AlgoSec, profile picture
Uploaded byAlgoSec
PPTX, PDF954 views

2019 08-13 selecting the right security policy management solution

The document discusses key considerations for selecting a network security policy management solution. It emphasizes the importance of intelligent automation throughout the workflow to streamline processes. An application-centric approach is also highlighted to better align security with business needs. When combining new automation technologies with existing processes, organizations should look to optimize workflows by reducing manual steps and introducing zero-touch automation where possible. Effective solutions also provide uniform management and visibility across hybrid environments involving cloud, SDN and on-premises infrastructure.

Embed presentation

Downloaded 13 times
SELECTING THE RIGHT SECURITY POLICY MANAGEMENT SOLUTION Kyle Wickert AlgoSec Worldwide Strategic Architect
WELCOME Have a question? Submit it via the chat This webinar is being recorded! Slides and recording will be sent to you after the webinar 2 marketing@algosec.com
3 Intelligent Automation – It’s More Than Just Defining Policies A Application- Centric Approach Sets The Stage For The Future Managing A Hybrid Environment Together – Cloud, SDN, & On- Premise Using The Best Of Existing Processes, Combine With New Automation Techniques SELECTING THE RIGHT SECURITY POLICY MANAGEMENT SOLUTION THE AGENDA
POLL #2: IN REGARDS TO THE NETWORK SECURITY POLICY MANAGEMENT SOLUTION, WHICH CATEGORY DO YOU SEE YOURSELF? Please vote using the “Votes from Audience” tab in your BrightTALK panel 4 • This is my first time purchasing a Security Policy Management solution • I’m looking to replace an existing solution • I’m looking to expand my Network Security Policy Management solution • My organization is expanding into the public or SDN and I’m looking to understand more
5 HIGH LEVEL… WRITEUP…. Intelligent Automation – It’s More Than Just Defining Policies
 Intelligent Automation is about connectivity fulfillment vs point policy creation INTELLIGENT AUTOMATION • Intelligent Automation is about intelligently enhancing & automating time consuming security processes • Much More Than “Create Rule On This Device”: • Algorithms augment human known-how • Actionable & intelligent analysis added throughout the workflow • Policy-Push is just the tip of the iceberg! 6
INTELLIGENT AUTOMATION WORKFLOW 7 Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify
INTELLIGENT AUTOMATION WORKFLOW 8 Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Leverage Traffic Simulation engine to work across on-premise, SDN, and cloud security controls to automatically analyze traffic requests and discover all devices and rules which need to be changed! Unnecessary ("already works") changes should be instantly identified and closed and requestors notified – Real-world customers see 30% of change requests automatically closed!
INTELLIGENT AUTOMATION WORKFLOW 9 Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Automatically assess every proposed change – before it is implemented – to ensure compliance with regulatory and corporate standards, and identify any changes in risk levels. This process should be proactive & tailored to suit individual specific compliance & enterprise security standards
INTELLIGENT AUTOMATION WORKFLOW 10 Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Automatic & intelligent design of technical implementation steps for all requests, to ensure they are designed in the most efficient method possible avoiding future policy cleanup efforts & optimization challenges. Automated implementation of policy changes directly on the device, cloud platform, or firewall management platform, to save time and remove manual errors
INTELLIGENT AUTOMATION WORKFLOW 11 Design Of Policy Should Be Aware Of Policy Hierarchy…. Intelligent design of technical implementation steps must factor in policy complexities, including awareness of policy hierarchy, to correctly place new policies
INTELLIGENT AUTOMATION WORKFLOW 12 Assume we wish to allow the following traffic: The traffic is partially allowed, 1.1.1.1-2.2.2.2 is not allowed by any rule Design of policies must consider traffic which is already permitted, which enables improved design considerations around modification where needed
INTELLIGENT AUTOMATION WORKFLOW Implementation designs should consider policy structure, and recommend policy modifications, based on Least Privileged Access, where suitable!
INTELLIGENT AUTOMATION WORKFLOW 14 Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Post-implementation peer- review should be completely automated, to further reduce manual efforts. This ensures the Network Analyst responsible for the request implementation can be confident the request was implemented accurately. This functionality is critical in preventing the premature closing of tickets & avoiding defective policies being sent to the business as completed
15 HIGH LEVEL… WRITE UP… A Application-Centric Approach Sets The Stage For The Future
POLL #2: IS YOUR ORGANIZATION CONSIDERING AN APPLICATION-CENTRIC APPROACH WHEN LOOKING AT A NETWORK SECURITY POLICY MANAGEMENT SOLUTION? Please vote using the “Votes from Audience” tab in your BrightTALK panel 16 • No, not really • Yes, but no defined time-frame • Yes, within the next year • Yes, within the next 3 years • Yes, within the next 5 years
 Network Security Policy Management Solutions must cater to enabling & transforming the business BUSINESS-CENTRIC APPROACH • A Business-Centric Approach should be focused on aligning processes, with business goals & mindset • Application context weaved through solution • “Plain English” connectivity provisioning • Breakdown communication walls between teams 17
BUSINESS-CENTRIC APPROACH Application Owners Security Network Operations
BUSINESS-CENTRIC APPROACH
BUSINESS-CENTRIC APPROACH
BUSINESS-CENTRIC APPROACH Kyle, I duplicated this slide – it’s a placeholder for what you want to flush out
22 HIGH LEVEL… WRITE UP… Using The Best Of Existing Processes, Combine With New Automation Techniques
 Bottom line: WORDS COMBINING AUTOMATION WITH EXISTING PROCESSES • New automation technologies, should be merged with existing process • Avoid introduction of “manual steps” into automation solutions • Introduce zero-touch where possible, to maximize value • Streamline workflow by leveraging out-of- box where possible 23
COMBINING AUTOMATION WITH EXISTING PROCESSES • New automation technologies, should be merged with existing process • Avoid introduction of “manual steps” into automation solutions • Introduce zero-touch where possible, to maximize value • Streamline workflow by leveraging out-of- box where possible 24
COMBINING AUTOMATION WITH EXISTING PROCESSES • Zero-Touch 25
COMBINING AUTOMATION WITH EXISTING PROCESSES Existing Change Request/ Orchestration Solution Connectivity Functional? No Yes Success
27 HIGH LEVEL… WRITE UP… Managing A Hybrid Environment Together – Cloud, SDN, & On-Premise
 Bottom line: WORDS MANAGE HYBRID ENVIRONMENTS • Hybrid Environments should be managed uniformly & seamlessly within existing processes • Cloud Platforms visibility focused on security control points • SDN Platforms • Single Pane of Glass visibility to the hybrid datacenter & applications moving across 28
MANAGE HYBRID ENVIRONMENTS • Hybrid Environments should be managed uniformly & seamlessly within existing processes • Cloud Platforms visibility focused on security control points • SDN Platforms • Single Pane of Glass visibility to the hybrid datacenter & applications moving across 29 AWS Estate – Cloud EnvironmentOn Prem – Physical Network VPN Tunnel / DirectConnect
SELECTING THE RIGHT SECURITY POLICY MANAGEMENT SOLUTION Kyle Wickert AlgoSec Worldwide Strategic Architect
WELCOME Have a question? Submit it via the chat This webinar is being recorded! Slides and recording will be sent to you after the webinar 31 marketing@algosec.com
32 Intelligent Automation – It’s More Than Just Defining Policies A Application- Centric Approach Sets The Stage For The Future Managing A Hybrid Environment Together – Cloud, SDN, & On- Premise Using The Best Of Existing Processes, Combine With New Automation Techniques SELECTING THE RIGHT SECURITY POLICY MANAGEMENT SOLUTION THE AGENDA
POLL #2: IN REGARDS TO THE NETWORK SECURITY POLICY MANAGEMENT SOLUTION, WHICH CATEGORY DO YOU SEE YOURSELF? Please vote using the “Votes from Audience” tab in your BrightTALK panel 33 • This is my first time purchasing a Security Policy Management solution • I’m looking to replace an existing solution • I’m looking to expand my Network Security Policy Management solution • My organization is expanding into the public or SDN and I’m looking to understand more
34 Consider how a Security Policy Management Solution introduces intelligent automation into your processes, to streamline decision making & work effort! Intelligent Automation – It’s More Than Just Defining Policies
