barracuda total email protection · 2019. 9. 16. · barracuda networks named a leader in...
TRANSCRIPT
Barracuda Total Email ProtectionEssentials for O365, Sentinel & PhishLine w/
Forensics & Incident Response
BR
AN
D -
Co
nte
nt
74%
“Almost three quarters of all attacks start with email attachment or a link.”
The Problem: Most Attacks Start with Email
2017 Threat Landscape Survey: Users on the Front Line - SANS Analyst Program
- SANS Analyst Program
Confidential
Cloud Email is the New Norm
©2016 Radicatti Group
• Shift from on-premises Exchange to the cloud
• Hybrid deployments are the new norm for larger organizations
BR
AN
D -
Co
nte
nt
Increased risks over the last decade R
isk
and
Co
mp
lexi
ty
2000 2010
Spam &
malware
Regulatory
compliance
Zero-day
attacks
Phishing
Brand
impersonation
BR
AN
D -
Co
nte
nt
This decade brought sophisticated threatsR
isk
and
Co
mp
lexi
ty
2011 2019
Ransomware
Spear phishing/
social
engineering
Business email
compromise
Account
takeover
BR
AN
D -
Co
nte
nt
In the early days, it was simple
Mail Server Corporate
Inbox
Employees Internet
Legitimate Mail
BR
AN
D -
Co
nte
nt
Spam firewalls kept bad things out
Mail Server Corporate
Inbox
EmployeesInternet
Spam/malware
Spam
Firewall
Legitimate
BR
AN
D -
Co
nte
nt
Over time, we built a better gateway
Mail Server Corporate
Inbox
EmployeesInternet
Spam/malware
Spam
Firewall,
DLP,
Backup,
Archiving
Legitimate
BR
AN
D -
Co
nte
nt
Sandboxing stopped zero day threats
Mail Server Corporate
Inbox
EmployeesInternet
Spam/malware
Spam
Firewall,
DLP,
Backup,
Archiving,
Sandboxing
Legitimate
Zero Day
BR
AN
D -
Co
nte
nt
Gateways are blind to social engineering
Spam/malware
Spam
Firewall,
DLP,
Backup,
Archiving,
Sandboxing
Mail Server Corporate
Inbox
EmployeesInternet
Legitimate
Zero Day
BR
AN
D -
Co
nte
nt
And attacks come through the back door
Personal
Spear
Phishing
Mail Server Corporate
Inbox
EmployeesInternet
Spam
Firewall,
DLP,
Backup,
Archiving,
Sandboxing
Legitimate
Zero Day
BR
AN
D -
Co
nte
nt
Account takeover is the newest threat
Personal
Spear
Phishing
Mail Server Corporate
Inbox
EmployeesInternetATO
Spam
Firewall,
DLP,
Backup,
Archiving,
Sandboxing
Legitimate
Zero Day
Securing the gateway is still necessary, but no longer sufficient
Confidential
BR
AN
D -
Co
nte
nt
Forensics
and
Incident
Response
Multi-Layered Email Protection
O365 | G Suite | Exchange
Inbound/Outbound
Security
Encryption and DLP
for Secure Messaging
Archiving for
ComplianceGateway Defense
Phishing Simulation and TrainingSecurity
Awareness
Resiliency Cloud Backup Email Continuity
AI for Social
Engineering
Account Takeover
Defense
Brand Protection
DMARC ReportingInbox Defense
BR
AN
D -
Co
nte
nt
The email gateway is the foundation of defense
Inbound & ATPProtect inbound mail from spam, malware, and advanced zero-day attacks
Use ATP and sandboxing to block malicious attachments
Outbound
Encryption &
DLP
Protect outbound email from distribution of spam and malicious email
Stop data leaks with secure messaging, data loss prevention, and encryption
Archiving for
Compliance
Retain and preserve email with tamper-proof, policy-based email archiving
Stay compliant with requirement and address eDiscovery requests
BR
AN
D -
Co
nte
nt
Building resiliency to mitigate risk of downtime
Cloud BackupProtect your data from accidental or malicious deletion with cloud back up
Recover and restore data quickly and easily to minimize downtime
Email ContinuityStay connected during downtime and continue to send and receive email
Ensure business continuity and keep your staff productive
Spear Phishing: Growing Exponentially
$5BLosses from
spear phishing
2,370%Increase from
2015 to 2016
Source: FBI, 2017
BR
AN
D -
Co
nte
nt
Build protection beyond the gateway
AI for Social
Engineering
Use AI to detect socially-engineered attacks that avoid traditional gateways
