Protección y acceso a tu información y aplicaciones en Azure y O365 – Barracuda
•
1 like•249 views
Barracuda Networks provides a comprehensive portfolio of security solutions for Microsoft Azure and Office 365, including web application firewalls, next-generation firewalls, email security, archiving, backup, and load balancing solutions. As the first security vendor enabled in the Azure marketplace, Barracuda aims to help customers securely adopt cloud technologies, optimize productivity, and ensure compliance. The document outlines Barracuda's cloud security products and capabilities, as well as use cases for multi-tier networking, ExpressRoute integration, remote access, and email security for Office 365.
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Protección y acceso a tu información y aplicaciones en Azure y O365 – Barracuda
Similar to Protección y acceso a tu información y aplicaciones en Azure y O365 – Barracuda (20)
More from Plain Concepts
More from Plain Concepts (20)
Recently uploaded
Recently uploaded (20)
Protección y acceso a tu información y aplicaciones en Azure y O365 – Barracuda
- 1. Protección y acceso a tu información y aplicaciones en Azure y O365 Version 3.0 | May 2016 Miguel López Country Manager – Iberia mlopez@barracuda.com
- 2. Who is Barracuda Networks? • FirstsecurityvendorcommerciallyenabledintheAzure marketplace • FirstMicrosoftAzureCertifiedsecurityappliance • Firstsecurityvendor toprovideadditional enhancementstoExpressRoute • FirstinfrastructurevendorintegratedwithAzureAD& SecurityCenter • FirstsecurityvendortosupportAzureAppService environment • Winnerfor2016MicrosoftAzureCertifiedISVSolution PartneroftheYear
- 3. StorageSecurity Barracuda NG Firewall Barracuda Email Security Barracuda Web Security Barracuda Firewall Barracuda Web Application Firewall Barracuda Load Balancer ADC Barracuda SSL VPN Barracuda Link Balancer Barracuda Backup Barracuda Message Archiver Barracuda CudaSign Comprehensive Portfolio No Per-User Fees 30 Day Eval Hardware Refresh
- 7. You define controls and security IN the CloudYour company Customer’s Responsibility in a Shared Security Model Azure takes care of the Security OF the Cloud Azure Platform Physical Infrastructure Network Infrastructure Virtualization Layer Customer Applications & Content Network Security Identity & Access Control Operating Systems / Platform Data Encryption
- 8. Barracuda Security Solutions for Microsoft Accelerating Your Journey to a Safe Cloud Security Ensure users, data and applications are protected Employ multi-layer security, data protection technology Optimize user productivity Improve company-wide collaboration and minimize employee downtime Compliance Seamless, unified experience Continue the same level of familiarity with the technologies as workloads are moved from on-premises to the cloud Migration Maximize Azure investment Overcome potential adoption challenges to realize the value of your investment faster Control
- 10. Barracuda Web Application Firewall
- 11. Websites are the Least Secured Vector 0% 2% 2% 4% 5% 7% 8% 9% 23% 40% DoS Attacks Crimeware Physical Theft/Loss Payment Card Skimmers Everything Else Cyber-espionage Privilege Misuse Miscellaneous Errors POS Intrusions Web App Attacks FREQUENCY OF INCIDENTS Source: Verizon Data Breach Report, 2016
- 12. Web App Threats: the Top Emerging Vector Percentage of vulnerabilities that are web-based 80% Percentage of cyberattacks that target web applications 75% Number of malicious ad impressions per year $12B Number of websites defaced in the last five years $5M
- 13. Recognized by NSS Labs A Leader in security effectiveness 99.9% 100% 100% 0.71% Security effectiveness Highest Marks Against evasion techniques Stability and reliability tests False positive rate
- 14. App-AwareFirewalls Don’t SecureWebApps Network Firewall Layer 7 Network Firewall IDS/IPS Web Server HTTP Request (legitimate) HTTP Request (attack) TCP Port 80 TCP Port 80 HTTP TCP Port 80 HTTP No matching Signature
- 15. WAFs vs.… Network Firewall Layer 7 Network Firewall IDS/IPS Web Application Firewall Web Server HTTP Request (legitimate) HTTP Request (attack) TCP Port 80 TCP Port 80 HTTP TCP Port 80 HTTP No matching Signature Obfuscated XSS attack Request blocked