 Intelligent Automation is about connectivity fulfillment vs point policy creation INTELLIGENT AUTOMATION • Intelligent Automation is about intelligently enhancing & automating time consuming security processes • Much More Than “Create Rule On This Device”: • Algorithms augment human known-how • Actionable & intelligent analysis added throughout the workflow • Policy-Push is just the tip of the iceberg! 35
INTELLIGENT AUTOMATION WORKFLOW 36 Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify
INTELLIGENT AUTOMATION WORKFLOW 37 Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Leverage Traffic Simulation engine to work across on-premise, SDN, and cloud security controls to automatically analyze traffic requests and discover all devices and rules which need to be changed! Unnecessary ("already works") changes should be instantly identified and closed and requestors notified – Real-world customers see 30% of change requests automatically closed!
INTELLIGENT AUTOMATION WORKFLOW 38 Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Automatically assess every proposed change – before it is implemented – to ensure compliance with regulatory and corporate standards, and identify any changes in risk levels. This process should be proactive & tailored to suit individual specific compliance & enterprise security standards
INTELLIGENT AUTOMATION WORKFLOW 39 Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Automatic & intelligent design of technical implementation steps for all requests, to ensure they are designed in the most efficient method possible avoiding future policy cleanup efforts & optimization challenges. Automated implementation of policy changes directly on the device, cloud platform, or firewall management platform, to save time and remove manual errors
INTELLIGENT AUTOMATION WORKFLOW 40 Design Of Policy Should Be Aware Of Policy Hierarchy…. Intelligent design of technical implementation steps must factor in policy complexities, including awareness of policy hierarchy, to correctly place new policies
INTELLIGENT AUTOMATION WORKFLOW 41 Assume we wish to allow the following traffic: The traffic is partially allowed, 1.1.1.1-2.2.2.2 is not allowed by any rule Design of policies must consider traffic which is already permitted, which enables improved design considerations around modification where needed
INTELLIGENT AUTOMATION WORKFLOW Implementation designs should consider policy structure, and recommend policy modifications, based on Least Privileged Access, where suitable!
INTELLIGENT AUTOMATION WORKFLOW 43 Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Post-implementation peer- review should be completely automated, to further reduce manual efforts. This ensures the Network Analyst responsible for the request implementation can be confident the request was implemented accurately. This functionality is critical in preventing the premature closing of tickets & avoiding defective policies being sent to the business as completed
44 Organizations world-wide are undergoing massive digital transformation, and moving forward IT must cater to the business by driving change from applications downward. It is imperative any Security Policy Management Solution supports this methodology! A Application-Centric Approach Sets The Stage For The Future
POLL #2: IS YOUR ORGANIZATION CONSIDERING AN APPLICATION-CENTRIC APPROACH WHEN LOOKING AT A NETWORK SECURITY POLICY MANAGEMENT SOLUTION? Please vote using the “Votes from Audience” tab in your BrightTALK panel 45 • No, not really • Yes, but no defined time-frame • Yes, within the next year • Yes, within the next 3 years • Yes, within the next 5 years
 Network Security Policy Management Solutions must cater to enabling & transforming the business APPLICATION-CENTRIC APPROACH • A Application-Centric Approach should be focused on aligning processes, with business goals & mindset • Application context weaved through solution • “Plain English” connectivity provisioning • Breakdown communication walls between teams 46
APPLICATION-CENTRIC APPROACH Application Owners Security Network Operations
APPLICATION-CENTRIC APPROACH Application Owners
APPLICATION-CENTRIC APPROACH
50 Many organizations maintain existing network change processes which involve manual steps & decision making. Injecting these practices into a modern Security Policy Management Solution can often slow deployment. Organizations should take an opportunity to take fresh look & optimize processed, with automation “baked in”! Using The Best Of Existing Processes, Combine With New Automation Techniques
 LEVERAGING A COMBINATION TO EXISTING PROCESSES WITH NEW AUTOMATION TECHNIQUES, IS KEY TO SUCCESS COMBINING AUTOMATION WITH EXISTING PROCESSES • New automation technologies, should be merged with existing process • Avoid introduction of “manual steps” into automation solutions • Introduce zero-touch where possible, to maximize value • Streamline workflow by leveraging out-of- box where possible 51
COMBINING AUTOMATION WITH EXISTING PROCESSES • Avoid introducing manual steps from legacy processes, into a new automation solution! • Streamline processes & leverage automation to drive efficiencies for standard changes 52 Firewall Change Coordinator Network Review Security Review Network Implementation Design Firewall Change Request CAB Board Security Director Approval Network Implementation Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify = Asynchronous Zero-Touch Enabled
COMBINING AUTOMATION WITH EXISTING PROCESSES • Zero-Touch can be leveraged to reduce security approval bottlenecks & speed DevOps in specific environments! 53 Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify = Asynchronous Zero-Touch Enabled IF <DEVICE> = DEV Automated Implementation! IF <RISK> = NONE Automated Approval!
COMBINING AUTOMATION WITH EXISTING PROCESSES Existing Change Request/ Orchestration Solution Connectivity Functional? No Yes Success • Leverage out-of-box functionality to provide value quickly! • Traffic Simulation APIs • Connectivity-As-Code for DevOps
55 While Cloud & SDN technologies drive drastic change & offer new innovative opportunities, the learning curve can be steep. An effective Security Policy Management Solution should offer capabilities to smooth this curve & speed adoption of these critical technologies! Managing A Hybrid Environment Together – Cloud, SDN, & On-Premise
 MAINTAINING UNIFORM CONTROL & VISBILITY ACROSS ALL ENVIRONMENTS IS KEY MANAGE HYBRID ENVIRONMENTS • Hybrid Environments should be managed uniformly & seamlessly within existing processes • Cloud Platforms visibility focused on security control points • SDN & Cloud integration should be seamlessly integrated, to ease learning curve • Single Pane of Glass visibility to the hybrid datacenter & applications 56
MANAGE HYBRID ENVIRONMENTS • “Security Set” approach should be use to manage cloud environments • Enhanced visibility into control points • Allows clearer understanding of layer protection provided to cloud assets • Enables clear visibility in large enterprise cloud estates 57
MANAGE HYBRID ENVIRONMENTS 58
MANAGE HYBRID ENVIRONMENTS • SDN & Cloud visibility must easily integrate into the NSPM solution, to make engineering resources effective quickly • A familiar experience can drastically speed up adoption of cloud & SDN! 59
MANAGE HYBRID ENVIRONMENTS • Hybrid Environments spread across Cloud & SDN, should be easily visible & integrated • Traffic Simulation capabilities should be supported across SDN, On-Premise, & Cloud to support complete automation! 60 AWS Estate – Cloud EnvironmentOn Prem – Physical Network VPN Tunnel / DirectConnect
Join our Online Community Q&A 61 Send us your questions Request a Free Evaluation: marketing@algosec.com youtube.com/user/AlgoSec linkedin.com/company/AlgoSec facebook.com/AlgoSec twitter.com/AlgoSec www.AlgoSec.com/blog
SUMMARY • Intelligent automation is about connectivity fulfillment vs point policy creation • Network security policy management solutions must cater to enabling & transforming the business • Leveraging a combination to existing processes with new automation techniques, is key to success • Maintaining uniform control & visbility across all environments is key 62
White Paper https://www.algosec.com/resources Prof. Wool Video Courses PPT SlidesSolution Brochure 63
64 JOIN OUR COMMUNITY Follow us for the latest on security policy management trends, tips & tricks, best practices, thought leadership, fun stuff, prizes and much more! Subscribe to our YouTube channel for a wide range of educational videos presented by Professor Wool youtube.com/user/AlgoSeclinkedin.com/company/AlgoSec facebook.com/AlgoSec twitter.com/AlgoSec www.AlgoSec.com/blog
THANK YOU! Questions can be emailed to marketing@algosec.com
THANK YOU! Questions can be emailed to marketing@algosec.com

