Transcript DO MORE!
Francisco Argüelles Arredondo Systems Engineer April 13, 2015 McAfee Security-as-a-Service Keeping communications safe and secure Francisco Argüelles actualmente se desempeña como Systems Engineer en McAfee. Previo a McAfee , Francisco trabajó en Computer Associates, Cabletrón Systems (ahora Enterasys Networks) y en Symantec Francisco Argüelles obtuvo la Licenciatura con honores en Matemáticas Aplicadas y Computación por la Universidad Nacional Autónoma de México. Securing the Digital World Founded 1987 The World’s Largest Dedicated Security Company - 83% of Fortune 100 companies rely on McAfee - More than 150M user desktops protected - Single deployments in excess of 5M desktops - 445 patents, many more pending - 6,102 McAfee employees globally - R&D in 26 countries - Presence in 120 countries AGENDA 1 2 3 4 5 • The Security Landscape • Email Security • Web Security • Endpoint Security • Summary and Q&A The very technologies that empower us to create and to build also empower those who would disrupt and destroy - U.S. President Barack Obama Organizations worldwide lost approximately $1 trillion in intellectual property last year due to cybercrime - McAfee Labs More Sophisticated & Complex Emerging Technologies Emerging Technologies Worldwide IT Spending Declining DO MORE! SPEND LESS! Cloud Computing A New Direction • SaaS is forecasted to grow at five times the rate of software applications through 2013. – Source: Gartner • In 2008, SaaS deployments grew thirty-three percent in Enterprises. – Source: Forrester • Twenty-one percent of enterprises are either piloting or currently deploying SaaS. – Source: Forrester DO MORE! SPEND LESS! Security-as-a-Service What is Security-as-a-Service? Security controls that are available by subscription and are managed and delivered via the internet by a software vendor. Why Security-as-a-Service? Greater Return on Investment • Faster time to value • Reduce total cost of ownership Less Risk • Focus on securing business, not managing software • Unburden IT resources How “Optimized” is your Security Architecture? Security Maturity Model Reactive •Event driven •Reactive protection •Basic security Compliant Proactive •Policy development •Some standardization •External compliance met •Proactive security •Centralized view •Security enables compliance •Audit once, report many •More integration DO MORE! SPEND LESS! Optimized •Multi-layered, correlated •Global threat intelligence •Automated compliance •Cost efficiencies McAfee Security-as-a-Service McAfee is the world’s leading provider of cloud-based security, offering the most complete security SaaS portfolio in the industry McAfee’s Unique Position Instant Access Real Time Protection Peace of Mind DIVERSITY – Broadest Security-as-a-Service portfolio in the industry RELIABILITY – Real-time protection with Global Threat Intelligence FLEXIBILITY – Deployment options to fit your dynamic business Security-as-a-Service Broadest Security-as-a-Service portfolio in the Industry Real-time Protection with Global Threat Intelligence Global Threat Intelligence™ McAfee SaaS Management Console http:// ! Email Email Continuity Email Archiving Web Endpoint Website PCI Vulnerability Certification Compliance Assessment Multi-tenant , Scalable Service Platform Expanding Role of Email Security Deliver a business critical service • Increase productivity by eliminating noise and malware • Eliminate downtime • Easy user intelligence definitions, and bottom-less user inbox sizes Protect the email lifecycle Build trust in communications • Protect sensitive data & intellectual property • Enable safe, two-way, B2B/B2C communication • Eliminate underground message stores • Maintain competitive advantage • Reduce cost of message restores & audit • Protect reputation & reduce penalties • Easily comply with multiple regulations The Many Facets of Email Security Incidents “10,006 full names and dates of birth lost after accidentally email a file detailing results of criminal record checks…blaming human error” “In one day, a phishing attack accounted for as much as 25% of all spam email within a 15 minute period” “Since e-mail is not a secure form of communication, we are unable to answer the following types of questions by email” “Piper Jaffray and Co. was fined $700,000 by FINRA for failing to retain emails” “Top mayoral aide doubledeleting emails for the last 5 years… recovery could cost $250,000 Malware continues to grow How do you size for spam? Benefits of Security-as-a-Service Email volume (B) Spam (B) % Spam Oct 2005 25.6 9 35% Jun 2009 237 196 82% July 2010 110.4 100.7 91.2% Unique Benefits of McAfee SaaS infrastructure Elastic capacity • Processing Power • Bandwidth • Storage Robust infrastructure • Full redundancy • Reliable, robust email environment • Managed by security experts Optimize bandwidth • 90% of email is spam, viruses, worms, directory harvest attacks, denial of service attacks, spyware Ease-of-use – Intuitive management efficiency & ultimate visibility Compliance – in/outbound policies, accuracy, encryption, retention, eDiscovery Security– Powered by McAfee Global Threat Intelligence Decade of experience l Best Practices encapsulated 24/7 phone support l SLA McAfee Global Threat Intelligence in Action Intelligence Across All Threat Vectors Thwarts Attacks CORRELATES •Threat data in the cloud •100B queries per month •120m nodes across all threat vectors Global Threat Intelligence 1 DELIVERS # •Reputation based real-time threat intelligence across all threat vectors: file, web, message, network # = www = 192.168… 3 2 4 INTEGRATES 5 SaaS Desktop Email Gateway Web Gateway www… Firewall •Into most comprehensive security portfolio in the industry •Most “intelligence services” mappings Broadest Security-as-a-Service Portfolio Real Time