1 23-Feb-17 Cisco Live 2017 BRKSEC-1980

106 Pages·2017·9.37 MB·English

by  Jonny Noble (jonnoble)

Cisco Live 2017 23-Feb-17
BRKSEC-1980 1
Cisco Live 2017 23-Feb-17
BRKSEC-1980 2
Cisco Live 2017 23-Feb-17
BRKSEC-1980 3
Cisco Live 2017 23-Feb-17
Gartner, “Predicts 2017: Network and Gateway Security”, December 2016 (up from 10% in
2016)
- Gartner predicts by 2018, the average company will have 25% of its corporate data traffic
bypassing the network perimeter.
- Some industries are already there or surpassed this depending on how mobile your
workforce is.
- And that means that if you rely on perimeter security alone, you’re only getting 75%
protection—at best.
- People work wherever work needs to get done, and we need to make sure security does
the same thing
BRKSEC-1980 4
Cisco Live 2017 23-Feb-17
How IT was built:
- Going back a few years, most, if not all, infrastructure, applications, and desktops were
behind the firewall.
- To work, employees went into an office location and logged into the network.
- Branch offices backhauled all traffic to headquarters.
Security focus:
- The focus from a security perspective was to secure your perimeter and endpoints.
- And by backhauling all traffic, branch offices would get the same security as corporate.
Changing landscape:
- But in the last few years the way we work has fundamentally changed a a great deal.
BRKSEC-1980 5
Cisco Live 2017 23-Feb-17
- What has changed? More happens off-network.
- There are more roaming users than ever.
- There are more corporate-owned devices accessing the internet from other
networks.
- Apps move to the cloud
- Users no longer need to connect to the corporate network to get work done – they
use cloud apps like SFDC, Office 365 and others.
- They don’t always turn on the VPN — which means they are more vulnerable and
you lack visibility and protection.
- A study by IDG found that 82% of workers admit to not using the VPN.
- Branch offices connect directly to the internet
- It’s very expensive to backhaul all traffic to the corporate network, so more branch
offices are moving towards direct internet access.
- In fact, Forrester found 70% of branch offices had some level of direct internet
access.
- While you save money by not backhauling the traffic, you lose the security
protection.
BRKSEC-1980 6
Cisco Live 2017 23-Feb-17
It’s estimated that SaaS app usages will increase by 70% in the next 2 years.
To save on bandwidth and related costs, branch offices no longer backhaul traffic to corporate,
and instead connect directly to the internet. 70% of enterprise branch office report direct
internet access or DIA, and, it’s estimated that an alarming 30% will be the target of entry for
advanced attacks.
BRKSEC-1980 7
Cisco Live 2017 23-Feb-17
BRKSEC-1980 8
Cisco Live 2017 23-Feb-17
BRKSEC-1980 9
Cisco Live 2017 23-Feb-17
BRKSEC-1980 10