More Related Content

PPT
More Things You Can Do with the AlgoSec Security Policy Management Suite
byAlgoSec
 
PDF
Cloud migrations made simpler safe secure and successful migrations
byAlgoSec
 
PPTX
Cisco Firepower Migration | Cisco and AlgoSec Joint Webinar
byAlgoSec
 
PPTX
SDN's managing security across the virtual network final
byAlgoSec
 
PPTX
Cisco ACI & Hybrid Networks - Breaking Down Silos with Central Policy Management
byAlgoSec
 
PDF
best practices-managing_security_in_the hybrid cloud
byAlgoSec
 
PDF
compliance made easy. pass your audits stress-free webinar
byAlgoSec
 
PPTX
2018 11-19 improving business agility with security policy automation final
byAlgoSec
 
More Things You Can Do with the AlgoSec Security Policy Management Suite
byAlgoSec
 
Cloud migrations made simpler safe secure and successful migrations
byAlgoSec
 
Cisco Firepower Migration | Cisco and AlgoSec Joint Webinar
byAlgoSec
 
SDN's managing security across the virtual network final
byAlgoSec
 
Cisco ACI & Hybrid Networks - Breaking Down Silos with Central Policy Management
byAlgoSec
 
best practices-managing_security_in_the hybrid cloud
byAlgoSec
 
compliance made easy. pass your audits stress-free webinar
byAlgoSec
 
2018 11-19 improving business agility with security policy automation final
byAlgoSec
 

