Head in the Clouds? Let’s get serious about how to benefit from Cloud platforms whilst staying protected

1©2017 Check Point Software Technologies Ltd.©2017 Check Point Software Technologies Ltd.
Adaptive Security that drives
innovation in the cloud
Will Hargreaves
Cloud Security – Check Point UK
CLOUDGUARD IAAS
[Restricted] for designated teams

2©2017 Check Point Software Technologies Ltd.
0
20
40
60
80
100
120
2016 2017 2018 2019 2020
Revenue(US$Billion)
Worldwide Cloud Services Revenue Forecast
IaaS & PaaS
SaaS
$190B CLOUD MARKET BY 2020

3©2017 Check Point Software Technologies Ltd. [Restricted] for designated teams
CLOUD IS TAKING OVER THE WORLD
CLOUD DIVERSITY
67% OF ENTERPRISES ARE IN HYBRID CLOUD.
MULTI CLOUD BECOMING THE NORM
RightScale
SECURITY
40% OF ENTERPRISES RATE CLOUD
SECURITY AS SIGNIFICANT CHALLENGE
RightScale

CLOUD IS THE NEW NORMAL
MIGRATE TO CLOUD
Lift & shift applications to the cloud
INNOVATE WITH THE CLOUD
Develop new applications in the cloud

Developers:
• Freedom
• Agility
INNOVATION IS THE KEY TO SUCCESS
IT Operators :
• Control
• Efficiency
DevOps
DevOps and App Owners hate Legacy Security!
It slows them down.

• Hard to deploy legacy security
• Firewall tickets are a bottleneck
• Cloud is dynamic and legacy security is static
LEGACY SECURITY KILLS INNOVATION

The customer is responsible for
security IN the cloud of their
data and applications
Cloud Provider is responsible for
security OF the cloud
Infrastructure
CLOUD = SHARED RESPONSIBILITY

8©2017 Check Point Software Technologies Ltd. [Restricted] for designated teams
NO Threat Prevention in real time (L4-L7 protections)
NO Threat Extraction and Zero-day Sandboxing
NO Unified Management for all Clouds & Traditional Data Center
NO Identity based authentication access to applications
NO Application Control & URL Filtering
WHERE CLOUD NATIVE SECURITY FALLS SHORT

UBER PAID HACKERS TO DELETE STOLEN
DATA ON 57 MILLION PEOPLE - 3 TOP UBER
MANAGERS RESIGN

CURRENT STATE OF CLOUD SECURITY
NOT EVERY CLOUD HAS A SILVER LINING

Security must be as agile as your cloud
YOU NEED CLOUD SECURITY
THAT ENABLES INNOVATION
AND PROTECTS YOU FROM MODERN ATTACKS
…..and it must be secure!

INTRODUCING
CHECK POINT CLOUDGUARD
PROTECTING ANY CLOUD, ANY SERVICE, ANYWHERE

COMPREHENSIVE SECURITY ARCHITECTURE
Private Cloud & SDN Public IAAS

CLOUDGUARD
SECURITY AT THE SPEED OF DEVOPSs
Advanced Threat
Prevention
Adaptive Cloud
Security Operation Automated
Cloud Security
Blueprint

FROM WEEKS TO SECONDS WITH
CloudGuard Security
AUTOMATION

Connect a new IOT device
Scale up your application
Provision a new application
PERFORM THESE OPERATIONS…
CloudGuard SECURITY AUTOMATION USE CASES
Change an application’s networking
Virtual Patching
• Security is automatically provisioned
• Application is instantly secured
• Application admin never waits
• No tickets “overhead”
• Everything is auditable
KNOWING THAT….

