Protecting your cloud journey
@DLP @CASB @SD-WAN
Kfir MesikaChannel Account Manager – Israel & Cyprus
© 2019 Forcepoint | 2
Four Elements Of Digital Transformation That Create Advantage And Risk
A critical need is created to ensure trusted interactions across the extended enterprise.
Network transformation to support cloud-centric IT breaks existing security architectures.
Personnel and IoT devices are security vulnerabilities.
More critical data is being created than properly protected.
Data should flow freely across the business.
Cloud IT creates security blind spots and fragmented security management and accountability.
“Your IT infrastructure is going to the cloud, driven by business
need and speed.”
“Data is the new oil and artificial intelligence the new
engine of the digital economy.”
“Workforce, devices, and business processes are
globally hyperconnected.”
“Employees and partners collaborate using all of a
company’s assets.”
Forcepoint Proprietary
© 2019 Forcepoint | 3
We used to KNOW where our data is…
Add Classification Label: Forcepoint Private | Forcepoint Proprietary | Public
And how to defend it…
© 2019 Forcepoint | 4
The challenge has changed
Add Classification Label: Forcepoint Private | Forcepoint Proprietary | Public
© 2019 Forcepoint | 5
Where Are You In Your Digital Transformation Journey?
*from Gartner’s 2019 CIO Agenda: Secure the New Foundation for Digital Business
Example IT Initiatives
Just Getting Started(25%)
WellUnderway
(42%)
Ahead of Peer Group(20%)
IndustryLeading(13%)
Salesforce.comCloud Email
Private CloudBox.com
Zero TrustCARTA
Human-Centric
Threat ProtectionNGFW
Secure Web Gateway
Digital Transformation Stage*
Example Security Technologies
UEBAAI / MLSOAR
Security Maturity
Analytics-CentricInformation-Centric Behavior-CentricInfrastructure-Centric
DLPCASBEmail
Office 365SAP Concur
Private Cloud + AWSZoom / Slack
WorkdayCloud ERP
SD-WAN/Direct-to-CloudAWS + Azure
Public-Cloud FirstSaaS-First
Full BYOD Support
Forcepoint Proprietary
© 2019 Forcepoint | 6
Forcepoint Offers A Broad Continuum Of Capabilities
• Stop data loss from insiders and compromised users
• Prevent sabotage and financial loss• Protecting your supply chain
• Secure the adoption of SaaS & cloud• Enable direct-to-cloud connectivity and
security for remote offices • Protect off-network users• Modernize your hybrid IT network• Deploy a cloud converged security model
from the cloud
• Next-gen your data protection• Protect data in the cloud• Discover data in a hybrid environment• Confidently verify regulatory compliance
(e.g., GDPR and HIPAA)
Converged Security Capabilities
Security Initiatives Security Initiatives Security Initiatives
Workforce and Supply Chain Protection
Secure Cloud Adoption and Network User Protection
Critical Data and Intellectual Property Protection
Forcepoint Proprietary
© 2019 Forcepoint | 7
Forcepoint Cloud Offering
• Secure the adoption of SaaS & cloud• Enable direct-to-cloud connectivity and
security for remote offices • Protect off-network users• Modernize your hybrid IT network• Deploy a cloud converged security model
from the cloud
Security Initiatives
Secure Cloud Adoption and Network User Protection
Forcepoint Proprietary
Behavioral Analytics
© 2019 Forcepoint | 8
BEST IN CLASS CAPABILITIES
ForcepointMail Relay
ForcepointDLP
ForcepointAMD
ForcepointCASB
ForcepointNGFW &SD-WAN
ForcepointInsider Threat
ForcepointData Guard
ForcepointUEBA
ForcepointWeb Gateway
© 2019 Forcepoint | 9
BEST IN CLASS CAPABILITIES
ForcepointMail Relay
ForcepointDLP
ForcepointAMD
ForcepointInsider Threat
ForcepointData Guard
ForcepointUEBA
ForcepointWeb Gateway
ForcepointCASB
ForcepointNGFW &SD-WAN
Cuts network expenses by 50%, reduces cyberattacks by up to 86%, slashes incident response time as much as 73%.
