This document summarizes Orange's security solutions for connected enterprises. It discusses the challenges of cloud adoption and managing a distributed workforce. Orange's Flexible Identity solution provides single sign-on, automated provisioning, and centralized access control and auditing across cloud applications. It simplifies the user experience with one password while giving administrators control. The solution adapts service levels for authentication and availability depending on security needs. Orange helps businesses securely adopt cloud technologies without losing control over access and data.

1. Orange Business Live 2013
solutions breakouts: security
http://www.orange-business.com/en/orange-business-live-2013
Nicolas FURGE
Head of Security Services
Brice RENAUD
Product manager –
Authentication and
Secure Access solutions

2. security
managing risk for the connected enterprise

3. 3
1
2
3
contents
Orange and security
 a quick overview of our approach to security
security and the connected enterprise
 security challenges for the connected enterprise
focus on identity and access management
 how to simplify the end user experience and
reduce operational risk

4. 5
1
2
3
contents
Orange and security
 a quick overview of our approach to security
security and the connected enterprise
 security challenges for the connected enterprise
focus on identity and access management
 how to simplify the end user experience and
reduce operational risk

5. 6
Orange action for a trustworthy connected world
Standalone
Professional Services
Consulting
Managed solutions
Cloud solutions
Packaged
Wan + Security
Secure Messaging
Secure Mobile
Secure IPT
Internal
CISO Office
Orange Labs
High Level Risk
Assessment - HLRA
Security in TTM
Secure by Design
(Cloud)
Community
Orange Security
Expert Community
Orange CERT
Standardisation
Bodies
Cloud Security
Alliance
any user, any device, any country

6. 7
trusted work
environment
access devices
management &
governance
trusted
infrastructure
mobile SSL
secure gateway
FW IPS PXY URL MAIL
unified defense
FW PS PXY URL
messaging
protection
suite
Web
protection
suite
acronyms
FW: firewall
IPS: intrusion
PXY: proxy
URL: URL filtering
MAIL: antispam
AV: anti-virus
legend
managed
services
(Orange)
custom
solutions
cloud-based
solutions
(external Cloud)
Orange security portfolio
Mobile Security (*)
(*) temporary name
Cyber Risk & Compliance
Intelligence
Flexible
Identity
Umbrella (*)
Flexible SSL
Security
Integrated
Services
Security Event Intelligence
identity
cloud-based
solutions (OBS
cloud)

7. 8
1
2
3
contents
Orange and security
 a quick overview of our approach to security
security and the connected enterprise
 security challenges for the connected enterprise
focus on identity and access management
 how to simplify the end user experience and
reduce operational risk

8. 9
the IT situation
“The cloud is no longer a trend, a revolution or a
movement, it’s simply the way business gets done
today.”
58% run
mission-critical
workloads today
in unmanaged
public cloud,
regardless of
policy.
(1)
average
organization
manages
25
cloud-based
applications. (2)
25% of software
purchase for
business purposes
will be service-
enabled by 2015.
(3)
(1) - Forrester Consulting 2012
(2) - Qualtrics IT prof. IT survey 2013
(3) – Ponemon Institute 2012

9. 10
the challenges
“Shadow IT creates shadow end-user identity.”
cloud adoption
creates a distinct
end-user identity
per application
cloud adoption lift
restrictions on
application
access
cloud adoption
introduces a
distinct monitoring
point per
application
how to avoid
accesses
remained active
in error?
how to keep
control on how
applications are
accessed?
how to keep
consolidated
visibility on what
user accessed?

10. 11
the new enterprise perimeter
end-users’ identity and their data

11. 12
1
2
3
contents
Orange and security
 a quick overview of our approach to security
security and the connected enterprise
 security challenges for the connected enterprise
focus on identity and access management
 how to simplify the end user experience and
reduce operational risk

12. 13
cloud services
home
workers
corporate
network
partners
affiliate
corporate resources
Internet
controlled corporate resources
travelers
 simplify cloud apps
integration
 SSO for cloud apps
 automated end-user
provisioning
 central access control
 centralized reporting
“adopt the cloud without losing control!”

13. 14
Flexible Identity
what is it?
 versatile identity federation service with multi-factor authentication
 leverage your existing user stores
 affordable, flexible, identity-as-a-service solution
 fully managed service offering best-in-class SLA
corporate
network
Internet
corporate resources
Flexible
IDentity
home
worker
business
partner
traveler
corporate
directory
cloud services

14. 15
Flexible Identity
adaptive service level
service level
multi-factor
authentication
identity
federation
availability
bronze  today
silver  Q1 2014
gold   Q1 2014
Single Sign-on
 leverage your existing ID infra
 wide range of supported apps
 automated end-user provisioning
 block side-door access
Identity and Access management
 centralized policy enforcement
 robust Access Control and Policy Mgt
 central point of Auditing and Compliance

15. 16
security without usability won’t work
let’s talk end-user experience

16. 17
using his corporate laptop
end-user experience
VPN SSL
one password to remember and manage

17. 18
demo

18. 19
Orange Cloud Portal
using his mobile device
end-user experience
Orange Cloud Portal
SSO to cloud apps
SSO to SSL
VPN solution
for internal
applications
step-up
authentication
depending on your security policy
 perso – Flexible Identity and a containerization solution
 pro – Flexible Identity and a device security solution
one password to remember and manage

19. 20
demo

20. 21
IT administrator experience

21. 22
a new employee is joining the organization
IT administrator experience
new employee in
marketing team
corporate
directory
automated
provisioning
marketing team
Google Apps 
Salesforce.com 
Concur 
Office 365 
IT admin configure
available apps
simplify the administration
process

22. 23
corporate
network
Internet or
Business
VPN
Galerie
application 1
application 2
application 3
VPN SSL
my organization shares applications with a partner supplier
IT administrator experience
partner 1
corporate
directory
partner 1 new
employee
partner 1
application 1 
application 2 
application 3 
… 
IT admin configure
available apps
simplify the administration
process

23. 24
takeaways
Orange helps you simplify your
end-user experience.
Orange is giving you back the
control of your data and cloud
applications.
Orange helps reduce operational
risk & cost for the connected
enterprise

24. 25
Q & A

25. thank you
Orange, the Orange mark and any other Orange product
or service names referred to in this material are trade marks
of Orange Brand Services Limited.
Orange restricted.