Archiv für das Monat: April, 2020

By Vibhuti Garg Did you know? IT organization spend 76% of their attention on securing their data center
Virtualization, cloud, and software-defined networking are redefining the modern data center. There is a huge influx of data, from big data analytics and new types of applications. Workloads are even more dynamic than before, spanning across multiple physical data center locations and across public, private, and hybrid cloud environments. This spread of data creates a “new” perimeter outside of your traditional data center premises and can increase data theft opportunities. You could thus be challenged with where and how to secure your data center.
Modern Data Centers Need a New Approach to Security
Data centers are evolving and are no longer confined to traditional set-up. In fact, Gartner predicts that by 2022, 50 percent of enterprise-generated data will be created and processed outside a traditional, centralized data center or cloud. Ensuring Security can be challenging as Security teams spend 76% of their time securing the data center and to make it more challenging 25% of global security decision makers say staff shortages are a major challenge, and they struggle to find staff with the right skills. To address the data center security needs, IDC advocates that securing your data center can a be three-fold methodology covering visibility, reducing attack surface through segmentation and preventing threats.
Challenges of securing data everywhere
The challenge with securing data is that you need to have security EVERYWHERE, not just at the perimeter. Attackers know that your data is now highly distributed, and that you may be having a harder time keeping track of it. They know that this provides them with another layer of obfuscation and opportunity for carrying out theft.
Today’s security must therefore be pervasive – built in and integrated across the network, cloud, applications, and endpoints. This makes it harder for attackers to slip through the cracks and take advantage of the distributed nature of computing.
Why Choose Cisco Secure Data Center Solution?
Cisco is working hard to make your data center is more agile and automated – enabling you to extend workloads beyond the perimeter for new applications that require computing to be performed closer to the user experience.
The Cisco Secure Data Center Solution provides an integrated security architecture that addresses three critical needs of the modern data center around Visibility, Segmentation and Threat protection. The Cisco Secure Data Center Solution is a validated systems-level solution for highly secure data centers, delivering:
Operational efficiency from automated provisioning and flexible, integrated security
Advanced threat protection to stay up to date, informed, and secure
Improved resiliency to enable data center availability and secure services
Cisco Secure Data Center Components
Enabling a decentralized data center environment requires a security strategy that spans three important areas: visibility, segmentation, and threat protection.

Visibility – If you can’t see it, you can’t secure it. That’s why Cisco offers in-depth network and threat visibility in any data center and across any cloud.
Segmentation – Segmenting your network reduces your attack surface. It can prevent attackers from moving laterally across the network, and block legitimate users from accessing restricted resources.
Threat Protection – By now we all know that threat protection is a process, not a single product. Cisco’s data center protection consists of various levels of threat sensors to prevent attackers from stealing data or disrupting operations.
The truth is that in today’s dynamic environment, you may not always know exactly where everything is at all times. But with the right mix of tools and intelligence, you don’t have to know. Instead, you can rest assured that wherever your data may go, it will remain protected.
Where Can You Begin?
By using a common set of integrated technologies and security policies across platforms, organizations can significantly enhance their data defenses.
Cisco’s solution provides an overview of what it takes to secure the modern data center.
We recommend our in-depth design guide for traditional set-ups and cloud environments for securing your data center.
See our experts in action at Cisco Live, Barcelona and RSA earlier this year and catch up on the best and latest!
Listen to Brad Casemore from IDC and Don Meyer from Cisco Security talk about Cisco’s approach towards securing data center.
Leverage on experience of our existing customers.
The purpose of the Secure Data Center Solution is to provide our customers with a cost-effective infrastructure to experience Cisco next-generation technology. I would be pleased to set a briefing call with you to discuss the Cisco solution and can be reached at vibgarg@cisco.com.
The post Threats Can Be Anywhere: Modernize Your Data Center Security‎ appeared first on Cisco Blogs.

Source:: Cisco Security Notice

By Angela Frechette Cannon Which technologies will help you the most?
As part of the recent RSA Conference, we all got to see – either in-person or virtually – the latest and greatest technology coming out of the security industry. While events like this can certainly be helpful in guiding future investments, they can also make one’s head spin with the sheer volume of tools available to secure today’s infrastructure.
This year, the RSA Conference drew more than 650 exhibitors (including Cisco) and more than 700 speakers, one of which was our own Wendy Nather, who delivered a keynote. In her keynote, she discussed how security must become easier for people to use and understand if we want to keep our organizations protected now and into the future. “We have to simplify functions, data, operations, all of those things to make it easier no matter who’s going to use it,” she said.
But with so many attack vectors, network components, devices, and security technologies out there, how do we make things simpler? Which of the many security technologies will help us most?

In our 2020 CISO Benchmark Report, we inquired as to which security technologies organizations currently have in place. While technology needs are often unique to each specific organization, there were a couple of technologies that we deem important for which there are currently noticeably low adoption rates among our respondents.
Multi-factor authentication
In an age of frequently stolen passwords, multi-factor authentication (MFA) can go a long way in keeping your assets and data safe. We were surprised to find in our CISO Benchmark Study that only 27% of respondents are currently using MFA to secure their environments.
Multi-factor authentication can protect your applications by using a second factor for validation, such as a smartphone, to verify user identity before granting access. It is a key component of a zero trust security architecture.

