How Bomgar Product Strategy Addresses Remote Access Security Risks
•
1 like•711 views
With thanks to Cherwell Software. Please visit http://bit.ly/tftCherwell for a short 2 minute video. You probably use remote support on your service desk. In fact, you probably use more than one remote support tool . . . and they're probably not secure. For years now, remote support has been found to be the leading data breach attack pathway. Attackers use simple methods made possible by legacy remote support technologies accessible to the internet. McNeill will discuss how your service desk may be putting your company's data at risk and what you can do to secure remote support. To find out more about TFT, the only 24 hour global virtual ITSM conference, visit www.tomorrowsfuturetoday.com
Recommended
Recommended
More Related Content
What's hot
What's hot (13)
Similar to How Bomgar Product Strategy Addresses Remote Access Security Risks
Similar to How Bomgar Product Strategy Addresses Remote Access Security Risks (20)
More from TFT presentations Tomorrow's IT Service Future Today
More from TFT presentations Tomorrow's IT Service Future Today (20)
Recently uploaded
Recently uploaded (20)
How Bomgar Product Strategy Addresses Remote Access Security Risks
- 1. Bomgar Product Strategy Company Overview
- 2. Bomgar Product Strategy 200 Fatalities Per Yea
- 3. Bomgar Product Strategy 1% Of Breaches in Study 47% Of Breaches in Study Physical Theft Remote Access
- 4. Bomgar Product Strategy Remote Support (Access) Service Desk (Process) Systems Management (Infrastructure) Support Incident Incident Resolved Infrastructure Process Access
- 5. Bomgar Product StrategyWhy You Need Access Error! 2 1 3 5 4 6
- 6. Bomgar Product Strategy Not This Kind of Access
- 7. Bomgar Product Strategy Support Rep End-User Error! Error!
- 8. Bomgar Product Strategy A Mobile Environment
- 10. Bomgar Product Strategy Inadequate Controls
- 12. Bomgar Product Strategy 2011 Data Breach Investigations Report – Verizon Business RISK Team The Usual Suspects
- 13. Bomgar Product Strategy 2010 Data Breach Investigations Report – Verizon Business Risk Team
- 14. Bomgar Product Strategy 2010 Global Security Report – Trustwave SpiderLabs
- 15. Bomgar Product Strategy In approximately four of 10 hacking- related breaches, an attacker gained unauthorized access to the victim via one of the many types of remote access and management software. Rather than for internal usage, most of these connections were provisioned to third parties in order to remotely administer systems. 2009 Data Breach Investigations Report – Verizon Business Risk Team
- 16. Bomgar Product Strategy 42% 34% 24% 9% 21% 2008 Data Breach Investigations Report – Verizon Business Risk Team
- 17. Bomgar Product Strategy “Legacy remote control tools are incapable of supporting increasingly complex environments, and companies must find new ways to provide support services to users.” P2 ─ PC Remote Control Security: Risks & Recommendations Gartner, Apr 2009
- 18. Bomgar Product Strategy Enterprises are Like Opera Houses Pretty and Polished On-Stage
- 19. Bomgar Product Strategy Backstage Filled with Secret Passages
- 20. Bomgar Product Strategy Translation: You Should Be Afraid
- 21. Bomgar Product Strategy A New Twist
- 23. Bomgar Product Strategy Mobile Device Remote From Remote To Functionalities Screen Sharing System Info Chat File Transfer Screen Capture Remote Config BlackBerry® Windows Mobile(1) Android™ iPad® iPhone® (1) Windows Mobile 6.5 and Below (2) For carriers and device manufacturers. Not available for all businesses (2) (2)
- 25. Bomgar Product Strategy 1. Architecture 2. Authentication 3. Access Controls 4. Audit
- 26. Bomgar Product Strategy 1. Architecture
- 27. Bomgar Product Strategy “There are three basic forms of PC remote control: client/server (agent- based), Web-based (agentless) and appliance-based (agent not required).” P4 ─ PC Remote Control Security: Risks & Recommendations Gartner, Apr 2009
- 32. Bomgar Product Strategy • LDAP • RSA/RADIUS • Kerberos
- 33. Bomgar Product Strategy • Group Policies • System-Level Permissions − Remote Control − Unattended Access − Command Line − File Transfer − Script Usage • Session-Level Permissions − Access Elevation − Collaboration Settings − Team Membership
- 36. Bomgar Product Strategy • Customer-initiated • Remote Control or View Only • Restrict Access by Application • Over-Riding Mouse Control • Prominent "Stop Session" Button • Notifications/Permissions for All Rep Actions
- 37. Bomgar Product StrategyVendor Controls •Dedicated Silo for Each Partner •Per-Partner Access & Security Policy •Integration with Access Directories •Policy-Based Collaboration with Internal Teams •Direct or Accompanied Access to Systems •Ad-Hoc, or Ongoing Access •Complete Audit Trail of Partner Access
- 38. Bomgar Product Strategy • Detailed Session Logs − Session Membership − Activity Transcripts − File Transfers − Survey Responses • Video Session Recording − Screen Sharing − Command Line Sessions • Track Admin Changes Via Syslog • Integrated with Service Desk / CRM
- 39. Bomgar Product Strategy Real-Time Audit
- 40. Bomgar Product Strategy • Remote Support Is a Current Security Risk • Remote Support Is Extending to Mobile • Four ‘A’s Needed for Remote Support Security
Editor's Notes
- You Need Remote Access, but There are Problems With Most Tools
- You Need Remote Access, but There are Problems With Most Tools
- Talking PointsMost remote control tools have been added over a long period of time as part of one PC deployment or another
- Talking PointsMost remote control tools have been added over a long period of time as part of one PC deployment or another
- Talking PointsMost remote control tools have been added over a long period of time as part of one PC deployment or another
- Talking PointsThe difference between patching together multiple solutions and really addressing the problem in total is whether or not you address remote support as a strategic need.QuestionsHow has remote support been addressed in the past? Tactically? Strategically?
- Talking PointsThe difference between patching together multiple solutions and really addressing the problem in total is whether or not you address remote support as a strategic need.QuestionsHow has remote support been addressed in the past? Tactically? Strategically?