What's hot

PPTX
Application visibility across the security estate the value and the vision ...
byAlgoSec
 
PPTX
2019 06-26 effective multi-vendor management -fortinet algo sec webinar final
byAlgoSec
 
PDF
2020 04-07 webinar slides -turning network security alerts into action change...
byAlgoSec
 
PPTX
Best Practics for Automating Next Generation Firewall Change Processes
byAdi Gazit Blecher
 
PDF
Build and enforce defense in depth - an algo sec-cisco tetration webinar
byAlgoSec
 
PDF
Microsegmentation from strategy to execution
byAlgoSec
 
PPTX
2018 10-11 automating network security policy management allows financial ins...
byAlgoSec
 
PDF
2021 02-17 v mware-algo-sec securely accelerate your digital transformation w...
byAlgoSec
 
PDF
2021 01-13 reducing risk-of_ransomware
byAlgoSec
 
PDF
Movin' On Up to the Cloud: How to Migrate your Application Connectivity
byshira koper
 
PPTX
Put out audit security fires, pass audits -every time
byAlgoSec
 
PDF
2021 01-27 reducing risk of ransomware webinar
byAlgoSec
 
PPT
Accelerate Application Deployment Across Cisco ACI Fabric, On-Premise Firewal...
byAlgoSec
 
PDF
Intent Based Networking: turning intentions into reality with network securit...
byshira koper
 
PPTX
2019 02-20 micro-segmentation based network security strategies (yoni geva)
byAlgoSec
 
PDF
Managing Application Connectivity in the World of Network Security
byshira koper
 
PDF
Radically reduce firewall rules with application-driven rule recertification
byAlgoSec
 
PPTX
Tying cyber attacks to business processes, for faster mitigation
byMaytal Levi
 
PDF
Managing application connectivity securely through a merger or acquisition – ...
byAlgoSec
 
PPT
Create and Manage a Micro-Segmented Data Center – Best Practices
byAlgoSec
 
Application visibility across the security estate the value and the vision ...
byAlgoSec
 
2019 06-26 effective multi-vendor management -fortinet algo sec webinar final
byAlgoSec
 
2020 04-07 webinar slides -turning network security alerts into action change...
byAlgoSec
 
Best Practics for Automating Next Generation Firewall Change Processes
byAdi Gazit Blecher
 
Build and enforce defense in depth - an algo sec-cisco tetration webinar
byAlgoSec
 
Microsegmentation from strategy to execution
byAlgoSec
 
2018 10-11 automating network security policy management allows financial ins...
byAlgoSec
 
2021 02-17 v mware-algo-sec securely accelerate your digital transformation w...
byAlgoSec
 
2021 01-13 reducing risk-of_ransomware
byAlgoSec
 
Movin' On Up to the Cloud: How to Migrate your Application Connectivity
byshira koper
 
Put out audit security fires, pass audits -every time
byAlgoSec
 
2021 01-27 reducing risk of ransomware webinar
byAlgoSec
 
Accelerate Application Deployment Across Cisco ACI Fabric, On-Premise Firewal...
byAlgoSec
 
Intent Based Networking: turning intentions into reality with network securit...
byshira koper
 
2019 02-20 micro-segmentation based network security strategies (yoni geva)
byAlgoSec
 
Managing Application Connectivity in the World of Network Security
byshira koper
 
Radically reduce firewall rules with application-driven rule recertification
byAlgoSec
 
Tying cyber attacks to business processes, for faster mitigation
byMaytal Levi
 
Managing application connectivity securely through a merger or acquisition – ...
byAlgoSec
 
Create and Manage a Micro-Segmented Data Center – Best Practices
byAlgoSec
 

Similar to 2019 08-13 selecting the right security policy management solution

PPT
Selecting the right security policy management solution for your organization
byAlgoSec
 
PDF
Security a Revenue Center: How Security Can Drive Your Business
byshira koper
 
PPTX
5 Clear Signs You Need Security Policy Automation
byTufin
 
PDF
[Webinar Slides] Maximizing Workforce Capacity - Proven Practices for Saving ...
byAIIM International
 
PDF
The Security Policy Management Maturity Model: How to Move Up the Curve
byAlgoSec
 
PPT
6 Areas of Inefficiency by ServiceSPAN
byDan Corcoran
 
PDF
5 things you didn't know you could do with security policy management
byAlgoSec
 
PDF
Human machine-interchange
byChristine Astovasadourian
 
PDF
Key innovative market trends for your policy administrative system
byAccenture Insurance
 
PPTX
Best Practices for Intelligent Compliance
byBMC Software
 
PPT
How much does it cost to be Secure?
bymbmobile
 
DOCX
Security Policies and Implementation IssuesLecture 5How to D.docx
byjeffreye3
 
PDF
Learn how an app-centric approach will improve security & operational efficiency
byAdi Gazit Blecher
 
PDF
Reshaping the Enterprise via Business-Facing Integrated Automation
byCognizant
 
PDF
Webinar: How automation can transform the way you manage your network securit...
byAlgoSec
 
PDF
Internal Operations Automation Journey | Accenture
byaccenture
 
PDF
Intelligent Automation Services: Transforming Enterprise Operations for the F...
bybasilmph
 
PPTX
Business Process Management, Millennials, Mobility and the Future of Digital...
byNathaniel Palmer
 
PPTX
It automation webinar presentation
byAuxis Consulting & Outsourcing
 
PPTX
It automation webinar presentation
byAuxis Consulting & Outsourcing
 
Selecting the right security policy management solution for your organization
byAlgoSec
 
Security a Revenue Center: How Security Can Drive Your Business
byshira koper
 
5 Clear Signs You Need Security Policy Automation
byTufin
 
[Webinar Slides] Maximizing Workforce Capacity - Proven Practices for Saving ...
byAIIM International
 
The Security Policy Management Maturity Model: How to Move Up the Curve
byAlgoSec
 
