Remote Workforces Secure by Barracuda
0 likes80 views
1) The document discusses how Barracuda Networks provides solutions to securely enable remote access and scale networks, prevent advanced threats, and secure email, data, and web applications. 2) It highlights specific challenges companies currently face around securing remote workers accessing corporate networks, preventing phishing and social engineering attacks, and backing up Office 365 data. 3) Barracuda offers products including cloud-based firewalls, content filtering, email security, web application firewalls, and backup services to help secure remote access and scaling, protect email and data, and detect and prevent threats.
Remote Workforces Secure by Barracuda
- 1. Barracuda Networks Your journey, secured Version 5.1 | July 2018
- 6. Things to secure In Current Scenario Remote access Email Data Web apps
- 7. Scaling Access :- New Remote workers (Client-to-Site & SSLVPN) can login securely into corporate or Cloud network to access applications. Use Cases in current Scenario Remote users not accessing malicious content on Internet , not downloading malwares and are productivity they should only access the content allowed as per corporate policy. Spear Phishing and Social Engineering attacks based on current context , how to secure office 365 mailboxes Office 365 back-up , Exchange ,SharePoint and OneDrive aren’t backed-up on its own, What if users deletes the data or Exchange folder Your Business is run by your Web Apps, How do we protect public facing Web applications: NGFW aren’t capable to block Layer 7 Attacks
- 8. How to Secure business during Unusual circumstances
- 10. Two things to consider Scaling App Security
- 11. Use the public cloud to scale up quickly Enable protection from: • OWASP Top 10 • DDoS attacks • Advanced Bots Strategies for scaling and securing applications
- 12. What does it do? A security device for a website or web application. Additional layer of security for your infrastructure, NOT the same as an application aware network firewall. Most websites today are Web Applications – more features and more security vulnerabilities. Do you have a login? Take personal or financial info? Have specific industry or government security requirements? You need a WAF! Web Application Firewall
- 14. Network Firewall Layer 7 Network Firewall IDS/IPS Web Server HTTP Request (legitimate) HTTP Request (attack) TCP Port 80 TCP Port 80 HTTP TCP Port 80 – HTTP No matching Signature
- 15. Network Firewall Layer 7 Network Firewall IDS/IPS Web Application Firewall Web Server HTTP Request (legitimate) HTTP Request (attack) TCP Port 80 TCP Port 80 HTTP TCP Port 80 – HTTP No matching Signature Obfuscated XSS attack Request blocked
- 16. Network Firewall Layer 7 Network Firewall IDS/IPS Web Application Firewall Web Server HTTP Request (legitimate) HTTP Request (attack) TCP Port 80 TCP Port 80 HTTP TCP Port 80 – HTTP No matching Signature Obfuscated XSS attack Request blocked Credit Card Number Found Request blocked
- 17. Everyone is a Target Web exploitation kits available • Easyto procure • Noexpertiserequired • Theyoperatelikecompanies • Canattackthousandsofservers inseconds
- 18. Web Applications Health Check-up Barracuda Vulnerability Manager • Scan web applications for vulnerabilities • Provides detailed vulnerability scan reports • Integrated with Barracuda WAF • Free
- 19. Barracuda WAF-as-a-Service Built on the same proven technology Simple 5-step setup wizard adds protection in minutes Intuitive component-based structure for fine-tuning policies Fully featured REST API Unmetered DDoS protection included Automated vulnerability identification and remediation Enterprise-proven application security delivered in minutes
- 20. More WAF deployment options Public Cloud SaaS Physical Appliance Virtual Appliance Vx
- 22. Secure Email
- 23. • We’re seeing a lot of COVID-19 related email attacks What about Email and O365 Backup?
- 24. Conversation hijacking Attacks are getting more sophisticated Hi Mike Domain Impersonation Request changes in payment method Reply to existing conversation
- 25. Increased risks over the last decade RiskandComplexity 2000 2010 Spam & malware Regulatory compliance Zero-day attacks Phishing Brand impersonation
- 26. This decade brought sophisticated threats RiskandComplexity 2011 2019 Ransomware Spear phishing/ social engineering Business email compromise Account takeover
- 27. In the early days, it was simple Mail Server Corporate Inbox EmployeesInternet Legitimate Mail
- 28. Spam firewalls kept bad things out Mail Server Corporate Inbox EmployeesInternet Spam/malware Spam Firewall Legitimate Mail
- 29. Over time, we built a better gateway Mail Server Corporate Inbox EmployeesInternet Spam/malware Spam Firewall, DLP, Backup, Archiving Legitimate Mail
- 30. Sandboxing stopped zero day threats Mail Server Corporate Inbox EmployeesInternet Spam/malware Spam Firewall, DLP, Backup, Archiving, Sandboxing Legitimate Mail Zero Day
- 31. Gateways are blind to social engineering Spam/malware Spam Firewall, DLP, Backup, Archiving, Sandboxing Mail Server Corporate Inbox EmployeesInternet Legitimate Mail Zero Day
- 32. Account takeover is the newest threat Personal Email Spear Phishing Mail Server Corporate Inbox EmployeesInternet ATOSpam Firewall, DLP, Backup, Archiving, Sandboxing Legitimate Mail Zero Day
- 33. Securing the gateway is still necessary, but no longer sufficient
- 34. Multi-Layered Email Protection O365 | G Suite | Exchange Inbound/Outbound Security Encryption and DLP for Secure Messaging Archiving for Compliance Gateway Defense Phishing Simulation and Training Security Awareness Resiliency Cloud Backup Email Continuity AI for Social Engineering Account Takeover Defense Brand Protection DMARC Reporting Inbox Defense
- 35. Barracuda Total Email Protection Gateway Defense Resilience Barracuda Essentials Security Awareness Barracuda PhishLine Inbox Defense Barracuda Sentinel
- 36. Office 365 Health checkup Barracuda Email Threat Scanner (ETS) https://scan.barracudanetworks.com/signup
- 37. Moving forward
- 38. Scaling Access :- New Remote workers (Client-to-Site & SSLVPN) can login securely into corporate or Cloud network to access applications. https://www.barracuda.com/products/cloudgenfirewall/use_cases/remote-vpn-access Remember the Use Cases in current Scenario Remote users accessing malicious content on Internet , not downloading malwares , are productivity and will only access the content allowed as per corporate policy. https://www.barracuda.com/products/contentshield Spear Phishing and Social Engineering Attacks based on current context , how to secure office 365 mailboxes https://www.barracuda.com/products/totalemailprotection Office 365 back-up , Exchange ,SharePoint and OneDrive aren’t backed-up on its own, What if users deletes the data or Exchange folder https://www.barracuda.com/products/cloudtocloudbackup Your Business is run by your Web Apps, How do we protect public facing Web applications: NGFW aren’t capable to block Layer 7 Attacks https://www.barracuda.com/waf-as-a-service
- 40. Thank You and Stay Safe Version 5.1 | July 2018