This document discusses the need for a new, application-centric approach to cybersecurity. It notes that traditional network perimeter-based security is inadequate and that most security breaches now involve user identities and applications. It promotes governing application access and protecting applications to secure data across cloud, on-premises and future applications. The document advocates for a flexible security architecture using F5 technologies to assess risks, control access, and protect applications based on defined conditions.

1. Secure the Next…

6. © F5 Networks, Inc 6
The Complexity of Application Delivery in a Hybrid World

7. © F5 Networks, Inc 7
The traditional approach to security is inadequate.
Blind, inflexible point solutions

8. © F5 Networks, Inc
44% OF DATA BREACHES
FROM WEB APP COMPROMISE
OPEN SOURCE INTRODUCES 24
VULNERABILITIES PER WEB APP
13% OF USERS TESTED WOULD
OPEN A PHISHING ATTACHMENT
Insufficient application security
puts your data at risk
72%
Security breaches caused by
USER IDENTITY AND
APPLICATIONS
90%
Security budget goes to
TRADITIONAL NETWORK
PERIMETER
However, the existing Cyber Security
Investment is…

9. © F5 Networks, Inc
WE NEED
A DIFFERENT
APPROACH

10. © F5 Networks, Inc
GOVERN YOUR APPS ACCESS
PROTECT YOUR APPS
TO SECURE YOUR DATA

11. © F5 Networks, Inc
USER APPLICATIONS

12. A PPS  GATEWAY TO YOU R D ATA
F5  GATEWAY TO YOU R A PPS
CLOUD APPS AND DATA
ON-PREMISES APPS AND DATA
FUTURE APPS AND DATA

13. A FLEXIB LE A R C H ITEC TU R E FOR C OOR D IN ATED SEC U R ITY
APPLY THE SECURITY CONTROLS YOU CHOOSE BASED ON THE CONDITIONS YOU DEFINE.
CONTEXT SHARING AND VISIBILITY
ASSESS CONTROL PROTECT

14. A B R OA D SET OF C A PA B ILITIES A N D R OB U ST EC O - SYSTEM
CONTEXT SHARING AND VISIBILITY
APPLICATION ACCESS SSL VISIBILITY APPLICATION PROTECTION
FEDERATED IDENTITY
SSO
GRANULAR ACCESS CONTROL
INBOUND / OUTBOUND
DYNAMIC SERVICE CHAINING
BROAD ECOSYSTEM SUPPORT
WEB APPLICATION FIREWALL
ANTI-DDOS
WEB FRAUD

15. © F5 Networks, Inc 15
A different approach to Application Security
APPLICATION ACCESS APPLICATION PROTECTION
Protecting your most critical business assets

16. © F5 Networks, Inc 16
SDN (L1-L3) + SDAS (L4-L7) = SDDC
Control
Plane
Data
Plane
Software-DefinedDataCenter
BIG-IQ
(SDAS Controller)
SDDC Orchestrator
SDN Controller
SDN Applications
LAYER 2-4
Stateless Fabric
F5 L4-7 SDAS Stateful Fabric
NVGREVXLAN
Service Chaining
iApps
Applications
OPEN
APIs
Architect / Lines of Business
16© F5 Networks, Inc CONFIDENTIAL

17. © F5 Networks, Inc 17
F5 and Vmware Partnership
Customers Demanding Seamless Product Integration
TECHNOLOGY ALLIANCE PARTNERS
• VMware 2015 Technical Partner Award
• VMware 2014 Best Cloud Management
Marketplace Solution Award for Cloud
Automation category
• AirWatch Connect 2014 Enterprise Mobility
Excellence Award
• VMware 2010 Technology Innovator Partner
of the Year

18. VISION

19. RETHINK YOUR
SECURITY ARCHITECTURE
APPLICATION-CENTRIC
APPROACH