© 2019 Forcepoint | 10
Things you need to know about
Forcepoint NGFW & SD-WAN solution
5
© 2019 Forcepoint | 11
#1 Networking
© 2019 Forcepoint | 12
Forcepoint Builds on Gartner’s Definition of SD-WAN
Replace WAN routers
Support multiple WAN connections
Simplify WAN management,configuration and orchestration
Provide secure VPNs,integrate additional network services
Integrate WAN router + NGFW
Mix transports & ISPs for each siteOptimize apps’ use of links & bandwidth
Unify policies for connectivity + securityManage >1500 sites in one console
Automate VPN setup with site drag-and-dropService-chain Web Security + CASB in cloud
© 2019 Forcepoint | 13
Digital Transformation is Changing Distributed NETWORKs
Move from costly hub-and-spoke MPLS to Direct-to-Cloud networks using broadband
Performance needs of interactive SaaS apps
Support DevOps’ virtual deployments with visibility and enforcement across DC/edge/branch/clouds
Enterprise Workloadsmoving to the Cloud
Reduce complexity and cost by integrating connectivity, security, Web, and Cloud infrastructure
Security Service Consolidation
Segment networks and expose services securelyBalancing Accesswith Compliance & IoT
vsBYOD
IoT
© 2019 Forcepoint | 14
#2 Security
© 2019 Forcepoint | 15
Enterprise Grade Security
“The Forcepoint 2105 had the highest security effectiveness in the NSS Labs 2018 NGFW Group Test and its throughput was rated even higher than Forcepoint’s claimed performance.”Vikram PhatakCEONSS Labs
NGFW6th Consecutive Time
Forcepoint
BEST TCO
STR
ON
GES
T SE
CU
RIT
Y
NGIPS3nd Consecutive Time
© 2019 Forcepoint | 16
#3 Management
© 2019 Forcepoint | 17
Distributed Connectivity+Security: Centralized MGMT
Manage Branches • Edge • Data Centers • Cloud from one console
See what’s happening everywhere & interactively drill down
Turn sophisticated business processes into automated policies
Update hundreds of locations in minutes, not hours
© 2019 Forcepoint | 18
Human Centric Policy
© 2019 Forcepoint | 19
#4 Architecture
© 2019 Forcepoint | 20
Network Security Powered by Human AnalyticsCloud Services CASB
w/ DLPCASBApp Risk
ThreatIntelligence
InstallCloud
IP & FileReputation
URLFiltering
WebSecurity
AdvancedMalware
Detection
Security Management ConsoleUnified Policies, Dashboards & Reports
EndpointContext
ECA
EndpointIntegration
Unified Appliance with Deep Security Built-inPhysical, Virtual, Cloud
SD-WAN NGFW IPS
Anti-Evasion Decryption ProxiesVirtual
Contexts
VPN
EndpointAwareness
Segmentation
Centralized Management • High Availability
Insider ThreatData Loss Prevention
UEBA
DLPIT
coming
© 2019 Forcepoint | 21
#5 TCO
© 2019 Forcepoint | 22
Unified Appliances
6200 SeriesMax 66 interfacesFW 240 Gbps, IPS & NGFW 22 Gbps
1100 Series12 interfaces + opt. 2 modulesFW 50-60 Gbps, IPS & NGFW 1.5-3 Gbps
300 Series (desktop)5 interfaces + opt. 2 modules and WLAN on 325FW 4 Gbps, IPS & NGFW 200 Mbps
2100 SeriesMax 28 interfacesFW 60-80 Gbps, IPS & NGFW 5-7.5 Gbps
Branch
Office
Data Center
Campus
Edge
320X (ruggedized)4 interfaces + WLANFW 2 Gbps, IPS & NGFW 200 Mbps
SOHO
3300 SeriesMax 35 interfacesFW 80-160 Gbps, IPS & NGFW 9-15 Gbps
100 Series (desktop)10 interfaces (8 switch ports) + WLAN on 325FW 1.5 Gbps, IPS & NGFW 150 Mbps
CLOUDAWSAzure
VIRTUALHyper-V,
KVMVMware
ESXi & ESX
GROWING ACCLAIM FOR FORCEPOINT
#1 in SecurityRecommended for Short Lists
Solo Visionary 2018, Enterprise FirewallRecommended for Short Lists
MANAGEABILITY
53%Less IT
Staff Time
SECURITY
86%Fewer
Cyberattacks
CONNECTIVITY
70%Less Planned Maintenance
Customers Who Move toForcepoint Experience
Top NGFW2018
Top NGIPS2018
© 2019 Forcepoint | 24
BEST IN CLASS CAPABILITIES
ForcepointWeb Gateway
ForcepointMail Relay
ForcepointDLP
ForcepointAMD
ForcepointInsider Threat
ForcepointData Guard
ForcepointUEBA
ForcepointCASB
ForcepointNGFW &SD-WAN
Identify Shadow IT Control cloud servicesProtect Web traffic
© 2019 Forcepoint | 25
The continued transition to cloud
PRIVATE CLOUD
HYBRIDCLOUD
PUBLICCLOUD
85% of customershave a multi-cloud strategy
70% of IT Spendwill be cloud based by 2020
40% of enterprises are cloud first
© 2019 Forcepoint | 26
Are you Ready for the Next Wave of Shadow IT Innovation?
