The document discusses hybrid cloud deployments and security responsibilities in public clouds. It provides an overview of common services available in public clouds like AWS and security controls that are the responsibility of the cloud provider versus the customer. It also summarizes F5's application protection and identity & access management solutions and how they can integrate with existing security tools.

3. Paula
NEW APP
DEPLOYMENT
APP CLONING
APP SERVER
OPERATIONS
REPORTING/P
LANNING
Marco
N/W INFRA
MGMT
L4-L7 N/W
SVC MGMT
ACCESS
CONTROL
CONFIG &
CHANGE
MGMT
IS MY APP HEALTHY?
N/W SERVICES
HEALTHY?
COLLABORATION
TRADITIONAL
DC PUBLIC CLOUD HYBRID DC, SDDC
Data Center(s)
Load Balancing
DDoS Protection
Firewall
RBAC
ITSM

4. Public Cloud - Shared Responsibility Security Model
CP Global
Infrastructure
Data Centers
Zones
Regions
Edge
Locations
Networking Services
Compute Database Storage
Deployment & Management
Client-Side Data
Encryption & Data
Integrity Authentication
Server-Side Encryption
(File System and/or
Data)
Network Traffic
Protection (Encryption,
Integrity, Identity)
Operating System, Network and Firewall
Configuration
Platform, Applications, Identity & Access
Management
Customer Data Customer’s responsibility
• Protecting the
confidentiality, integrity,
and availability of their
data in the cloud
• OS and
application-level security
Cloud Provider responsibility
• Providing a global secure
infrastructure and services
PhysicaltoHypervisorOSandApplication
CloudProviderCustomer

11. Device
Package
Device
Package
'
'
'
'

13. Deployment and Scalability (Heat)
Metering (Ceilometer)
Compute (Nova)
Identity (Keystone)
Images (Glance) Object Store (Swift)
Storage (Cinder)
LBaaS VPNaaS FWaaS
DNSDHCPL2/L3
ManagementConsole(Horizon)
Network (Neutron)

14. Features
Key Features
• All BIG-IP Modules available
• Bring you own licenses (BYOL) initially
• Single NIC support
• Dynamic Routing
• Max throughput: 1Gbps
• 30 day free trial via Eval License (BYOL)
25M
200M
1Gbps

16. Public Cloud - Shared Responsibility Security Model
CP Global
Infrastructure
Data Centers
Zones
Regions
Edge
Locations
Networking Services
Compute Database Storage
Deployment & Management
Client-Side Data
Encryption & Data
Integrity Authentication
Server-Side Encryption
(File System and/or
Data)
Network Traffic
Protection (Encryption,
Integrity, Identity)
Operating System, Network and Firewall
Configuration
Platform, Applications, Identity & Access
Management
Customer Data Customer’s responsibility
• Protecting the
confidentiality, integrity,
and availability of their
data in the cloud
• OS and
application-level security
Cloud Provider responsibility
• Providing a global secure
infrastructure and services
PhysicaltoHypervisorOSandApplication
CloudProviderCustomer

17. IDENTITY AND ACCESS MANAGEMENT (IAM) APPLICATION PROTECTION
Protecting your Applications and Information – Wherever they reside

18. …integrates with existing to enhance security
NGFW
Vulnerability Scanning
IDS
Packet / Forensics
Data Loss Prevention
HSM
APT Scanning
IPS
P A R T N E R E C O S Y S T E M
F5 APPLICATION PROTECTIONF5 IDENTITY & ACCESS MANAGEMENT
SSL Inspection & Interception
WAF DDoS Protection
DNS Security
Web Fraud Protection
IP IntelligenceCarrier Class Firewall
Identity Federation
App Access Mgmt
Enterprise Mobility Gateway
Secure Web Gateway
Remote Access

22. https://DevCentral.f5.com/iWorkflow