) Branch Network Campus Network Internal Resources Guest Wireless Employee IP Camera Guest Contractor Wireless Employee 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 6

6 Agenda Nettverkssikkerhet for skytjenester Advanced Persistent Threats Eksplosjon i antall enheter 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 7

7 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 10

8 Flere alternativer på alle nivå PC World Post-PC World Applications Client OS Server Architecture Devices 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 11

9 DLP Trusselkontrol Corporate File Sharing Akseptabel bruk Tilgangskontroll Skype You Tube Salesforce.com Løsning Fordeler Sømløs VPN for fjerntilgang Web innholdssikkerhet Single Sign On for SAAS tjenester Håndhever policy Always-on forbindelse Sikkerhet både for administrerte og Bring Your Own Device mobile enheter 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 12

10 Web innholdssikkerhet levert som en skytjeneste Håndhever policy for brukere utenfor virksomheten Krever ikke VPN Internett trafikk Sømløs integrasjon med AnyConnect Secure Mobility klient VPN interntrafikk (opsjon) 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 13

11 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 15

12 Advanced De som står bak bruker alle mulige virkemidler Persistent Ekstremt målrettet og fokusert. Dette i skarp kontrast til tilfeldig søking etter informasjon Threat Har både virkemiddel og hensikt 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 16

13 Logganalyse Deep Packet Inspection NetFlow Malware analyse Etablere relasjon til nasjonale informasjonssikkerhets organisasjoner Dypere analyse rundt høyrisiko mål Samle, lagre og analysere innkommende informasjon (filvedlegg, nedlastninger etc.) 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 17

14 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 19

15 7.7 milliarder nye Wi-Fi (a/b/g/n) enheter vil tas i bruk de neste fem årene.* Smarttelefon utbredelsen vil øke med 50% per år.** I dag går 16% av mobildata trafikken over Wi-Fi. I 2015 vil dette øke til 48%.* TIME Source: *ABI Research, **IDC, *** Morgan Stanley Market Trends Cisco and/or its affiliates. All rights reserved. Cisco Public 20

16 Executive is using ipad on guest network. Do you allow them production access to check ? Should the ipad have differentiated Security Access? Can they check outside the office? Can they collaborate with other employees? Do you enforce Internet access policies? Do you protect the device from malware? How do you authenticate mobile devices? What data can they store? Do you allow voice and video streaming? What happens when the device roams? What programs can the employee load? Can you accommodate different OS s? What if they lose the device? What priority does collaboration traffic get? 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 22

17 Enheter Cloud Unified Communications and Virtual Desktop Løsning ut av boksen BES or ActiveSync En sikrer løsning Secure Mobility Applikasjoner Gruppevare Intranet Samhandling Virksomhets applikasjoner 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 24

18 DLP Trusselkontrol Corporate File Sharing Akseptabel bruk Tilgangskontroll Skype You Tube Salesforce.com Løsning Fordeler Sømløs VPN for fjerntilgang Web innholdssikkerhet Single Sign On for SAAS tjenester Håndhever policy Always-on forbindelse Sikkerhet både for administrerte og Bring Your Own Device mobile enheter 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 26

19 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 28

20 Mobile Workers Personal Devices Hotspot VPN VPN Employee (Sales) Managed Desktop Printer (Payroll) Internet VPN Security Systems Employee (Finance) Managed Desktop Employee (Sales) Managed Desktop Printer (Sales) Branch Network Campus Network Internal Resources Guest Wireless Employee IP Camera Guest Game Console Contractor Wireless Employee 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 29

21 Trådløst (WLAN) Kablet VPN Identitet Policy Profilering Endepunktssjekk Gjenoppretting 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 30

22 Bruker Lokasjon Tid Enhet Annet Profilering av endepunkt Bruker SNMP, NetFlow, DNS, RADIUS, HTTP og DHCP for bedre nøyaktighet For trådløst og kablet nettverk Integrert med RADIUS/AAA Samhandler med andre tjenester (endepunktssjekk, gjesteportal etc.) 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 33

23 Identitets informasjon Gruppe: Ansatt Kontekst Type enhet Autorisasjon (Kontrollert tilgang) Full tilgang Begrenset tilgang Gruppe: Konsulent + Gjest/Internett Karantene Sikkerhet Lokasjon Ingen tilgang Gruppe: Gjest Tid & dag Tilgang Resultatet logges 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 35

24 Eksempel: 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 40

25 User Device Type Location Posture Time Access Method Custom 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 41

26 Virksomhetens enheter med AD-medlemskap og gyldig sertifikat (EAP-TLS) skal ha corporate access Bring Your Own Devices (BYOD) med AD brukernavn & passord, skal ha begrenset tilgang (PEAP MSCHAPv2) Besøkende/gjester får internettilgang via åpen gjeste-ssid med innlogging via gjesteportal ISE 1 EAP autentisering Ansatt 2 Accept = VLAN 20 4 Accept = VLAN 30 Corporate Access En SSID CAPWAP VLAN 20 Ansatt 3 EAP autentiserign 802.1Q Trunk VLAN 30 Internett 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 42

27 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 52

28 AnyConnect TrustSec TrustSec Nexus 1K and Cloud Connected Network Cisco SIO Threat Intelligence Context Aware Policy Context Aware Enforcement Integrated Overlay Cloud Visibility Network Context Control Management Services Partners 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 53

29 Most Accurate Protection Against a Broad Range of Threats Global Threat Telemetry Cisco Threat Operations Center Global Threat Telemetry Dynamic Updates and Actionable Intelligence www Adaptive Security Appliances Intrusion Prevention Solution Security Appliances Web Security Appliances System Administrators 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 54

30 Takk for oppmerksomheten!