Most enterprise apps are built to run inside a data center, on the same network as the users.   In the cloud, It’s impossible for users to be on the same network as the app. The only for them to get to the app is from the outside, usually that means the Internet. Why would anyone take this security risk?

1. Don’t Go Naked in the Cloud
Rob Quiros
rob@Soha.io
June 1, 2015

2. 2
One Key Difference…
Data Center
Infrastructure Cloud
(AWS, Azure,…)
App
User
App
User

3. 3
Security and Remote Access
Apps
Employees
Customers
Partners
Bad Guys
DDoS attacks
Compromised credentials
Untrusted endpoints
Compliance

4. 4
Shared Responsibility Model
Application
Hosted Operating System
Virtualization Layer
Physical Infrastructure
Customer
Responsibility
Cloud Provider
Responsibility

5. 5
Solution #1: Build Security Perimeter in your Cloud
Firewall
VPN
ADC
IDS
WAF
WANopt
DDoS
Firewall
User
Directory
Logging
Your
Apps
Your
Users
Your
Admins
VPN

6. 6
Solution #1: Build Security Perimeter in your Cloud
Firewall
VPN
ADC
IDS
WAF
WANopt
DDoS
Firewall
User
Directory
Logging
Your
Apps
Your
Users
Your
Admins
VPN
6 Months
3 Engineers
$100,000

7. 9
Solution #2: Expose Your Apps on The Internet
Your
Apps
Your
Users
Your
Admins
SSH
HTTP

8. 10

9. 11
Good Morning!

10. 12
Take your applications off the internet
Lock down your cloud to all inbound access
Yet still control security and access policy
With full logging and audit trail?
What If You Could….
And have it running in 15 minutes?

11. 13
Tackle Shared Responsibility with Soha Cloud
 Architected for hybrid cloud & mobile world
 Distributed in-the-cloud security enforcement
 Centralized security oversight and control
 Performance-assured path between users and apps
AWS
Azure
Vcloud Air
Private Cloud
Public Clouds
VMware OpenStack

12. 14
• Double proxy architecture
takes your cloud off the
Internet
• Soha Cloud provides all
security and access control
• No network changes
Hide Your Clouds Behind Ours
Cloudlet dials out only
No inbound ports open to your Cloud

13. 15
• User enters public URL for
application into any browser
• Cloud authenticates user
• Optional MFA, 2FA, access
control rules
• No Client on user device
Air Gap Between Your Apps and the Internet
No connectivity before user identity verified

14. 16
Highly Available, Highly Scalable

15. 17
Don’t Go Naked in the Cloud
GET

16. 18
Sign up for a free account: http://soha.io/signup
Find us at BOOTH #131
email me (Rob @ SOHA dot IO)
for a free upgrade to PREMIUM
To Learn More …

17. Thank you