Une plongée dans le dernières fonctionnalités de SUSE NeuVector 5.0 : - Détection des attaques WAF (Web Application Firewall) - Protection automatisée des conteneurs (Zero Drift) - Analyses des vulnérabilités SLE - Intégration avec SUSE Rancher 2.6.5

1. © Copy right 2021 SUSE. All Rights Reserv ed. 1
NeuVector 5.0
Sécurité des conteneurs
3 juin 2022

2. © Copy right 2021 SUSE. All Rights Reserv ed. 2
Agenda
1
2
3
4 Q&A
Introduction
NeuVector
Demo

3. Copyright © SUSE 2022
The Challenge
Container are
becoming more
prevalent
Traditional
Security tools
don’t work in these
environments
Kubernetes abstracts
the complexity of
container networking
for the trade-off of
network

4. Copyright © SUSE 2022
Layered Security : Defense in depth
Supply Chain Security
Vulnerability Scanning
Compliance Scanning
Admission Control
Runtime Security
Runtime Scanning
Threat Based Controls
Zero-Trust Controls

5. Copyright © SUSE 2022
Supply Chain Security
DEVELOPER
Commits
Code
CI/CD
PIPELINE
Pass
Build
PRIV/PUB
REGISTRY
Admission
Control
RUN-TIME
Supply Chain Security
Vulnerability Scanning
Compliance Scanning
Admission Control

6. Copyright © SUSE 2022
Run Time Security: Defense in Depth
CVEs
Data Loss Prevention (DLP)
Network Attacks
Web App Firewall (WAF)
Admission Control
Threat Based
Controls
Automated Learning
Network
Process
File Access
Security as Code
Zero-Trust
Controls
Runtime Security
Runtime Scanning
Threat Based Controls
Zero-Trust Controls

7. 7
© Copy right 2021 SUSE. All Rights Reserv ed.
SUSE NeuVector is Unique
• 100% Open Source
• Network Visibility in Production
• Zero Trust Protections
• Network, process and file access
• Data Loss Prevention for Compliance
• Easy to deploy – K8s native
• Designed for any Kubernetes environments
• Support for Air-Gapped Environments

8. Copyright © SUSE 2022 8
SUSE’s Enterprise Container Management Stack
Authentication Policy Enforcement & Governance
Simplified Cluster Operations & Infrastructure Management (Run & Manage)
Platform Services (Build & Secure)
Amazon
EKS
Azure
AKS
Google
GKE
Cloud
Datacenter Edge
Branch
Dev
K8s Version
Management
GitOps Continuous
Delivery
Cluster Templates &
Config Enforcement
Node Pool
Management
Cluster Provisioning &
Lifecycle Management
Centralized Audit &
CIS Benchmarking
AIOps, Monitoring &
Logging
OPA & KubeWarden
RBAC, Pod &
Network Policies
Rancher
Catalog
Monitoring &
Alerts
Dashboards &
Observability
Service
Mesh
Longhorn
Storage
Cloud-Native Hyperconverged Infrastructure
Virtual Machine &
OS* Management
Container
Security
Enterprise
Linux
Developer
Services
Deployment
Engine
Container
Image
Rancher
Desktop
SUSE Linux
Enterprise*
Ubuntu
Linux
Oracle
Linux
Amazon
Linux
Red Hat
Linux

9. © Copy right 2021 SUSE. All Rights Reserv ed. 9
Copyright © SUSE 2021
Deploying NeuVector

10. Copyright © SUSE 2022
Install NeuVector from Catalog

11. Copyright © SUSE 2022
Configure Chart (1/4)
RKE : use Docker Runtime option
RKE2/k3s : use k3s Containerd Runtime option

12. Copyright © SUSE 2022
Configure Chart (2/4)
Configure persistent storage

13. Copyright © SUSE 2022
Configure Chart (3/4)

14. Copyright © SUSE 2022
Configure Chart (4/4)

15. Copyright © SUSE 2022
Login
NeuVector 5.0
Live Demo

16. Copyright © SUSE 2021
Date Sujet
7 au 9 Juin
SUSECON Digital 2022
https://susecon.com
Vendredi 1er Juillet
Rancher Rodéo
https://more.suse.com/rancher-rodeo-fr-july.html
Evènements

17. Copyright © SUSE 2022
http://slack.rancher.io
Join the Rancher Slack Network

18. Copyright © SUSE 2022
https://community.suse.com
Join the SUSE & Rancher Community

19. © Copy right 2021 SUSE. All Rights Reserv ed. 19
Questions?

20. © Copy right 2021 SUSE. All Rights Reserv ed. 20
Thanks for Attending!