Changing
Web VM IP
CHANGE APPLICATION NETWORKING
Legacy Way
Many Days / Manual process
App owner opens
ticket to FW Admin
to change policy
FW admin
changes the
policy
New policy is
published on the
weekend
Seconds / Dynamic Process
CloudGuard dynamically learns about this change from
vCenter and all virtual and physical GWs are instantly
updated
NewWay

SCALE UP YOUR APPLICATION
Many Days / Manual process
Open ticket to FW
Admin to change
policy
FW admin
changes the
policy
New policy is
published at the
weekend
Legacy Way
CloudGuard dynamically
learns about the change and
instantly update GW policy
Seconds / Dynamic Process
VM is automatically added
to web SDN Group
New Way
Add a new Web
VM cluster

VIRTUAL PATCHING
It takes days to test, approve and deploy a
new security patch
Meanwhile, vulnerability is known and
applications are exposed
Legacy Way
CloudGuard will allow the implementation of
IPS , before the security patch is announced
New Way

PROVISION A NEW APPLICATION
Many hours / Manual process
Develop a manual procedure
for new Database
Manually configure the FW to
secure the new Database
Legacy Way
Develop an orchestration recipe
for new Database with security
Seconds / Automation Process
CloudGuard Recipe is
executed and provisions the
FW policy
New Way

CONNECT A NEW IOT DEVICE
CloudGuard Portal for IOT Admin
Enter the new IOT name
Add
Connect IOT
to the network
New rule is created
to IOT and all GWs are
instantly updated
30 Secs Manual
(avoid opening a ticket)
Seconds / Automation
Process
New Way

CLOUDGUARD - SECURITY
Advanced
Threat
Prevention

CLOUDGUARD – ADVANCED PROTECTION
Access Rule
Next Generation Firewall
Application and Data Security
Advanced Threat Prevention
Forensic Analysis
Cloud
Vendor

CLOUDGUARD – MICRO SEGMENTATION
CISCO ACI
Micro segment the Cloud with
advanced protection between
applications with tight
Integration to SDN
App App
App App

CLOUDGUARD – BLUEPRINT
Agile Cloud
Architecture

CLOUD SECURITY BLUEPRINT
Northbound
Hub
Southbound Hub
Spoke 1 Spoke 2 Spoke 3 Spoke N…
VPN

Northbound
Hub
Southbound Hub
Spoke 1 Spoke 2 Spoke 3 Spoke N…
VPN

MULTI-CLOUD SECURITY BLUEPRINT

• Agile
New spokes created by DevOps are automatically protected
• Architecture Auto-Provision
̶ Via AWS CloudFormation
̶ Via Azure solution templates
• Control:
Security admin gain visibility for east-west and north-south traffic

CLOUDGUARD – ADAPTIVE SECURITY
Security at
the speed of
DevOps

APPLICATION-AWARE POLICY
TIED TO CLOUD MANAGEMENT AND SDN

CLOUDGUARD ADAPTIVE SECURITY
Check Point Access Policy
Rule From To Application Action
3
Web_SecurityGroup
AWS Object
DB_VM
vCenter Object
MSSQL Allow
4
CRM_SecurityGroup
Azure Object
SAP_SecurityGroup
NSX Object
CRM Allow
Drag & Drop dynamic policy with cloud objects
5
AWS_VPC
AWS Object
Azure_VNET
Azure Object
ADFS Allow

ADAPTIVE SECURITY THAT
ENABLES INNOVATION
Easy to secure and connect
Multi-cloud applications
Applications are protected
with the best security
DevOps and IT Security
speak the same language
Policy is updated when
application is deleted
Application owner
never waits
Reduce security tickets
by 60%

SUMMARY

SUCCESS
More than 3,500 customers use Check Point to secure their cloud

Innovate with Check Point Cloud Security
• Best protection against modern attacks
• Security that adapts to application changes
• Unified security that connects all your clouds
SECURITY
AT THE SPEED OF DEVOPS

Head in the Clouds? Let’s get serious about how to benefit from Cloud platforms whilst staying protected

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Head in the Clouds? Let’s get serious about how to benefit from Cloud platforms whilst staying protected

Similar to Head in the Clouds? Let’s get serious about how to benefit from Cloud platforms whilst staying protected (20)

More from Digital Transformation EXPO Event Series

More from Digital Transformation EXPO Event Series (20)

Recently uploaded

Recently uploaded (20)

Head in the Clouds? Let’s get serious about how to benefit from Cloud platforms whilst staying protected