6 Areas of Inefficiency by ServiceSPAN
byDan Corcoran
 
5 things you didn't know you could do with security policy management
byAlgoSec
 
Human machine-interchange
byChristine Astovasadourian
 
Key innovative market trends for your policy administrative system
byAccenture Insurance
 
Best Practices for Intelligent Compliance
byBMC Software
 
How much does it cost to be Secure?
bymbmobile
 
Security Policies and Implementation IssuesLecture 5How to D.docx
byjeffreye3
 
Learn how an app-centric approach will improve security & operational efficiency
byAdi Gazit Blecher
 
Reshaping the Enterprise via Business-Facing Integrated Automation
byCognizant
 
Webinar: How automation can transform the way you manage your network securit...
byAlgoSec
 
Internal Operations Automation Journey | Accenture
byaccenture
 
Intelligent Automation Services: Transforming Enterprise Operations for the F...
bybasilmph
 
Business Process Management, Millennials, Mobility and the Future of Digital...
byNathaniel Palmer
 
It automation webinar presentation
byAuxis Consulting & Outsourcing
 
It automation webinar presentation
byAuxis Consulting & Outsourcing
 

More from AlgoSec

PDF
The state of the cloud csa survey webinar
byAlgoSec
 
PDF
Compliance made easy. Pass your audits stress-free.
byAlgoSec
 
PDF
2020 09-30 overcoming the challenges of managing a hybrid environment - aws a...
byAlgoSec
 
PPT
Cessation of Misconfigurations: Common Network Misconfiguration Risks & How t...
byAlgoSec
 
PPT
Managing Effective Security Policies Across Hybrid and Multi-Cloud Environment
byAlgoSec
 
PPTX
Zero Trust Framework for Network Security​
byAlgoSec
 
PPTX
2018 07-24 network security at the speed of dev ops - webinar
byAlgoSec
 
The state of the cloud csa survey webinar
byAlgoSec
 
Compliance made easy. Pass your audits stress-free.
byAlgoSec
 
2020 09-30 overcoming the challenges of managing a hybrid environment - aws a...
byAlgoSec
 
Cessation of Misconfigurations: Common Network Misconfiguration Risks & How t...
byAlgoSec
 
Managing Effective Security Policies Across Hybrid and Multi-Cloud Environment
byAlgoSec
 
Zero Trust Framework for Network Security​
byAlgoSec
 
2018 07-24 network security at the speed of dev ops - webinar
byAlgoSec
 

Recently uploaded

PPTX
Workflow and decision Automation with Flowable
bychakib ch
 
PDF
How AI Can Help Platform Engineers Build Better Platforms
byAll Things Open
 
PPTX
PPTX game guess the logo with a twistppt
byAdrianAnig
 
PDF
Escape from the Forbidden Zone: Smuggling green and inclusive tech past the g...
byBookNet Canada
 
PDF
Transcript: Escape from the Forbidden Zone: Smuggling green and inclusive tec...
byBookNet Canada
 
PDF
GTM-and-Sales-Plan for a cyber security product
byAshish Jangir
 
PDF
GenerationAI_Paris_2025_Architecting_Intelligence.pdf
byapidays
 
PDF
AI Vector Search Best Practices Multicloud Feb 2026
bySandesh Rao
 
PPTX
Celonis Optimizing your future with process
bydevjeremyappleyard
 
PDF
Preserve workload integrity during cross-architecture migration
byPrincipled Technologies
 
PDF
Odoo Implementation Checklist: A Strategic ERP Blueprint for Business-Ready D...
byBANIBRO IT SOLUTION
 
PDF
Effortless Distributed Systems with Aspire.pdf
byParticular Software
 
PDF
UiPath Automation Developer Associate Training Series 2025 - Session 4
byDianaGray10
 
PDF
20260212 Security-JAWS activity results for 2025 and activity goals for 2026
byTyphon 666
 
PDF
UiPath Automation Developer Associate Training Series 2026 - Session 3
byDianaGray10
 
PDF
Constraint Collapse and Fidelity Decay in Scaled Language Models
bySemantic Fidelity Lab | A. Jacobs
 
PDF
Chapter 5 Security Mechanisms iin computer security.pdf
byGetnet Tigabie Askale -(GM)
 
PDF
HOW TO OVERCOME THE THREATS OF ARTIFICIAL INTELLIGENCE AGAINST HUMANITY.pdf
byFaga1939
 
PDF
Bringing AI into R&D, Taking a Human-Centric Approach / Haim Yadid
byHaim Yadid
 
PPTX
apidays Paris 2025 | Building Agentic Workflows
byapidays
 
Workflow and decision Automation with Flowable
bychakib ch
 
How AI Can Help Platform Engineers Build Better Platforms
byAll Things Open
 
PPTX game guess the logo with a twistppt
byAdrianAnig
 
Escape from the Forbidden Zone: Smuggling green and inclusive tech past the g...
byBookNet Canada
 
Transcript: Escape from the Forbidden Zone: Smuggling green and inclusive tec...
byBookNet Canada
 
GTM-and-Sales-Plan for a cyber security product
byAshish Jangir
 
GenerationAI_Paris_2025_Architecting_Intelligence.pdf
byapidays
 
AI Vector Search Best Practices Multicloud Feb 2026
bySandesh Rao
 
Celonis Optimizing your future with process
bydevjeremyappleyard
 
Preserve workload integrity during cross-architecture migration
byPrincipled Technologies
 
Odoo Implementation Checklist: A Strategic ERP Blueprint for Business-Ready D...
byBANIBRO IT SOLUTION
 
Effortless Distributed Systems with Aspire.pdf
byParticular Software
 
UiPath Automation Developer Associate Training Series 2025 - Session 4
byDianaGray10
 
20260212 Security-JAWS activity results for 2025 and activity goals for 2026
byTyphon 666
 
UiPath Automation Developer Associate Training Series 2026 - Session 3
byDianaGray10
 
