In an ever-changing IT climate, organizations everywhere are embracing software solutions for their promise of flexibility, efficiency and value. But, with new threats evolving every day, it’s critical that those solutions be as secure as they are innovative. Nowhere is this truer than for federal agencies tasked with the safety and wellbeing of countless American citizens. Between near-constant threats, limited resources and ongoing compliance requirements, federal IT teams face a major challenge: How can they keep up with constantly evolving technology and a constant influx of security threats?

1. FORCE 3
Security Software Overview

2. Force 3 is the Network Security Company
We provide secure IT solutions and services for clients who demand value
and reliability. From design to deployment, support and maintenance, we
constantly focus on supporting our customers’ missions and promoting the
best possible outcomes.

3. Network Security Framework
 Designed using NIST and
RMF guidelines
 Spans entire security
spectrum from
detection to response
 Four primary tenets:
 Security Event
Management
 Network Security
 Vulnerability Management
 Access Control
the

4. How does that framework
apply to IBM and software?
FORCE 3 SECURITY FRAMEWORK

5. NETWORK SECURITY:
ACCESS CONTROL
VULNERABILITY MANAGEMENT
SECURITY EVENT MANAGEMENT
theSecurityFramework:IBM
The Solution:
 BigFix
 MaaS360
The Solution:
 Guardium
The Solution:
 Q-Radar
 Resilient
The Solution:
 GX
 XGS

6. Intelligence & Integration
ENHANCED SECURITY:

7. Incident & threat management
Firewalls
Sandboxing
Virtual patching
Network visibility
Data monitoring
Data access control
Criminal
detection
Fraud protection
Incident response
Entitlements and roles
Access management
Identity management
Privileged identity
management
Application security
management
Application scanning
Antivirus
Endpoint patching and management
Malware protection
Global Threat Intelligence
Consulting Services | Managed Services
Cloud
• Log, flow and data
analysis
• Anomaly detection
• Vulnerability
assessment
Security
Intelligence
Transaction protection
Device management
Content security

8. BigFix
Consulting Services | Managed Services
Cloud
Security
Intelligence
MaaS360
QRadar
Resilient
Guardium
GX
XGS
QRadar

9. Consulting Services | Managed Services
Cloud
Security
Intelligence QRadar
QRadar

10. QRadar: Security Intelligence Platform
What is it and what does it do?
 More than a SIEM
 Consumes data from many sources
 Allows you to quickly detect security
threats, theft, fraud, events, etc.
 Reads logs, network flows and events
 Provides a prioritized list of threats to
analyze

11. SECURITY DEVICES
CONFIGURATION INFORMATION
SERVERS & MAINFRAMES
NETWORK & VIRTUAL ACTIVITY
DATA ACTIVITY
USERS AND IDENTITIES
VULNERABILITIES & THREATS
APPLICATION ACTIVITY
CORRELATION
 Logs/events
 Flows
 IP reputation
 Geographic location
ACTIVITY BASELINE & ANOMALY DETECTION
 User activity
 Database activity
 Application activity
 Network activity
OFFENSE IDENTIFICATION
 Credibility
 Severity
 Relevance
True
offense
Suspected
Incidents

12. Consulting Services | Managed Services
Cloud
Security
Intelligence
Resilient

13. Resilient: Incident Response Platform
What is it and what does it do?
 Threat and incident response
and remediation system
 Helps security teams respond to
threats.
 Collects and analyzes data across
multiple alert systems to take
appropriate action
 Automate the response process

14. Incident
Response
Platform:
Resilient
Intelligence
feeds
SIEM
External
Communicat
ions
Configuratio
n MGT
Sandbox
Asset
Database
Forensics
Custom
Portal
Email
Ticketing
IncidentResponsePlatform
Resilient:

15. BigFix
Consulting Services | Managed Services
Cloud
Security
Intelligence

16. BigFix: Endpoint Management
What is it and what does it do?
 Manages all network devices
 Constant endpoint threat monitoring
 Compliance with security, regulatory,
operational policies
 Document software installation
 Automatically and continuously patch
network devices
 Quickly and efficiently detects
sophisticated threats, including data
breaches

17. BigFix:HowitWorks

18. Consulting Services | Managed Services
Cloud
Security
Intelligence
Guardium

19. Why do you need Guardium?
94% of all breaches involve
database servers

20. Guardium: Database Security & Monitoring
What is it and what does it do?
 Database security products
 Monitors databases for activity
 Locks down databases
 Minimizes unauthorized access
 Finds configuration errors
 Patches errors that might cause
database vulnerability

21. Monitor
& Enforce
Audit &
Report
Assess &
Harden
Find &
Classify
 Prevent cyber attacks
 Monitor, block privileged
users
 Detect application-layer
fraud
 Enforce change
controls
 Real-time alerts
 Control firecall IDs
 SIEM integration
 Find, classify
sensitive data
 Continuously update
security policies
 Discover embedded
malware and logic bombs
 Automated, centralized
controls
 Cross DBMS audit repository
 Preconfigured policies and
reports
 Sign-off management
 Entitlement reporting
 Minimal performance
impact
 No database changes
 Assess static and behavioral
database vulnerabilities
 Configuration auditing
 Preconfigured tests based
on best practices standards
(STIG, CIS, CVE)
Critical
Data
Infrastructure

22. Consulting Services | Managed Services
Cloud
Security
Intelligence
MaaS360

23. MaaS360: Mobile as a Service
What is it and what does it do?
 Manage all aspects of mobile devices
 Instant insight and control for all
users, devices, apps and content from
a single platform
 Detect mobile malware in real-time
 Real-time compliance
 Centralized policy
 Intuitive workflows
 Separates personal and business
content

25. Learn more about security software
solutions from Force 3.
CALL: 1-800-391-0204 ￭ EMAIL: sales@force3.com ￭ ONLINE: www.force3.com