- 16. Complete Application Protection Outbound InspectionInbound Inspection Comprehensive Application Security OWASP Top-10 Attacks Application DDOS Proactive Defense Geo-IP Control Application Cloaking Data Loss Prevention Credit Card Numbers Social Security Number Custom Patterns Authentication & Access Control Logging & Reporting
- 17. Barracuda Vulnerability Manager • Scan for web application vulnerabilities across entire website • Granular capability • Detailed vulnerability scan reports • Integration with Barracuda Web Application Firewall • Free service forever
- 18. Easy Identification and Remediation
- 19. Azure AD Integration Azure Active Directory integration for identity and access management for the cloud Application Security Protecting custom apps from SQL injection, cross-site scripting, application distributed denial-of-service (DDoS) Load Balancing Load balancing with persistence for highly secure and scalable application infrastructure Data Loss Prevention Inspecting all inbound traffic for attacks and outbound traffic for sensitive data ADFS Microsoft Active Directory Federation Services (ADFS) can provide security as well as pre- authentication Most Common Use Cases
- 20. Dynamic Scaling in Azure Protect Multiple Applications with Single Cluster of WAFs Use Case – Web Apps
- 22. Cloud Security Threats Community gaps Exploited system vulnerabilities Remote access Barracuda NextGen Firewall F on Azure The Ultimate Protection Against Network Security Threats Networking & Infrastructure IPS/IDS Integrated intrusion prevention URL filtering User and application aware IPsec VPNs secure remote connectivity Dynamically scales with your network Networking Protection
- 23. Multi-Tier Architecture Build secure multi-tier architecture in Azure to keep a level of segregation between tiers VPN Tunnels Unlimited site-to-site VPN tunnels to connect two networks protected by F-Series Firewalls Traffic Control Inbound/outbound traffic control while providing IPS/IDS functionality and control traffic based on application, URL, AV, user Access to Resources Access to resources in Azure (unlimited client-to-site VPN, SSL VPN) ExpressRoute Visibility and control on all traffic coming across the ExpressRoute connection Most Common Use Cases
- 24. Deploying Multi-Tier Network Architectures WAF Tier Web Tier App Tier FW Tier DB Tier VNET
- 25. Use Case – Multi-Tier Deploying Multi-Tier Architecture in Azure Secure remote access for mobile users • Dedicated VPN clients available for Windows, Mac, Linux • Clientless SSL VPN • Multiple supported protocols: TINA, IPsec, L2TP, PPTP Multiple site-to-site connectivity • VNET-to-VNET connectivity • Automatic user ID synchronization across sites • Supports multiple ISPs • Built-in WAN optimization • Full ExpressRoute support Comprehensive security enforcement • Internal and cross-region network segmentation • Access control based on user and instance identity • Full traffic visibility and monitoring Use Case – Multi-Tier
- 26. ExpressRoute Architecture with F-Series LAN / DC Public Internet router network ER local network Transport networks (public / private) Azure VNet MPLS Router NGF on-prem Express Route Azure Gateway Web Tier App Tier FW Tier DB Tier
- 27. ExpressRoute Architecture with F-Series LAN / DC Public Internet router network ER local network Transport networks (public / private) Azure VNet MPLS Router NGF on-prem Express Route Azure Gateway Internet Internet Router Web Tier App Tier FW Tier DB Tier
- 28. Use Case - ExpressRoute Protecting Microsoft Azure ExpressRoute Security • Encrypts traffic across ExpressRoute • Prevents direct traffic flow between applications and the cloud • Inspects and logs all inbound and outbound traffic for reporting purposes Reliability • VNET-to-VNET connectivity • Automatically sets up a VPN for secondary connection in the event of failure • Allows multiple ExpressRoutes; one primary and one secondary Intelligence • Prioritizes traffic from any specified application and sends it via a configured link • Blocks specific application traffic from going to and from Azure • Allows or denies certain users based on credentials and access privileges Use Case – ExpressRoute
- 29. Secure, High Performance Connectivity Barracuda NextGen Control Center Major brand VPN client On-premises F-Series Remote Access CudaLaunch app Dedicated VPN and NAC Clients Browser-based SSL VPN XY On-premises 3rd party Next-Generation Firewall XY Data Center 1 Data Center N Standard IPsec VPN