Constraint Collapse and Fidelity Decay in Scaled Language Models
bySemantic Fidelity Lab | A. Jacobs
 
Chapter 5 Security Mechanisms iin computer security.pdf
byGetnet Tigabie Askale -(GM)
 
HOW TO OVERCOME THE THREATS OF ARTIFICIAL INTELLIGENCE AGAINST HUMANITY.pdf
byFaga1939
 
Bringing AI into R&D, Taking a Human-Centric Approach / Haim Yadid
byHaim Yadid
 
apidays Paris 2025 | Building Agentic Workflows
byapidays
 

2019 08-13 selecting the right security policy management solution

  • 1.
    SELECTING THE RIGHT SECURITYPOLICY MANAGEMENT SOLUTION Kyle Wickert AlgoSec Worldwide Strategic Architect
  • 2.
    WELCOME Have a question?Submit it via the chat This webinar is being recorded! Slides and recording will be sent to you after the webinar 2 marketing@algosec.com
  • 3.
    3 Intelligent Automation – It’s MoreThan Just Defining Policies A Application- Centric Approach Sets The Stage For The Future Managing A Hybrid Environment Together – Cloud, SDN, & On- Premise Using The Best Of Existing Processes, Combine With New Automation Techniques SELECTING THE RIGHT SECURITY POLICY MANAGEMENT SOLUTION THE AGENDA
  • 4.
    POLL #2: IN REGARDSTO THE NETWORK SECURITY POLICY MANAGEMENT SOLUTION, WHICH CATEGORY DO YOU SEE YOURSELF? Please vote using the “Votes from Audience” tab in your BrightTALK panel 4 • This is my first time purchasing a Security Policy Management solution • I’m looking to replace an existing solution • I’m looking to expand my Network Security Policy Management solution • My organization is expanding into the public or SDN and I’m looking to understand more
  • 5.
    5 HIGH LEVEL… WRITEUP…. Intelligent Automation– It’s More Than Just Defining Policies
  • 6.
     Intelligent Automationis about connectivity fulfillment vs point policy creation INTELLIGENT AUTOMATION • Intelligent Automation is about intelligently enhancing & automating time consuming security processes • Much More Than “Create Rule On This Device”: • Algorithms augment human known-how • Actionable & intelligent analysis added throughout the workflow • Policy-Push is just the tip of the iceberg! 6
  • 7.
    INTELLIGENT AUTOMATION WORKFLOW 7 InitialPlan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify
  • 8.
    INTELLIGENT AUTOMATION WORKFLOW 8 InitialPlan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Leverage Traffic Simulation engine to work across on-premise, SDN, and cloud security controls to automatically analyze traffic requests and discover all devices and rules which need to be changed! Unnecessary ("already works") changes should be instantly identified and closed and requestors notified – Real-world customers see 30% of change requests automatically closed!
  • 9.
    INTELLIGENT AUTOMATION WORKFLOW 9 InitialPlan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Automatically assess every proposed change – before it is implemented – to ensure compliance with regulatory and corporate standards, and identify any changes in risk levels. This process should be proactive & tailored to suit individual specific compliance & enterprise security standards
  • 10.
    INTELLIGENT AUTOMATION WORKFLOW 10 InitialPlan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Automatic & intelligent design of technical implementation steps for all requests, to ensure they are designed in the most efficient method possible avoiding future policy cleanup efforts & optimization challenges. Automated implementation of policy changes directly on the device, cloud platform, or firewall management platform, to save time and remove manual errors
  • 11.
    INTELLIGENT AUTOMATION WORKFLOW 11 DesignOf Policy Should Be Aware Of Policy Hierarchy…. Intelligent design of technical implementation steps must factor in policy complexities, including awareness of policy hierarchy, to correctly place new policies
  • 12.
    INTELLIGENT AUTOMATION WORKFLOW 12 Assumewe wish to allow the following traffic: The traffic is partially allowed, 1.1.1.1-2.2.2.2 is not allowed by any rule Design of policies must consider traffic which is already permitted, which enables improved design considerations around modification where needed
  • 13.
    INTELLIGENT AUTOMATION WORKFLOW Implementation designsshould consider policy structure, and recommend policy modifications, based on Least Privileged Access, where suitable!
  • 14.
    INTELLIGENT AUTOMATION WORKFLOW 14 InitialPlan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Post-implementation peer- review should be completely automated, to further reduce manual efforts. This ensures the Network Analyst responsible for the request implementation can be confident the request was implemented accurately. This functionality is critical in preventing the premature closing of tickets & avoiding defective policies being sent to the business as completed
  • 15.
    15 HIGH LEVEL… WRITE UP… AApplication-Centric Approach Sets The Stage For The Future
  • 16.
    POLL #2: IS YOURORGANIZATION CONSIDERING AN APPLICATION-CENTRIC APPROACH WHEN LOOKING AT A NETWORK SECURITY POLICY MANAGEMENT SOLUTION? Please vote using the “Votes from Audience” tab in your BrightTALK panel 16 • No, not really • Yes, but no defined time-frame • Yes, within the next year • Yes, within the next 3 years • Yes, within the next 5 years
  • 17.
     Network SecurityPolicy Management Solutions must cater to enabling & transforming the business BUSINESS-CENTRIC APPROACH • A Business-Centric Approach should be focused on aligning processes, with business goals & mindset • Application context weaved through solution • “Plain English” connectivity provisioning • Breakdown communication walls between teams 17
  • 18.
  • 19.
  • 20.
  • 21.
    BUSINESS-CENTRIC APPROACH Kyle, Iduplicated this slide – it’s a placeholder for what you want to flush out
  • 22.
    22 HIGH LEVEL… WRITE UP… UsingThe Best Of Existing Processes, Combine With New Automation Techniques
  • 23.
     Bottom line:WORDS COMBINING AUTOMATION WITH EXISTING PROCESSES • New automation technologies, should be merged with existing process • Avoid introduction of “manual steps” into automation solutions • Introduce zero-touch where possible, to maximize value • Streamline workflow by leveraging out-of- box where possible 23
