More Things You Can Do with the AlgoSec Security Policy Management Suite
•Als PPT, PDF herunterladen•
0 gefällt mir•509 views
This document discusses various ways that a security policy management suite can be used, including integrating with SIEM systems to provide instant visibility into applications impacted by exposed servers, detecting missing routers in the network map to gain complete visibility, using micro-segmentation to better control east-west traffic, engaging stakeholders more easily through chatops, and providing c-level executives with rich reporting capabilities on key security metrics through automated dashboard emails.
Empfohlen
Empfohlen
Weitere ähnliche Inhalte
Was ist angesagt?
Was ist angesagt? (20)
Ähnlich wie More Things You Can Do with the AlgoSec Security Policy Management Suite
Ähnlich wie More Things You Can Do with the AlgoSec Security Policy Management Suite (20)
Mehr von AlgoSec
Mehr von AlgoSec (8)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
More Things You Can Do with the AlgoSec Security Policy Management Suite
- 1. More things you can do with a security policy management suite Dania Ben Peretz, Product Manager
- 2. Welcome Have a question? Submit it via the chat This webinar is being recorded! Slides and recording will be sent to you after the webinar 2 marketing@algosec.com
- 3. Do you have a network security management solution in place today? • Yes, we do • No, still researching • Yes, we are using the AlgoSec solution Please vote using the “votes” tab in your BrightTALK panel poll 3
- 4. Agenda Tying Cyber Attacks to Business Impact Achieving Automation Gaining Visibility into Unprotected Flows Accelerating the Speed of Business AlgoSec Reporting Tool 01 02 03 04 05 4
- 6. Integrating with SIEM Systems A server is flagged as exposed to an attack Fast impact analysis and isolation are required INTRODUCING: ALGOSEC PLUGIN FOR YOUR SIEM SYSTEM Get instant visibility into applications impacted by this server Immediately initiate isolation of the exposed server Continue using the SIEM system interface 6
- 7. Business applications impacted by Incident • Critical application? (priority, business impact) • Firewalls in path for internet connectivity 7
- 8. Incident Reachability analysis Can reach Internet? Data exfiltration Can reach critical zones? Damage potential 8
- 9. remediation – automate server isolation Change request to drop traffic to/from infected server 9
- 10. Complete Gaps in Your Network Map 10
- 11. Detect Missing Routers in Your Network Map • A complete map is essential to enjoy zero-touch automation! • Review and modify application connectivity Why is it so important? 11
- 12. Detect Missing Routers in Your Network Map 12
- 14. Gaining visibility into unprotected flows 14
- 16. 16 Better security with Micro- Segmentation • Introduce filtering choke-points between zones • Allows control of east-west traffic • Enables restriction of lateral movement between zones • Making it a reality • Traditional data centers: place hardware and cabling • Virtualized networks: use built-in Firewalls as part of the infrastructure
- 18. How we consume content and use the net 199 5 We b Application s Conversatio nal 200 7 201 9 18
- 19. Engage stakeholders more easily There’s an issue with this application, who’s its owner? Server 192.168.52.56 was compromised – what are the critical processes it uses for? This server needs to be taken down… who should I speak to? I need to know the activity times of this application server - we need to migrate it 19
- 20. Chatops to accelerate your business AlgoBot in Slack 20
- 21. Meet algobot Queries the Algosec Security Management Suite 01 02 Knows your permissions Accessible through Slack and Skype for Business 03 21
- 22. POLL Who are the stakeholders in your company that will benefit the most from the AlgoBot engagement? Cloud deployment team DevOps Other All 01 02 03 04 22 Please vote using the “votes” tab in your BrightTALK panel
- 23. THE ALGOSEC REPORTING TOOL for c-level 23
- 24. 24 Enhancing C-Level Visibility Summary of problems, trends and bottom-line numbers Delivered to their inbox Receive reports periodically Prefer colorful visuals: dashboards and charts
- 25. AlgoSec Reporting Tool Rich reporting capabilities on AlgoSec’s top 3 entities: • Devices • Change Requests • Business Applications Rich set of out-of-the- box dashboards and charts 01 02 25
- 29. Security rating over time And Many More 29
- 31. Number of change requests by status per device group 31
- 32. Change requests per application And Many More 32
- 33. The algosec reporting tool is simple Export the dashboards to PDF or CSV format Schedule sending these dashboard to C-Level recipients Easily create charts and dashboards 33
- 36. Poll How many reporting methods do you utilize in your business? (APIs, Syslog, and in-app reporting) • One • Two • All • None 36 Please vote using the “votes” tab in your BrightTALK panel
- 37. Q & A You are also welcome to request a demo and email questions marketing@algosec.com
- 38. More Resources SOLUTION BROCHURE PPT PROF. WOOL EDUCATIONAL VIDEOS www.algosec.com/resources https://www.algosec.com/algobot/ REQUEST A DEMO
- 39. 39 Join our community Follow us for the latest on security policy management trends, tips & tricks, best practices, thought leadership, fun stuff, prizes and much more! Subscribe to our YouTube channel for a wide range of educational videos presented by Professor Wool youtube.com/user/AlgoSe c linkedin.com/company/AlgoSec facebook.com/AlgoSec twitter.com/AlgoSec www.AlgoSec.com/blog
- 40. THANK YOU! Questions can be emailed to marketing@algosec.com