Source: chiefmartec.com http://cdn.chiefmartec.com/wp-content/uploads/2016/03/marketing_technology_landscape_2016_3000px.jpg
© 2019 Forcepoint | 27
BEST IN CLASS CAPABILITIES
ForcepointWeb Gateway
ForcepointMail RelayForcepoint
AMDForcepoint
Insider Threat
ForcepointData Guard
ForcepointUEBA
ForcepointCASB
ForcepointNGFW &SD-WAN
9 Times Gartner LeaderSingle ManagementOne policy for all platforms
ForcepointDLP
DATA SECURITY TODAY
Regulations Intellectual Property
Zero Perimeter World
MAP, MANAGE & CONTROL PERSONAL DATA FLOWS
PREPARE TO RESPOND IN A TIMELY MANNER
GENERAL DATA PROTECTION REGULATION: HOW FORCEPOINT CAN HELP
DLP: Network, EndpointWeb & Email Security modules
DLP: Discover,Cloud, Endpoint
Command Center
INVENTORYPERSONAL DATA
72
DATA PROTECTION: VISIBILITY & CONTROL
Everywhere your people work & data resides
Forcepoint DLP – Cloud Apps: Protect data at rest, in motion
& in useBroad coverage of cloud apsPowered by Forcepoint CASB (v8.5)
Forcepoint Security Manager: Single Point of Control & Risk-based User Insights
Forcepoint DLP – Endpoint: Protect data at rest, in motion
& in useWindows, Mac & Linux
Forcepoint DLP – Network: Protect data in motionFlexible deployments
Gateway: appliance & VMIntegrated into Forcepoint Web & Email
Forcepoint DLP – Discover: Protect data in restIdentify & remediate data
Structured data (databases)Office documents & emails
FEATURES & CAPABILITIES (NO NEED CASB LICENSE)
Data in motion AND data discovery
One Policy to cover it all
Data Upload; Download; Sharing
Enterprise DLP features: GDPR; Fingerprinting; Machine Learning; Incident Risk Ranking; OCR (8.6);
Forcepoint hosted solution
1
2
3
4
5
Launch Applications
© 2019 Forcepoint | 32
BEST IN CLASS CAPABILITIES
ForcepointWeb Gateway
ForcepointMail RelayForcepoint
AMDForcepoint
Insider Threat
ForcepointData Guard
ForcepointUEBA
ForcepointCASB
ForcepointNGFW &SD-WAN
Cover ANY! ApplicationInherited DLPWith behavioral analytics
ForcepointDLP
© 2019 Forcepoint | 33
ELIMINATE SECURITY BLIND SPOTS FOR any CLOUD APPS
DISCOVERYInsight into what apps are being used by employees
ENFORCEMENTAutomated threat prevention and context-aware policy enforcement
RISK ASSESSMENTContextual risk of apps, users,
and security configurations
ACCOUNT TAKE OVER DATA PROTECTION DEVICE ACCESS CONTROL
ACCOUNT CONTROL & MONITORING AUDIT OF USER ACTIVITIES
FORCEPOINT CASB
© 2019 Forcepoint | 34
Forcepoint CASB ADVANTAGES
Cloud UEBA that is optimized to
cloud behavioral patterns
BYOD access management and
control
Cloud Monitoring and control - ANY cloud application
and 1000s of activities in each
appProven Time-to-Value with quick
and easy onboarding with
multi-modal support
Robust integration with Forcepoint
solutions and other 3rd party
© 2019 Forcepoint | 35
Customers Trust Forcepoint for Cloud App Visibility and Control
“Forcepoint CASB has given us the visibility and control that we need in order to fully leverage the potential of cloud applications on mobile devices.”
Luis Aguiar, Manager –Infrastructure Delivery Team
Leader, Metro Bank
© 2019 Forcepoint | 36
BEST IN CLASS CAPABILITIES
ForcepointMail Relay
ForcepointDLP
ForcepointAMD
ForcepointCASB
ForcepointNGFW &SD-WAN
ForcepointWeb Gateway
ForcepointInsider Threat
ForcepointData Guard
ForcepointUEBA
Converged integrated solutions
Best of breed + Consolidated
Follow us!
Forcepoint LLC@Forcepoint Forcepoint @ForcepontSec
@ForcepointLabs
Forcepoint