Protection with Global Threat Intelligence McAfee Security-as-a-Service Portfolio http:// Email Filtering Email Continuity Email Encryption Email Archiving* Endpoint Edge Solutions McAfee Email SaaS Firewall Web ! Website PCI Vulnerability Certification* Compliance* Assessment* Internal Customer Network McAfee Email Appliance Email Server Users Centralized management Mobile Mobile user McAfee SaaS Email Security Solutions Email Protection • Offloads spam, malware & phishing filtering to the cloud • Outbound data protection • Up to 5 day spooling during email server outage Email Continuity • Outage protection • Web email • Intelligent post-outage synchronization of email Email Encryption Email Archiving Email Inbound & Continuity • Safeguards confidential information assets • Comply with sensitive data encryption regulations • Bi-directional encryption, even from mobile devices • Regulatory compliance, eDiscovery, legal holds • Exchange and PST consolidation • Unlimited storage • Offloads spam, malware & phishing filtering to the cloud • Combines w/exiting appliance for full in/outbound coverage • Outage protection Cloud-based Technology McAfee SaaS Email Protection Bi-directional email security with spooling Inbound Filtering 1 Over 90% of emails are spam and malware. Optimize bandwidth utilization Customer Network SaaS •Content sensitive Firewall filtering •Malware protection 2 3 Outbound Filtering Outage Spooling Up to 5 days of email data protection Email server Users Business Continuity Business continuity during (un)planned server outages 1 Email flows to customer 2 Email server suffers outage Customer Network SaaS 3 SaaS Email Continuity automatically activates. Users have instant web access to email for business as usual 4 Emails delivered back to email server upon recovery Firewall Email server Users Benefits of McAfee SaaS Email Encryption IT benefits • Unlimited encryption at predictable costs • Key-management free solution • Easy administration through familiar McAfee central console • Support policy-driven compliance User benefits Business benefits •Designed for business users •Transparent to sender & receiver (TLS encryption) •User intelligence proactive encryption •Optimized for send/receive on mobile devices • Privacy, regulatory & corporate compliance • Bi-directional encryption to take ownership of protection • Tamper-proof delivery & reduced risk of eavesdropping Email Encryption Evaluate trust with bi-directional push/pull encryption Proactive encryption Policy-driven encryption Email Inbound & Continuity Combining the best of on premises & the cloud 1 Email flows to customer 2 Inbound emails filtered in the cloud Outbound emails filtered on-premises 3 Customer Network SaaS 3 SaaS Email Continuity automatically activates. Users have instant web access to email for business as usual 4 Emails delivered back to email server upon recovery Email security appliance Firewall 4 Email server Email server suffers outage * Manual activation also available Users McAfee SaaS Web Protection Axtel Data Centers Filtering User authentication Reputation analysis Anti-virus Anti-malware Content inspection McAfee SaaS Web Protection Protection against the Gap Protection gap with current on-premise solutions t0 Malware in the wild t1 Malware discovered t2 Protection is available t3 Protection is downloaded Category-based URL’s and signatures are NOT enough! • No pro-active anti-malware • No pro-active reputation services t4 Protection is deployed Traditional Endpoint Protection Moves to the Cloud Cloud Computing More protection than just AV Consolidated licensing costs Global Threat Intelligence Outsourced hardware for management Automatic Updates and Upgrades stays ahead of threats Centralized mgmt for reporting & compliance DO MORE! SPEND LESS! Less maintenance by IT staff Less time setting protection policies McAfee SaaS Endpoint Protection* IDC rated McAfee as the #1 SaaS Endpoint vendor SaaS Endpoint Protection Anti-Virus Anti-Spyware McAfee SaaS Infrastructure Firewall Artemis Email Server Anti-Spam Safe Searching Host Web Filtering McAfee Global Threat Intelligence McAfee protects over 5 million endpoints! SecurityCenter INTERNET SaaS Endpoint Protection Single Client for multi-layered protection • Easy to understand enduser prompts • Non-intrusive alerts • Pull down actions menu for end-user • Customizable user interface (simple/advanced Real time updates via McAfee Global Threat Intelligence: Artemis Technology Enabled on endpoints without any additional client side installation 1 User receives new file via e-mail or Web 2 Internet 6 VirusScan processes information and removes threat 3 Artemis 4 5 Artemis identifies threat and notifies client No detection with existing DATs, but the file is “suspicious” Fingerprint of file is created and sent using Artemis Artemis reviews this fingerprint and other inputs statistically across threat landscape Customer Value • Dramatically reduces the protection gap • Real-time malware protection leveraging community threat intelligence • Zero-cost, zero-touch, seamless enablement How SiteAdvisor Works 2. Sign-up forms are completed using a one-time use e-mail address so any subsequent spam can be tracked. 1. Websites are tested for excessive pop-ups and other annoyances, and browser exploits. SiteAdvisor’s ‘crawlers’ continually patrol the Web to test sites. 95% coverage already. Sites added to McAfee maintained categories as well as safety ratings. 3. Downloads are tested for viruses and bundled adware, spyware or other unwanted programs. 4. Feedback from individual users and analysis by SiteAdvisor staff enhances SiteAdvisor's automated testing. Francisco Argüelles Arredondo Systems Engineer April 13, 2015 McAfee Security-as-a-Service Keeping communications safe and secure