AlwaysOn Cybersecurity for Tomorrow Raise the Bar Rise
Always-On Cybersecurity for Tomorrow: Raise the Bar & Rise to the Cloud Michael Tolliver Senior Account Manager Michael. Tolliver@Forcepoint. com (703) 856 -3376 Cross Domain | Data Protection | Behavioral Analytics | NGFW | CASB | Advanced Malware Detection | Email Security | Web Security
Agencies are undergoing their own digital transformation Digital Transformation Bring Capability to the Field/Tactical Edge Race to the Cloud Apps | Infrastructure | Austere environments Apps | Infrastructure | Distributed Workforce Next-Generation Critical Data Protection Always On / Extreme Networking Security Secure, Cost-Effective, Multi-Domain Infrastructure Customer Mission Outcomes © 2019 Forcepoint | 2
Forcepoint: Advancing Government Missions Purpose-Built to Enable Next. Gen Cybersecurity Proven Mission Expertise for High. Consequence Environments CROSS DOMAIN CASB UEBA Human-Centric Security Email Security CASB Cyber Products DDP WEB, EMAIL, DLP Cross Domain NGFW DLP UEBA Web Security Created by Raytheon in 2016 to commercialize defense-grade technologies for large enterprises. US and international central government, defense, intelligence, and system integrators Expertise to guide customer decisions to the right solutions for their sensitive, regulated environments. One of the largest private cybersecurity companies in the world Critical Infrastructure (i. e. , Oil & Gas, Utilities, Critical Manufacturing) Continued product evolution with specific regulated industry requirements in mind. © 2019 Forcepoint | 3
Solutions to Support the Most Mission Critical Agencies Critical Data and Intellectual Property Protection Secure Cloud Adoption and Network User Protection Workforce and Supply Chain Protection Security Initiatives • • • Secure the adoption of Saa. S & cloud Enable direct-to-cloud connectivity and security for remote offices Protect off-network users Modernize your hybrid IT network Deploy a cloud converged security model from the cloud Cro ss D om ain NG FW SD -W AN AM D Next-gen your data protection Protect data in the cloud Discover data in a hybrid environment Confidently verify regulatory compliance (e. g. , GDPR and HIPAA) We b CA SB Em ail Stop data loss from insiders and compromised users Prevent sabotage and financial loss Protecting your supply chain DL P/D DP UE BA Converged Security Capabilities Forcepoint Proprietary © 2019 Forcepoint | 4
Extreme Networking Creates Advantages and Risks “Your IT infrastructure is going to the cloud, driven by business need and speed. ” Cloud IT creates security blind spots and fragmented security management and accountability. “Workforce, devices, and business processes are globally hyperconnected. ” “Employees and partners collaborate using all of a company’s assets. ” More critical data is being created than properly protected. Network transformation to support cloud-centric IT breaks existing security architectures. A critical need is created to secure interactions of all classifications across the extended enterprise. Data should flow freely across the business. Personnel and Io. T devices are security vulnerabilities. “I need to automate policies and reduce the quantity of alerts requiring investigation. ” Forcepoint Proprietary © 2019 Forcepoint | 5
Customer Priority: Securing Segmented Networks What we hear: “How do I keep up with a workforce and data moving across multiple networks and classifications? ” CHALLENGES Solutions are not scalable or able to support agency enterprise Flexible implementation options must grow with the enterprise SOLUTIONS Scalable, enterprise-ready solutions that can support up to 100, 000 users Manual process automation NSA’s Raise-The-Bar compliant Cross-Domain Solutions on the U. S. NCDSMO baseline Must provide a Proven Assessment & Authorization Pedigree (certification) Deploy multilevel secure access and sharing to enable extreme networking Must be commercial software Approved solutions for all environments including TSABI and SABI “Sneakernetting” files Transfer structured and unstructured data securely © 2019 Forcepoint | 6