MFA can help protect against attacks such as phishing, social engineering, and credential theft. While some MFA solutions can be difficult to roll out, Cisco’s Duo Security provides a simple experience for every user and application. It also integrates easily with organizations‘ existing technology.
Duo also helps companies streamline their security stack to lessen complexity. According to Steve Myers, head of security for KAYAK, “We were previously trying to do this through a combination of five other products. The fact that one product can provide this level of granular access control is really awesome.”
Network segmentation and micro-segmentation
Another effective way to reduce risk is through segmentation, which provides a proactive method of security by minimizing the attack surface. Through network segmentation, various network components and assets are separated from others to prevent the lateral movement of attackers throughout an environment. This way, if an outsider finds their way into one part of a network, they don’t automatically have full access to everything up to and including restricted data. Segmentation is another core pillar of a zero trust computing environment.

However, only a quarter of our respondents are currently using network segmentation, and even fewer (17 percent) are using micro-segmentation. Micro-segmentation is a more granular form of segmentation for applications and their workloads, offering policy consistency across both on-premises and cloud-based data centers. This capability is now critical since applications and their data have become a primary target for breaches and attacks. Cisco Tetration uses machine learning to understand applications and automatically generate micro-segmentation policies based on application behavior.
Getting it right
Speaking of machine learning and automation, those are key areas in which our CISO Benchmark Report respondents seem to be progressing.
It was promising to see in our study that technologies such as automation, machine learning, and artificial intelligence – which are designed to make security easier and more manageable – are being widely adopted.
Automation, machine learning, and artificial intelligence
As part of the data collected for our 2020 CISO Benchmark Study:
85 percent said they are at least somewhat reliant on artificial intelligence
88 percent said they are at least somewhat reliant on machine learning
90 percent said they are at least somewhat reliant on automation
Additionally, 77 percent said they are planning to increase automation to simplify and speed up response times in their security ecosystems. All of this is encouraging as organizations battle with crushing complexity and an inability to keep up with security alerts amidst a severe shortage of skilled cybersecurity professionals.
Over the years, Cisco has woven integration and automation into its security portfolio to simplify network protection. This recently culminated in the introduction of our new security platform, Cisco SecureX. The SecureX platform brings together various components of the Cisco security portfolio, along with third-party technologies, so that they can share information, learn from one another, and help organizations respond to threats in a more automated, coordinated fashion.

SecureX unifies visibility, enables automation via machine learning/artificial intelligence, and strengthens security across network, endpoints, cloud, and applications. Ninety-eight percent of customers said the unified view provided by SecureX enables rapid threat response. In a time where new threat vectors seem to pop up daily, rapid threat response is critical for effective cybersecurity.
Strengthening security in 2020
Technology is of course never one-size-fits-all, but the capabilities above represent some key innovations that we recommend organizations explore moving forward. For more information on how to strengthen your security in 2020, check out the following:
Cisco 2020 CISO Benchmark Report
RSA Conference Keynote – Wendy Nather, Cisco
Cisco SecureX Platform
This post is the first in our new series covering various topics and data from our 2020 CISO Benchmark Report. Check back next month for the latest installment!
The post How to Strengthen Your Security in 2020 appeared first on Cisco Blogs.

Source:: Cisco Security Notice

By Matt Stauffer According to research from Enterprise Strategy Group (ESG) and the Information Systems Security Association, 91% of cybersecurity professionals believe that most organizations are either extremely or somewhat vulnerable to a significant cyber-attack or data breach.1 CISOs have tried many different solutions. Many are increasing hiring in a field with a steep talent shortage, which may have some long-term returns but doesn’t solve the problems they are facing today. Some also purchase a patchwork of security solutions that aren’t really integrated – an approach that can cause major complications for security architects. These strategies are clearly not increasing confidence in their overall security effectiveness.
What are the primary reasons you believe cybersecurity analytics and operations are more difficult today than they were 2 years ago?Research indicates that organizations can’t hire their way out of their cybersecurity woes. CISOs must improve security efficacy, streamline operations and bolster employee productivity, and they must rely on their existing workforce. That’s where Network Traffic Analysis (NTA) tools can provide a cybersecurity quick-win. An effective and modern NTA solution can continuously monitor the network and detect threats that might have bypassed the perimeter or even originated within the business. Top-tier NTA solutions take the weight off of the employees‘ shoulders by giving them the tools they need to speed up threat detection and remediation. To help you evaluate an NTA solution effectively, let’s take a look at the top features identified by cybersecurity professionals as part of the research conducted by ESG:

Built-in analytics and threat intelligence services
44% of survey respondents said that built-in analytics to help analysts detect suspicious/malicious behavior is one of the most important features. Best-in-class NTA tools have different algorithms and signatures built-in to model behavior and crunch data, allowing for high-fidelity alerts that streamline workloads and accelerate incident response. The same percentage also said that threat intelligence services/integrations to enable comparisons between suspicious behavior and known threats is another top feature. These integrations allow NTA tools to “enrich” network telemetry, making alerts more thorough and actionable.