  • 24.
    COMBINING AUTOMATION WITHEXISTING PROCESSES • New automation technologies, should be merged with existing process • Avoid introduction of “manual steps” into automation solutions • Introduce zero-touch where possible, to maximize value • Streamline workflow by leveraging out-of- box where possible 24
  • 25.
    COMBINING AUTOMATION WITHEXISTING PROCESSES • Zero-Touch 25
  • 26.
    COMBINING AUTOMATION WITHEXISTING PROCESSES Existing Change Request/ Orchestration Solution Connectivity Functional? No Yes Success
  • 27.
    27 HIGH LEVEL… WRITE UP… ManagingA Hybrid Environment Together – Cloud, SDN, & On-Premise
  • 28.
     Bottom line:WORDS MANAGE HYBRID ENVIRONMENTS • Hybrid Environments should be managed uniformly & seamlessly within existing processes • Cloud Platforms visibility focused on security control points • SDN Platforms • Single Pane of Glass visibility to the hybrid datacenter & applications moving across 28
  • 29.
    MANAGE HYBRID ENVIRONMENTS •Hybrid Environments should be managed uniformly & seamlessly within existing processes • Cloud Platforms visibility focused on security control points • SDN Platforms • Single Pane of Glass visibility to the hybrid datacenter & applications moving across 29 AWS Estate – Cloud EnvironmentOn Prem – Physical Network VPN Tunnel / DirectConnect
  • 30.
    SELECTING THE RIGHT SECURITYPOLICY MANAGEMENT SOLUTION Kyle Wickert AlgoSec Worldwide Strategic Architect
  • 31.
    WELCOME Have a question?Submit it via the chat This webinar is being recorded! Slides and recording will be sent to you after the webinar 31 marketing@algosec.com
  • 32.
    32 Intelligent Automation – It’s MoreThan Just Defining Policies A Application- Centric Approach Sets The Stage For The Future Managing A Hybrid Environment Together – Cloud, SDN, & On- Premise Using The Best Of Existing Processes, Combine With New Automation Techniques SELECTING THE RIGHT SECURITY POLICY MANAGEMENT SOLUTION THE AGENDA
  • 33.
    POLL #2: IN REGARDSTO THE NETWORK SECURITY POLICY MANAGEMENT SOLUTION, WHICH CATEGORY DO YOU SEE YOURSELF? Please vote using the “Votes from Audience” tab in your BrightTALK panel 33 • This is my first time purchasing a Security Policy Management solution • I’m looking to replace an existing solution • I’m looking to expand my Network Security Policy Management solution • My organization is expanding into the public or SDN and I’m looking to understand more
  • 34.
    34 Consider how aSecurity Policy Management Solution introduces intelligent automation into your processes, to streamline decision making & work effort! Intelligent Automation – It’s More Than Just Defining Policies
  • 35.
     Intelligent Automationis about connectivity fulfillment vs point policy creation INTELLIGENT AUTOMATION • Intelligent Automation is about intelligently enhancing & automating time consuming security processes • Much More Than “Create Rule On This Device”: • Algorithms augment human known-how • Actionable & intelligent analysis added throughout the workflow • Policy-Push is just the tip of the iceberg! 35
  • 36.
    INTELLIGENT AUTOMATION WORKFLOW 36 InitialPlan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify
  • 37.
    INTELLIGENT AUTOMATION WORKFLOW 37 InitialPlan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Leverage Traffic Simulation engine to work across on-premise, SDN, and cloud security controls to automatically analyze traffic requests and discover all devices and rules which need to be changed! Unnecessary ("already works") changes should be instantly identified and closed and requestors notified – Real-world customers see 30% of change requests automatically closed!
  • 38.
    INTELLIGENT AUTOMATION WORKFLOW 38 InitialPlan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Automatically assess every proposed change – before it is implemented – to ensure compliance with regulatory and corporate standards, and identify any changes in risk levels. This process should be proactive & tailored to suit individual specific compliance & enterprise security standards
  • 39.
    INTELLIGENT AUTOMATION WORKFLOW 39 InitialPlan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Automatic & intelligent design of technical implementation steps for all requests, to ensure they are designed in the most efficient method possible avoiding future policy cleanup efforts & optimization challenges. Automated implementation of policy changes directly on the device, cloud platform, or firewall management platform, to save time and remove manual errors
  • 40.
    INTELLIGENT AUTOMATION WORKFLOW 40 DesignOf Policy Should Be Aware Of Policy Hierarchy…. Intelligent design of technical implementation steps must factor in policy complexities, including awareness of policy hierarchy, to correctly place new policies
  • 41.
    INTELLIGENT AUTOMATION WORKFLOW 41 Assumewe wish to allow the following traffic: The traffic is partially allowed, 1.1.1.1-2.2.2.2 is not allowed by any rule Design of policies must consider traffic which is already permitted, which enables improved design considerations around modification where needed
  • 42.
    INTELLIGENT AUTOMATION WORKFLOW Implementation designsshould consider policy structure, and recommend policy modifications, based on Least Privileged Access, where suitable!
  • 43.
    INTELLIGENT AUTOMATION WORKFLOW 43 InitialPlan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify Post-implementation peer- review should be completely automated, to further reduce manual efforts. This ensures the Network Analyst responsible for the request implementation can be confident the request was implemented accurately. This functionality is critical in preventing the premature closing of tickets & avoiding defective policies being sent to the business as completed
  • 44.
    44 Organizations world-wide areundergoing massive digital transformation, and moving forward IT must cater to the business by driving change from applications downward. It is imperative any Security Policy Management Solution supports this methodology! A Application-Centric Approach Sets The Stage For The Future
