This document discusses moving beyond traditional perimeter-based security models to a zero trust security model. It notes that the traditional idea of a well-defined corporate network perimeter is outdated given today's distributed cloud environments and mobile workforce. The document advocates adopting a zero trust approach where no entity inside or outside the network is implicitly trusted, and all access must be verified. It presents Akamai's adaptive access and threat protection solution as an option to implement zero trust security by moving controls to the edge of the network.

1. Akamai Security Summit World Tour | Stockholm1
Moving Beyond The Perimeter
Richard Meeus
EMEA Director of Security Technical & Strategy @ Akamai

2. © 2019 Akamai2
We no longer need to debate
the need for change

3. © 2019 Akamai3
Users & Apps Have Left The Building
CORP NET
Office
No VPN =
No Security
Cafe
IaaS
SaaS
The Web
App #1 App #2
App #3 App #n
● Complex
● Slow
● High RiskDC
DC

4. © 2019 Akamai4
“As businesses monetize information and insights
across a complex business ecosystem, the idea of a
corporate perimeter becomes quaint - even
dangerous.”
Excerpt from Forrester’s Future-Proof your Digital Business
with Zero Trust Securityodd, peculiar, or
inappropriate

5. © 2019 Akamai5
Internet
External
User External
Firewall
Active
Directory
Front
End
443
53 and 443
Internal
User
SQL
Server
Index, Query, Application,
Central Administration
Servers
Web
Servers
HWLB
FirewallFirewall
LDSLDS
(Domain Bound Servers)
Outer DMZ Inner DMZ Intranet
Internal Network
Perimeter
Network
Traditional Trust Model Trusted
Not
Trusted
Trust In The Corporate Network Is Not Inherent

6. © 2019 Akamai6
Trust In The Corporate Network Is Not Inherent
Internet
External
User External
Firewall
Active
Directory
Front
End
443
53 and 443
Internal
User
SQL
Server
Index, Query, Application,
Central Administration
Servers
Web
Servers
HWLB
FirewallFirewall
LDSLDS
(Domain Bound Servers)
Outer DMZ Inner DMZ Intranet
Internal Network
Perimeter
Network
Zero Trust Model Not
Trusted
Not
Trusted

7. © 2019 Akamai7
To What Extent Do You Agree/Disagree?
“The network perimeter is indefensible in
today’s technology ecosystem of distributed
cloud networks and mobile/remote users.”
“Digital transformation necessitates
adjustments to traditional (perimeter-
based) security strategies.”
58% 84%
■ Strongly Agree
■Agree
Base: 164 IT Security Decision Makers | Source: A commissioned study conducted by Forrester Consulting on behalf of Unisys (July 2018) | ©2018
Forester

8. © 2019 Akamai8
That Idea & Zero Trust Are Catching On
https://www.usenix.org/conference/enigma2018/presentatio
n/hildebrandt

9. © 2019 Akamai9
Zero Trust Security & Google BeyondCorp
aka Operation
Aurora

10. © 2019 Akamai10
It’s time to move
security controls
to the Edge

11. © 2019 Akamai11
Adaptive Access & Threat Protection
One edge platform to secure all
enterprise apps & users
Identity Aware Proxy
• Identity, single sign-on & multi-factor
authentication
• Inline app access, app performance & app
security
Secure Internet Gateway
• Malware, phishing & DNS-based data
exfiltration protection with inline payload
analysisOffice Cafe
The Web
DC
IaaS
SaaS
App #1 App #2
App #3 App #n
App #1
App #2

12. © 2019 Akamai12
Where can this take us?
• Internet is the corporate network
• Every office is a hotspot
• All apps feel like SaaS apps

13. © 2019 Akamai13
Akamai on Akamai:
Acceleration and Secured Delivery Of Akamai Applications With Zero Trust
ION+KSD Secure Edge EAA POP
NO DMZ
INFRASTRUCTURE
CONNECTORS,
INTERNAL ORIGINS
Improved user
experience over VPN
• Simple
• Faster
Enhanced Security
Reduced
Infrastructure

14. © 2019 Akamai15
Security Demo Setup
– VPN
Other Apps
Corporate Directory (AD)
VPN Client
……
Intranet
(Sharepoint)
Jenkins
(Dev Ops)
Oracle EBS
(Expense)
Account Payable
Mail (Exchange)
Contacts
Internet
Corporate Perimeter
Desktop with VPN
(left)
VPN Connector
VPN Tunnel

15. © 2019 Akamai16
Security Demo Setup
– Akamai Zero Trust
Corporate Directory (AD)
Intranet
(Sharepoint)
Jenkins
(Dev Ops)
Oracle EBS
(Expense)
Account Payable
Mail (Exchange)
Contacts
Corporate Perimeter
EAA Connector
Firewall
Akamai Intelligent
Platform
Desktop with ZT
(right)
Enterprise
Threat
Protector

16. © 2019 Akamai17 © 2019 Akamai17