What is Raise The Bar? Raise The Bar • An NSA and NCDSMO-led initiative to continually improve the status quo in the cross-domain community to combat rising threats – The bar raises every year! • Focuses on cross-domain solution internal mechanisms as well as system integrations to answer evolving threats • Primarily focuses on Transfer (Guard) solutions but also addresses key concepts for Access solutions • Monitored closely by the Five-Eyes CDS working group Forcepoint is heavily involved in Raise The Bar (RTB) • Trusted Thin Client, Sim. Shield, Trusted Gateway System & High Speed Guard have met Raise The Bar objectives • Sim. Shield = one of the first products across the community to complete independent testing with RTB objectives • Periodic design reviews are held with NSA to review progress and objectives • All products have had favorable SABI LBSA test results and SAOs reviews • Feedback is provided to NSA and NCDSMO on tailoring RTB to emerging mission requirements Unmatched RTB success and experienced on Assessment & Authorization and the most comprehensive cross domain vendor on the NCDSMO list Forcepoint Proprietary © 2019 Forcepoint | 7
Customer Priority: Moving to the Cloud What we hear: “My IT infrastructure is going to the cloud, driven by business need and speed. ” CHALLENGES Expanding attack surface Event overload and a lack of visibility Disjointed security policy and siloed security solutions Disparate compliance regulations Extreme networking within the cloud SOLUTIONS Eliminates blind spots by understanding how your people and data interact Cloud-First, Hybrid Ready Complete visibility into cloud application usage Robust, coordinated protection solutions thwart advanced malware attacks Flexible deployment options to enable smooth transition © 2019 Forcepoint | 8
Customer Priority: Moving to the Cloud Access and Gateway Security Advantages ELIMINATE SECURITY BLIND SPOTS Real-time coordinated threat protection with Forcepoint Web, Email, and AMD solutions FLEXIBLE DEPLOYMENT OPTIONS REAL-TIME ADVANCED THREAT DEFENSE Forcepoint CASB delivers extensive insight and control to user behavior and cloud applications Flexible deployment architectures to ease transition to cloud and maximize productivity © 2019 Forcepoint | 9
Customer Priority: Smarter Data What we hear: “I need to automate policies and reduce the quantity of alerts requiring investigation. ” CHALLENGES Protecting critical data in a way that doesn’t • • • Frustrate users Overwhelm admins Mistake malicious for normal employee behavior. • Embed risk-adaptive protection • Protect data based on calculated behavioral risk level of users and the value of data accessed. SOLUTIONS Intelligent DLP/DDP • Reduce the number of alerts that need to be triaged; transition DLP from broad to individual policies. Increased Productivity • Provide greater flexibility in policies and adapt enforcement based on calculated risk. Proactive Security Management • Detect and respond to high-impact events in a shorter amount of time. © 2019 Forcepoint | 10
Customer Priority: Smarter Data Gain a Better Understanding of Intent with Forcepoint Dynamic Data Protection Tries to print customer’s sensitive data. DLP blocks it, but then… Tries to upload it to Dropbox. CASB blocks it, but then… Tries to copy it to USB. DLP blocks it, but then… Tries to FTP it outside the organization. DLP blocks it. Tries to upload it to Google Drive. CASB blocks it, but then… Tries to send it to a personal email address. DLP blocks it, but then… Employee Risk © 2019 Forcepoint | 11