  • 45.
    POLL #2: IS YOURORGANIZATION CONSIDERING AN APPLICATION-CENTRIC APPROACH WHEN LOOKING AT A NETWORK SECURITY POLICY MANAGEMENT SOLUTION? Please vote using the “Votes from Audience” tab in your BrightTALK panel 45 • No, not really • Yes, but no defined time-frame • Yes, within the next year • Yes, within the next 3 years • Yes, within the next 5 years
  • 46.
     Network SecurityPolicy Management Solutions must cater to enabling & transforming the business APPLICATION-CENTRIC APPROACH • A Application-Centric Approach should be focused on aligning processes, with business goals & mindset • Application context weaved through solution • “Plain English” connectivity provisioning • Breakdown communication walls between teams 46
  • 47.
  • 48.
  • 49.
  • 50.
    50 Many organizations maintainexisting network change processes which involve manual steps & decision making. Injecting these practices into a modern Security Policy Management Solution can often slow deployment. Organizations should take an opportunity to take fresh look & optimize processed, with automation “baked in”! Using The Best Of Existing Processes, Combine With New Automation Techniques
  • 51.
     LEVERAGING ACOMBINATION TO EXISTING PROCESSES WITH NEW AUTOMATION TECHNIQUES, IS KEY TO SUCCESS COMBINING AUTOMATION WITH EXISTING PROCESSES • New automation technologies, should be merged with existing process • Avoid introduction of “manual steps” into automation solutions • Introduce zero-touch where possible, to maximize value • Streamline workflow by leveraging out-of- box where possible 51
  • 52.
    COMBINING AUTOMATION WITHEXISTING PROCESSES • Avoid introducing manual steps from legacy processes, into a new automation solution! • Streamline processes & leverage automation to drive efficiencies for standard changes 52 Firewall Change Coordinator Network Review Security Review Network Implementation Design Firewall Change Request CAB Board Security Director Approval Network Implementation Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify = Asynchronous Zero-Touch Enabled
  • 53.
    COMBINING AUTOMATION WITHEXISTING PROCESSES • Zero-Touch can be leveraged to reduce security approval bottlenecks & speed DevOps in specific environments! 53 Initial Plan Risk Check Work Order & ActiveChange SmartValidation Traffic Change Request Resolved Recertify = Asynchronous Zero-Touch Enabled IF <DEVICE> = DEV Automated Implementation! IF <RISK> = NONE Automated Approval!
  • 54.
    COMBINING AUTOMATION WITHEXISTING PROCESSES Existing Change Request/ Orchestration Solution Connectivity Functional? No Yes Success • Leverage out-of-box functionality to provide value quickly! • Traffic Simulation APIs • Connectivity-As-Code for DevOps
  • 55.
    55 While Cloud &SDN technologies drive drastic change & offer new innovative opportunities, the learning curve can be steep. An effective Security Policy Management Solution should offer capabilities to smooth this curve & speed adoption of these critical technologies! Managing A Hybrid Environment Together – Cloud, SDN, & On-Premise
  • 56.
     MAINTAINING UNIFORMCONTROL & VISBILITY ACROSS ALL ENVIRONMENTS IS KEY MANAGE HYBRID ENVIRONMENTS • Hybrid Environments should be managed uniformly & seamlessly within existing processes • Cloud Platforms visibility focused on security control points • SDN & Cloud integration should be seamlessly integrated, to ease learning curve • Single Pane of Glass visibility to the hybrid datacenter & applications 56
  • 57.
    MANAGE HYBRID ENVIRONMENTS •“Security Set” approach should be use to manage cloud environments • Enhanced visibility into control points • Allows clearer understanding of layer protection provided to cloud assets • Enables clear visibility in large enterprise cloud estates 57
  • 58.
  • 59.
    MANAGE HYBRID ENVIRONMENTS •SDN & Cloud visibility must easily integrate into the NSPM solution, to make engineering resources effective quickly • A familiar experience can drastically speed up adoption of cloud & SDN! 59
  • 60.
    MANAGE HYBRID ENVIRONMENTS •Hybrid Environments spread across Cloud & SDN, should be easily visible & integrated • Traffic Simulation capabilities should be supported across SDN, On-Premise, & Cloud to support complete automation! 60 AWS Estate – Cloud EnvironmentOn Prem – Physical Network VPN Tunnel / DirectConnect
  • 61.
    Join our OnlineCommunity Q&A 61 Send us your questions Request a Free Evaluation: marketing@algosec.com youtube.com/user/AlgoSec linkedin.com/company/AlgoSec facebook.com/AlgoSec twitter.com/AlgoSec www.AlgoSec.com/blog
  • 62.
    SUMMARY • Intelligent automationis about connectivity fulfillment vs point policy creation • Network security policy management solutions must cater to enabling & transforming the business • Leveraging a combination to existing processes with new automation techniques, is key to success • Maintaining uniform control & visbility across all environments is key 62
  • 63.
    White Paper https://www.algosec.com/resources Prof. WoolVideo Courses PPT SlidesSolution Brochure 63
  • 64.
    64 JOIN OUR COMMUNITY Followus for the latest on security policy management trends, tips & tricks, best practices, thought leadership, fun stuff, prizes and much more! Subscribe to our YouTube channel for a wide range of educational videos presented by Professor Wool youtube.com/user/AlgoSeclinkedin.com/company/AlgoSec facebook.com/AlgoSec twitter.com/AlgoSec www.AlgoSec.com/blog
  • 65.
    THANK YOU! Questions canbe emailed to marketing@algosec.com
  • 66.
    THANK YOU! Questions canbe emailed to marketing@algosec.com

Editor's Notes

  • #23 “best practices” from Kyle the expert
  • #51 “best practices” from Kyle the expert
  • #64 Links: WP - The Network Security Policy Management Lifecycle: https://www.algosec.com/lp/network-security-policy-management-lifecycle/ Solution Brochure Webinar Slides
  • #65 Miki And, before we part – we welcome you to connect with us through our social networks in LinkedIn, Facebook, Twitter and our blog.