Block attacks that come from both internal and external sources
Account
Takeover
Protection
Detect account takeover attempts and attacks launched from
compromised accounts
Remediate account takeover in real-time before they cause damage
DMARC
Protect your reputation and stop domain fraud with DMARC reporting
Gain visibility into how your email domain is used with DMARC
reporting and analysis
Confidential
Barracuda Sentinel
BR
AN
D -
Co
nte
nt
Deploy your human firewall
SimulationEnabling simulation capabilities to evaluate and identify users that
are more vulnerable to socially engineered attacks
TrainingTraining users to proactively detect and report phishing attacks, lowering
the risk of impact of future attacks
Reporting and
Insights
Detect trends and patterns and assess the effectiveness of
security awareness training
BR
AN
D -
Co
nte
nt
Automate incident response
IdentificationUsers do not always report attacks
Proactive IT investigation takes too long
investigationManual Search for other recipients of malicious mail
Unconnected systems lead to tedious manual checks
ResponseManual and time consuming remediation process
Removal and quarantine of malicious mail takes too long
BR
AN
D -
Co
nte
nt
Automate incident response
ForensicsAccess threat insights and identify anomalies in delivered email
Proactively find attacks that by-passed email security
Incident
Response
Identify compromised users in need of training
Improve workflow for more seamless incident response
Forensics & Incident Response (FIR)
Confidential
• Automated incident response
• Notify affected users
• Automatic inbox threat removal
• Fast click-through remediation
• Real-time reporting and forensics
• Continuous Remediation (attack protection)
• Continues searching for emails that are part of an incident even after an
incident is created.
• Admin creates an incident only one time and if more emails come in that
match the criteria specified in the incident, FIR will automatically detect and
remove those
• Incidents will provide Continuous Remediation for 72 hours. They can be
stopped any time, or the time frame can be extended.
Forensics & Incident Response (FIR)
Confidential
Barracuda Networks Named A Leader in Enterprise Email Security
Confidential
• Barracuda named a Leader in “The Forrester WaveTM: Enterprise Email Security, Q2 2019
• Innovative AI-based solution, Sentinel, to protect against phishing and BEC attacks
• Barracuda received the highest score possible in:
✓ Cloud integration
✓ Deployment options
✓ Incident response
✓ Support
✓ Customer success criteria
“Customers praise Barracuda’s innovation, its Office 365 integration, and its customer
support.”
Barracuda Networks Named A Leader in Enterprise Email Security
Confidential
https://www.barracuda.com/news/article/781#.XN23LI5KiUk
“Cybercriminals use social engineering to launch spear phishing and account takeover
attacks that evade traditional email security solutions and manipulate end users for financial
gain. Our innovative technologies protect businesses from these threats. We believe this
report recognizes how we deliver new ways to support our email security customers, earn
their trust, and help them protect their businesses.”
– Asaf Cidon, SVP of Email Protection, Barracuda Networks
O365 | Exchange
Barracuda Essentials
Barracuda Sentinel
Barracuda PhishLine
Confidential
Email Threat Scanner – Identify Vulnerabilites…
✓ Cloud-based tool integrated with Office 365
✓ Scans Office 365 email accounts for
advanced threats
✓ Presents Detailed Threat Report
• Threat Summary
• At risk employees
• Threat Trends
• Top Risks
ETS Link –https://scan.barracuda.com
…sell Total Email Protection!
Next Steps
Leverage ETS solutionhttps://scan.barracuda.com
Start a 30 day trials
https://www.barracuda.com/essentials
Confidential
Thank You
Confidential