Harri Hamalainen, territory manager Finland & Baltic countries McAfee https://dssitsec.eu

1. (Re)introducing McAfee. The device-to-cloud cybersecurity company.
How to maintain business equally
secured in corporate network and cloud
• Adaptive Security Architecture
• CASB - Cloud Access Security Broker
Harri Hämäläinen | Territory Manager, Finland & Baltics

2. MCAFEE CONFIDENTIAL
Security’s Perfect Storm
The continued need for an efficient security framework
2
Time Imperative
Comprehension and response
cannot happen fast enough
Increasing Complexity
Threats continue to rise
while mobility and cloud
erode our control
Resource Constraints
There’s not enough people or
budget to throw at the problem

3. MCAFEE CONFIDENTIAL
Is there a Silver Bullet?
No! 

4. MCAFEE CONFIDENTIAL
We must
Cooperate!

5. MCAFEE CONFIDENTIAL
Asset
Threat
Identity
Activity
BPM
Risk
Data
Location
Data Exchange Layer
An innovative, real-time, bi-directional
communications fabric providing with
product integration simplicity.
Security components operate as one to
immediately share relevant data between
endpoint, gateway, and other security
products enabling security intelligence
and adaptive security.
THE SECURITY CONNECTED FRAMEWORK
ADAPTIVE SECURITY ARCHITECTURE

6. MCAFEE CONFIDENTIAL
Data Exchange Layer
Make smarter decision, faster with unified components and streamlined communication
6
Result
Slow, heavy, and burdensome
Complex and expensive to maintain
Limited vendor participation
Fragmented visibility
Result
Fast, lightweight, and streamlined
Simplified and reduced TCO
Open vendor participation
Holistic visibility
Disjointed API-Based
Integrations
Collaborative Fabric-Based
Ecosystem (DXL)

7. MCAFEE CONFIDENTIAL
z
Partners and An Open, Full-Featured Platform

8. MCAFEE CONFIDENTIAL

9. MCAFEE CONFIDENTIAL
Cloud Access Security Broker
enables organizations to accelerate their
business by giving them total control over
their data in the cloud

10. MCAFEE CONFIDENTIAL
Where is your sensitive data today?
16%
31%
8%
7%
13%
11%
5%
5%
Salesforce
Office 365
Google Docs 2%
Slack 2%
AWS
Custom Apps
Box
ServiceNow
High-Risk Shadow
Med/Low-Risk
Shadow

11. MCAFEE CONFIDENTIAL

12. 12 ©Skyhigh Networks. All rights reserved. Skyhigh Confidential.
Network security fails to protect data in the cloud & mobile
Data created natively in
cloud is invisible to
network security
Data uploaded to cloud
from mobile is invisible
to network security
50% of cloud traffic is
cloud-to-cloud and invisible
to network security

13. 13 ©Skyhigh Networks. All rights reserved. Skyhigh Confidential.
Two insufficient approaches to protecting data in the cloud
API
Proxy
Agent
Real time
Complete coverage
Data at rest
Data uploaded
Data created in cloud
Standard apps
Certificate pinned apps
Real time
Complete coverage
Data at rest
Data uploaded
Data created in cloud
Standard apps
Certificate pinned apps
CASB

14. 14 ©Skyhigh Networks. All rights reserved. Skyhigh Confidential.
McAfee’s unique approach
Lightning LinkSky Gateway
Ground Link
Sky Link
One platform with
unified polices across
cloud services
Real time
Complete coverage
Data at rest
Data uploaded
Data created in cloud
Standard apps
Certificate pinned apps
No new agents
No friction
SaaS
Shadow IT
IaaS Custom Apps

15. MCAFEE CONFIDENTIAL
Employees
Partners
Customers
Vendors
Managed
Unmanaged
Mass migration to the cloud
On-Network Off-Network

16. Where do we go from here?

17. Data and Workload Protection
Threat Detection and Response
Real-time Data Bus
Machine
Learning
Detect &
Response
Attack
Reconstruction
Entity Behavioral Analytics
Management & Orchestration
Security OperationsDevice Cloud
System level Data Protection
System level Threat Detection and
Response
Automation & Orchestration
(Proactive / Reactive)
Visibility and contextual control in
hybrid and multi-cloud environment
SaaS
IoT
Mobile
Traditional
Threats Data & Applications
Data Visibility Data Controls
Application
Controls
Public
IaaS/PaaSData
Visibility and contextual control
Data Protection
Threat Detection and Response
Private
IaaS/PaaS

18. Innovative Portfolio
Device
Cloud
Security
Operations
Open Platform
Detect & Response
(Active Response)
Traditional Protection
Advanced Protection
Machine Learning
(Real Protect)
Data Protection &
Encryption
(DLP / MDE)
User Behavior Analytics
(MBA)
SOC Platform
(ESM 11)
Sandboxing
(ATD)
SOC Insights
(Investigator)
Cloud Workload
Security (CWS)
McAfee Skyhigh
Security Cloud (CASB)
Hybrid Secure Web
Gateway
Network Security
Platform (NSP)
Ecosystem
(SIA)
Open Management
Platform
Threat Sharing
(Open DXL)

19. Product Integrations Planned
Cybersecurity from the Device to the Cloud
Comprehensive Data Loss Prevention
Complete Visibility and Data Protection
Governance of Corporate Data to be
limited to Secure Corporate-Owned Devices
Advanced Threats and Adaptive Controls
from Devices to Cloud
End-Point DLP Cloud DLP
Web Gateway Shadow IT
Client Proxy
Contextual
Access
Control
GTI, DXL, ATD
Threat
Telemetry

20. The McAfee
Advantage: Open &
Proactive
 McAfee ePolicy Orchestrator® (McAfee ePO™)
offers single pane-of-glass management
and unified workflows for partners in
McAfee® SIA ecosystem
 Data Exchange Layer (DXL) provides
threat intelligence sharing in multivendor
environments over a common messaging
bus-now linked with Cisco pxGrid
 Global Threat Intelligence (GTI) monitors
millions of worldwide sensors for threats
and automatically updates reputation
information via the cloud