- 30. Secure, High Performance Connectivity Barracuda NextGen Control Center Major brand VPN client On-premises F-Series Remote Access CudaLaunch app Dedicated VPN and NAC Clients Browser-based SSL VPN XY On-premises 3rd party Next-Generation Firewall XY Data Center 1 Data Center N Standard IPsec VPN
- 31. Secure, High Performance Connectivity Barracuda NextGen Control Center Major brand VPN client On-premises F-Series Remote Access CudaLaunch app Dedicated VPN and NAC Clients Browser-based SSL VPN XY On-premises 3rd party Next-Generation Firewall XY Data Center 1 Data Center N Standard IPsec VPN TINA VPN Mgmt Tunnels
- 32. Barracuda Email Security Service for O365
- 33. Barracuda Email Security Service Easy-to-use, cloud-based email security • Industry-leading spam and virus defense with a long-standing heritage • Protection against zero-hour and targeted attacks with ADVANCED THREAT DETECTION • Agentless Encryption without complicated key management • Email Continuity Service Ensure business continuity and email user access up to 96 hours during email server disruptions • Real-Time-Protection & Threat Intelligence, 24x7 support by Barracuda Central • Advanced, granular policy management • Protection from data loss and reputation damage
- 34. Block File or Email Allow File or Email Full system emulation sandbox Safely open files to identify risks Remote detonation of malicious payload Without compromising security at the expense of user experience Signatures Virus Protection Malware protection IP reputation Heuristics (static analysis) Sandboxing (dynamic analysis)
- 35. Introducing Barracuda Email Threat Scanner • BarracudaEmail Threat Scanner(ETS) • Cloud-basedservicethatprovidesanon-intrusive O365mailboxscantoidentifyadvancedthreatsat restandtheownersofsaidthreats. • Providesdetailedreportsandrecommendations ETScanhelptosellEssentials • DemonstratevalueofAdvancedThreatDetection • DemonstratevalueofEssentialsontopofEOP • Onboardcustomersintwoclicks • Providepersonalriskassessment
- 36. Barracuda Cloud Archiving Service for O365
- 37. Barracuda Cloud Archiving Service Cloud-based archiving from Office 365 for compliance and eDiscovery • 100% cloud-based SaaS (no HW/SW). Unlimited Storage • Hosted in secure Barracuda Cloud in EMEA • eDiscovery search, hold, and export • Import historical data (Exchange/Office 365). PST migration with PST Enterprise • Role-based administration • Full-featured mobile app • Works with Exchange and Office 365, including hybrid deployment • Easy management for inactive users
- 38. Barracuda Cloud to Cloud Backup for O365
- 39. Cloud-to-Cloud Backup Cloud-to-cloud backup option for Office 365 mailboxes, SharePoint Online and OneDrive for Business • Protect against accidental deletion • Set custom retention policies with unlimited storage capacity (daily retention for ever) • Automatic or manual backups • Multi-selection restores • All-in-one protection for data hosted locally and offsite. • Integrated management with Backup appliances for local server data retention (optional)
- 41. Conclusion: Microsoft & Barracuda offering On-Premises Azure/Public Cloud SaaS • Hardware and virtual appliances offer Exchange & Office 365 integration, greater control over security, compliance, and data protection policies • Rapid deployment, 100% hardware free, low management overhead Email Security Gateway Next-Gen Firewall Archiving PST Mgt. Backup Email Security Gateway Next-Gen Firewall Web Application Firewall Archiving BackupArchivingEmail Security Service PST Mgt.
- 42. Next Steps and Resources 1. Learn more For a rich library of resources, visit the Barracuda Azure website www.barracuda.com/azure and the Barracuda O365 https://www.barracuda.com/products/essentials 2. Contact Barracuda azure_support@barracuda.com / Iberia_Team@barracuda.com 3. Start a 30-day free trial • https://azure.microsoft.com/en-us/marketplace/partners/barracudanetworks/barracuda-wafwaf-byol/ • https://azure.microsoft.com/en-us/marketplace/partners/barracudanetworks/barracuda-ng-firewall/ • https://azure.microsoft.com/en-us/marketplace/partners/barracudanetworks/barracuda-ng-cc/ • https://billing.barracudanetworks.com/service/select?service=o365&barracuda_web_visitor_id=24349309 AskTryContactLearn Videos Technical Briefs Deployment Architecture Diagrams
- 43. Thank you Miguel López Country Manager – Iberia mlopez@barracuda.com