Security Everywhere Extended Jatinder Shetra Consulting Security Engineer
Dynamic Threat Landscape Customers Biggest Security Challenges Changing Dynamic Complexity Business Models Threat Landscape and Fragmentation A community that hides in plain sight avoids detection and attacks swiftly 100% 60% 85% 54% 51% of companies connect to increase of companies of point-of-sale intrusions of breaches remain of data is domains that host malicious reporting a $10M loss aren’t discovered for undiscovered for stolen in files or services last or more in the last WEEKS MONTHS HOURS YEAR YEAR
Security Everywhere Campus Edge Data Center Cloud Branch Operational Endpoint Technology Services Broadest scope of threat-centric coverage from the network to the data center, cloud, branch and endpoints – before, during and after
Extending Security Everywhere Further into the Cloud, Endpoint and Network
Announcement Highlights Organizations Cloud Security Network and Endpoint of All Sizes Open DNS ISE 2.0 and AnyConnect 4.2 Cisco Cloud Access Security (CAS) Threat Awareness Service AMP Everywhere Progress CWS Updates Network Endpoint Mobile Virtual Cloud
OpenDNS Adds to Cisco’s Security Portfolio Attack Continuum DURING BEFORE AFTER Discover Detect Scope Enforce Block Contain Harden Defend Remediate OpenDNS Umbrella Umbrella Umbrella Investigate Stay ahead of future attacks by Block callbacks on any port, Query live threat intelligence of blocking malicious domains, protocol, or app at the DNS & IP all the domains & IPs on the IPs, and ASNs layers internet.
Further into the Cloud Cloud Web Security 3.0 Threat Grid Integrated into AMP on CWS Cloud Acsess Security Greater Network Integration UI and Ease of Use Enhancements
Announcing Cisco Identity Services Engine 2.0 Extending Security Deeper into Networks and Endpoints Identity Services Engine Cisco pxGrid AnyConnect 4.2 (ISE) 2.0 Ecosystem Adaptive Network Control to Adjust New Network Visibility Module (NMM) • Deeper Visibility to Drive Superior • • Network Policy and Execute Threat to Monitor Application Flows on Network Insights and Control Responses Endpoints On-premises and Off. Streamlined Access Policy • Management to Simplify Security and New pxGrid ecosystem partners Advanced Application Flow Inspection • • Compliance including Check Point, Invincea and to Enable Comprehensive Analysis on Infoblox Endpoints to Detect and Prevent the Enhanced Contextual Data Sharing & • Spread of Threats. Control to Accelerate Threat Mitigation
Advanced Malware Protection Everywhere Web & Email Security Dedicated Cloud Based Web Security Appliances FirePOWER Appliance & Hosted Email Mac Private OS X Cloud PC Mobile Virtual NGIPS / NGFW on FirePOWER Minimize time Integration of Visibility and control to detection and Threat Defenses from edge to endpoint remediation
Cisco Threat Awareness Service Cisco Threat Awareness is a portal-based, threat intelligence service that enhances threat visibility by making broad, foundational security information accessible 24-hours a day: Leverages one of the world’s most advanced threat databases Timely detection of malicious activities • Identifies compromised networks & suspicious behavior Helps companies quickly identify compromised systems • Gains actionable intelligence Helps IT and security teams identify threats • Analyzes network traffic as it is seen from outside the network Enables continued improvement of overall security •
Cisco Demo Cloud dCloud at dcloud.cisco.com • Complete, ‘LIVE’ environment • Live traffic, clients and threats • Easy to use • Demo script in your dashboard
Proof of Value (PoV) Leverage ASA 5515-X Equipment with SSD and FirePOWER Services POV Risk Reports
Recommend
More recommend