Ability to monitor IoT traffic/devices
Users also need the ability to monitor niche equipment that is unique to their industries. This is especially important in industries that have made aggressive investments in IoT like healthcare, manufacturing and transportation. IoT devices generate telemetry and increase the threat surface like any other connected device, and therefore need to feed into an NTA tool.

Ability to monitor all network nodes
37% of respondents stated that alerts for when new network nodes are connected are essential for an NTA tool. This means security professionals want NTA tools to issue alerts when unsanctioned devices connect. This is incredibly important for monitoring and mitigating cyber-risks.

Proven integrations with other security technologies
37% also said that one of the most important features is documented and tested integrations with other types of security technologies. These other technologies could be malware sandboxes, network segmentation enforcement technologies and much more. These integrations allow for a closed-loop process that includes network security development, monitoring and enforcement.

Public cloud visibility
More than a third of respondents said that the ability to monitor cloud traffic is an essential feature. In order to provide true end-to-end visibility, NTA tools need to be able to tap into VPCs, cloud monitoring logs and APIs across AWS, Azure, GCP, etc.
Cisco Stealthwatch
Stealthwatch aligns well with the most important NTA attributes cited by the surveyed cybersecurity professionals. For example, Stealthwatch:
Features multiple types of built-in analytics. Its behavioral modeling and multi-layered machine learning algorithms can detect hidden threats- even those hiding in encrypted traffic.
Provides comprehensive visibility. In addition to monitoring on-premises environments, Stealthwatch also offers agentless visibility into the public cloud. It can also detect when a new network node connects, monitor traffic from IoT devices and more. Nothing slips through the cracks with Stealthwatch.
Backed by Cisco Talos threat intelligence. Threat intelligence is one of the most important features of an NTA tool. Stealthwatch ties its multi-layered analytics with global threat intelligence from Talos, the largest non-governmental threat intelligence organization in the world, and can take immediate action when activity is associated with a known threat, no matter the origin.

CISOs of the world can’t keep up with their security workloads, especially with a global cybersecurity talent shortage. They need quick wins– fast, efficient and accurate alerts that allow them to focus on what really matters. Cisco Stealthwatch is the tool they need right now.

You can find the full ESG Research Whitepaper here
To learn more about Stealthwatch, go to https://cisco.com/go/stealthwatch or sign up for our free visibility assessment.

1 Source: ESG Research Report, The Life and Times of Cybersecurity Professionals 2018, May 2019.
The post Top 5 features of a Network Traffic Analysis (NTA) tool- Why you need Stealthwatch now more than ever appeared first on Cisco Blogs.

Source:: Cisco Security Notice

By Dr. Gee Rittenhouse During this global health crisis, normal has been redefined. We are living through a dynamic situation that has required us to reorient our personal and professional lives in ways we never have before. Companies have had to do the same. Many have taken the extraordinary step of moving the majority, if not the entirety, of their workforces to a virtual workplace. As companies adapt to their new normal, securing this sudden exponential growth of remote workers and their devices remains a challenge.
A few weeks ago, we shared that Cisco would provide extended free licenses and expanded usage counts at no extra charge for three of our key security technologies that are designed to protect remote workers: DNS-layer security from Cisco Umbrella, zero-trust security from Duo and secure network access from AnyConnect. As a result of this, there has been a huge demand for these technologies. Cisco has supported an additional 9 million-plus users during this crisis with this rollout.
Security teams generally start by securely connecting employees to the network with the VPN, and multi-factor authentication provides an additional layer of security to customers‘ remote access strategy. As security teams work to protect a larger remote workforce, Duo is seeing the number of daily authentications from VPNs increase by 157 percent. But we know that 85 percent of corporate users bypass the VPN when working remotely. So, customers are increasingly looking to DNS-layer security to secure users on and off the network, and we have seen the need for Umbrella licenses increase by 100 percent.
Through all of this, we have been listening to customers feedback on how else we can best support them. What we heard is that more than ever there is a need to protect both user-owned and company-owned devices. Based on that input, today we are extending our free security offers to also include Cisco Advanced Malware Protection (AMP) for Endpoints. This technology prevents breaches and blocks malware at the point of entry as well as detects, contains and remediates advanced threats if they evade the frontline of defense.
With this new addition, existing customers can exceed their device limit by two times to support an increase in remote workers. To take advantage of this offer, they simply install AMP for Endpoints Connectors on extra devices, and no other action is required. As with our AnyConnect, Umbrella and Duo offers, this will be available until July 1, 2020.
Our mission is to be our customers‘ most trusted partner by providing effective security solutions. This current situation demands this more than ever, and we will continue to stand with our customers and partners through this challenging time.
You can learn more about our Cisco Security Remote Worker offerings here and find additional resources on the Business Continuity site. If you have any questions, please contact your Cisco representative or email us at pandemicsupport@cisco.com.
The post Expanding Free Security Offers into Customers‘ Endpoints appeared first on Cisco Blogs.

Source:: Cisco Security Notice