Customer Priority: Keep Up with Increased Connectivity What we hear: “I can’t keep up with my globally hyperconnected workforce, devices, and business processes. ” CHALLENGES Decrypting traffic while safeguarding privacy Controlling access to web content Regaining control of shadow IT Managing enterprise-grade connectivity and protection from your own multi-tenant systems SOLUTIONS Firewall and IPS work cohesively for cost savings and to avoid overprovisioning Direct-to-cloud connectivity and security for remote offices Modernize hybrid IT networks Secure the adoption of Saa. S and public clouds Converged Connectivity and Protection • Unites people and data securely without gaps/redundancies. © 2019 Forcepoint | 12
Forcepoint Knows Global Governments Protecting Critical Data and Intellectual Property • Securing data at rest, in motion, and in use across hybrid environments Cloud and Network Security • Transforming network security on prem and in the cloud Network Segmentation – Cross Domain • First to meet Raise the Bar and A&A requirements Government Pedigree • 20+ years of providing mission-critical solutions that enable agility without sacrificing security. © 2019 Forcepoint | 13
Thank you! Forcepoint Proprietary © 2019 Forcepoint | 14
Backup slides
Forcepoint is Uniquely Positioned for Cross-Domain Excellence U. S. government Raise The Bar compliant • • State-of-the-art filter technologies TSABI/SABI approved Scalable, enterprise-ready solutions that can support up to 100, 000 users • • Flexible implementation options that grow with the enterprise Supporting various mission-critical use cases and environments (from tactical to datacenter to cloud) Cost-effective commercial software business model • • Cost savings and efficiencies realized and proven (vs a GOTS solution) Use of commodity hardware Market leader in cross-domain • • • Deployed and trusted in over 100, 000 desktops across the U. S. & Five Eye governments Most comprehensive cross-domain portfolio on NCDSMO list Over 20 years’ experience in cross-domain development and deployment Extensive cybersecurity portfolio and expertise in conjunction with cross-domain Cleared professional services support to include extensive Assessment and Authorization experience © 2019 Forcepoint | 16
Forcepoint Cloud Access And Gateway Security Solution THREATS ü Malicious Email Security Shared Global Threat Intelligence ü High-Risk Cloud App ü Ransomware ü Suspicious Traffic CASB Advanced Malware Detection Web Security Cloud – Hybrid – On-Prem Remote Users Cloud – On-Prem Office © 2019 Forcepoint | 17
Introducing Dynamic Data Protection Delivering Risk-Adaptive Protection Forcepoint DLP Endpoint Server Forcepoint Behavioral Analytics Set dynamic enforcement action plan Automatically analyze DLP data for identity risk calculation View DLP incidents with end-user risk level Investigate high-risk entity activity Endpoint monitoring, Collection, and enforcement © 2019 Forcepoint | 18
Forcepoint’s Integrated Approach to Network Security Cloud Services CASB App Risk Install Cloud CASB w/ DLP Threat Intelligence URL Filtering IP & File Reputation Advanced Malware Detection Web Security Behavior Analytics Unified Appliance with Deep Security Built-in Physical, Virtual, Cloud SD-WAN NGFW IPS VPN Segmentation Anti. Evasion Decryption Virtual Contexts Proxies Endpoint Awareness Centralized Management • High Availability ECA Endpoint Integration DLP WP Data Loss Prevention Workforce Protection Endpoint Context Security Management Console Unified Policies, Dashboards & Reports © 2019 Forcepoint | 19
Forcepoint Integrates Connectivity with Security to Make Both Better Connectivity Web Direct-to-Cloud (SD-WAN) Threat. Seeker AMD Web Security CASB Site-to-Site (VPNs) Internet Security SD-WAN VPN Access Control & Intrusion Prevention (NGFW/IPS) NGFW Roaming Users HQ Multi-Link™ VPN MPLS Branches Forcepoint Endpoint Web Threats & Content Security (Secure Web Gateway Cloud) Cloud App Data Protection (CASB)
One Network Security System, Many Uses Stores, Branches, Remote Offices Corporate Network Headquarters SD-WAN VPN NGFW Partners VPN App Web interfaces IPS Internet v. NGFW VPN AWS, Azure Cloud Data Centers NGFW VPN IPS DMZ Subcontractors VPN Security Management Center Data NGFW VPN v. NGFW Virtualized Data Centers IPS Mobile Users © 2019 Forcepoint | 21
- Slides: 21