Post on 31-Mar-2015
Getting a Good Night Sleep
Steve Winfield, MCSE, CISSP, RCGRegional Channel Manager
Protecting Your Endpoints
Going Beyond Anti-Virus
AgendaSay, “Hello.”
Look good.
Explain some stuff.
Try not to say anything stupid.
Leave.
ENDPOINT SECURITY IS NOT JUST AV
So why are we here talking about a commodity sale like anti-virus?
3
AND ENDPOINT SECURITY IS WHERE IT IS AT
So why are we here talking about a commodity sale like anti-virus?
4
The Endpoint is the Frontline…
•Attacks in 2011 targeting user devices
60%
•Attacks in 2012 targeting user devices
71%
Verizon Data Breach Investigations Report 2013
2,000,000
1,500,000
1,000,000
500,000
0
3,000,000
2,500,000
4,000,000
3,500,000
1999 2001 2003 2005 2007 2009 2011
316,000+New threats per day
MALWARE AND THREATS: SMARTER, FASTER, MORE
160,000,000+
Network attacks blocked
per month
104,427
4,659,920Mobile Malware in
2013
Web-borne infections prevented per day
2013
Advanced endpoint
protection is required!!!
The 5 Weapons of the Enemy
• Malware: Ever-increasing threats• Mobility: Your data is on the move• Mine!: Employee-owned devices• Mistakes: Vulnerabilities in applications• Messy: The complexity of the IT environment
SIMPLIFY!!!
So how do we fight back?
8
Think about it…
9
Home entertainment used to be simple…
11
However, home entertainment has changed…
Apple TV Panasonic Blu Ray
Denon Receiver
Comcast Xfinity Xbox 360
Samsung Plasma TV
4 Devices 4 Devices
4 Devices
4 Devices
4 Devices 3 Devices
3 Devices
2 Devices
12
This Means Redundancy…and Increased Costs
13
This Means Complexity…and Lack of Integration
Increased costs, higher complexity, and lack of integration at home?
Unhappy Spouse
14
Increased costs, higher complexity, and lack of
integration at work?
Unhappy Boss
15
Unhappy Job
Unhappy End Users
Increased Need for an Updated Resume
So what does this have to do with Endpoint Security?
Malware
The Impact of Complexity on IT Security
Browsing and Installing
Mobile / BYOD
Vulnerabilities in Applications
17
YOUR DATA
Response: Software inventorySystems / patch management
Response: Mobile SecurityMobile device management (MDM)
Response: Application controlWeb control
Data is easy to Move
Response: Data encryptionDevice control
Response: Anti-malware Firewall
Malware
The Impact of Complexity on IT Security
Browsing and installing
Mobile / BYOD
Vulnerabilities in Applications
18
YOUR DATA
Response: Anti-malware Firewall
Response: Software inventorySystems / patch management
Response: Mobile SecurityMobile device management (MDM)
Response: Application controlWeb control
Data is easy to Move
Response: Data encryptionDevice control
This is complexity.COMPLEXITY IS THE ENEMY OF IT SECURITY.
Malware
The Impact of Complexity on IT Security
Browsing and Installing
Mobile / BYOD
Vulnerabilities in Applications
YOUR DATA
Response: Software inventorySystems / patch management
Response: Mobile SecurityMobile device management (MDM)
Response: Application controlWeb control
Data is easy to Move
Response: Data encryptionDevice control1PLATFORM
MANAGEMENT CONSOLECOST
Response: Anti-malware Firewall
The Impact of Complexity on IT Security
1PLATFORMMANAGEMENT CONSOLECOST
Investme
nt
Complexi
ty
RiskPhysical, Virtual, MobileWindows, Mac, Linux --- Android, iOS, Windows Phone,
BlackBerry, Symbian
PAGE 21 |
Anti Malware + Firewall
Kaspersky Endpoint Security for Business
McAfeeTOP 3 = 21%
N of tests - 551st places - 1
Trend MicroTOP 3 = 21%
54 tests1st places - 3
EsetTOP 3 = 29%
51 tests1st places - 2
SophosTOP 3 = 39%
28 tests1st places - 1
TOP3 score results comparison
10
20
30
N o
f 1st p
lace
s
10 20 30 40 50 60 70 80
Tests participated
SymantecTOP 3 = 58%
46 tests1st places - 9
BitdefenderTOP 3 = 75%
53 tests1st places - 12
KasperskyTOP 3 = 87%
73 tests1st places – (!) 31
PAGE 23 |
Anti Malware + Firewall
Kasp
ersky Secu
rity Cen
ter
Web ControlDevice ControlApplication
Control
File Server Security
Systems Management (SMS)
Kaspersky Endpoint Security for BusinessWebCollaboration Mail
License Mgmt
VulnerabilityScan
PatchMgmtImage Mgmt
SW InstallationNetwork Access
Mobile Device Management (MDM)
Cloud Enabled via the Kaspersky Security Network (KSN)
Select
Advanced
Total
Mobile Endpoint Security
Data Protection (Encryption)
EndpointManagement
SIMPLIFIEDMANAGEMENT
VIRTUAL ENDPOINTPROTECTION
VIRTUAL NETWORKPROTECTION
FLEXIBLELICENSING
Under a “single-pane”
Unified policymanagement
Intuitive interface
Robustreporting
Immediate protection
Zero-day threat protection (KSN)
Shared cache for high performance
Maximized density
Scans and protectsnetwork traffic
Intrusion prevention (IPS)
Intrusion detection (IDS)
Prevents AV storms
‘Per core’ licensing
‘Per machine’licensing
Security for VirtualizationAgentless Security with vShield and vCloud
Questions to Ask Yourself
25
How do you currently handle patching? Is your security simple to manage? What % of malware attacks is it okay to let through? How do you protect mobile users from malicious/improper sites? Do you have smartphones and tablets in your environment? Do you have any confidential customer/company information? Does everyone need the same level of access and permissions? Do you know what HW and SW you have in your environment? Is your virtualization environment as secure as it should be?
Are you REALLY happy with your current solution?
Down and Dirty ROI
If web surfing was faster from not having so many add-ons?If the computer wasn’t so slow from all of the random applications installed?If the default search was not some unknown search engine?If there weren’t so many toolbars?If users didn’t go to unsafe or inappropriate websites?If the computer didn’t have to reboot in the middle of the day?
How much total time would be saved each day?
$24,000 average (fully encumbered)$2000/month for 12 months$500/week for 4 weeks$100/day for 5 days$12.50/hour for 8 hours$0.20/minute for 60 minutes
For just one minute each day for each employee...
$0.20/minute saved per day
$1/week
$4/month
$48/year
In order to sleep peacefully at night…
27
Physical, virtual, mobileIdentify vulnerabilitiesInventory HW and SWTake action with clear reporting
SEEConfigure and deploySet and enforce IT policiesManage employee-owned devicesPrioritized patchesLicense Mgmt. Network Access Control
CONTROLEvolve beyond just anti-virusMeet security demandsProtect data and devices anywhereRely on expertise of trusted vendors
PROTECT
Thank You!
Kaspersky LabSteven Winfield, Regional Channel Manager
Steven.Winfield@Kaspersky.com