real, relevant, surprising and fresh: cisco brand€¦ · •cisco virtual web security appliance...
TRANSCRIPT
© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 1 © 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 1
Cisco Security: Moving to Security Everywhere
Stefano Volpi
13-10-2015
#TIGcyberSec
© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 2
Q2 FY15 Earnings Call
February 11, 2015
John Chambers
CEO, Cisco
I expect security to grow very
healthily as we move forward. And
you will continue to see us make a
number of resource investments in
areas like services, sales, and
consultancy in a way that really
brings this picture to life. I think
you’re going to see good growth
out of our security business. . .we
are positioned really well.
“
”
Cisco is All In with Security
© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3
Cisco Confidential 3 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
In the news: Feb 2013 Today
Cisco Confidential 3 ©2014 Cisco and/or its affiliates. All rights reserved.
Global Security Sales Organization
6000+
© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 4
Talos Group: Threats by the Numbers
7399 Common Vulnerabilities and Exposure (CVE) Entries in 2013 a
10% increase from 2012
1,100,000 Incoming Malware Samples Per Day, Increasing Daily
4.2 Billion Web Filtering Blocks Per Day
1 Billion Sender Base Reputation Queries Per Day
© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
The Security Problem
Changing
Business Models
Dynamic
Threat Landscape
Complexity
and Fragmentation
© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
Silos Create Security Gaps
W W W
Context- Aware
Functions
IPS Functions
Malware Functions
VPN Functions
Traditional Firewall
Functions
© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
Increases Visibility Accelerates Detection Scales Enforcement
Synergies Through Integration
The Network and Security
© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
Advisory Integration Managed
Custom Threat
Intelligence
Technical Security
Assessments
Integration
Services
Security Optimization
Services
Managed Threat
Defense
Remote Managed
Services
Security Services
© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
Strategic Imperatives
Network-Integrated,
Broad Sensor Base,
Context and Automation
Continuous Advanced Threat
Protection, Cloud-Based
Security Intelligence
Agile and Open Platforms,
Built for Scale, Consistent
Control, Management
Endpoint Network Mobile Virtual Cloud
Visibility-Driven Threat-Focused Platform-Based
© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
Mapping Technologies to the Model
Security Services
Firewall
App Control
VPN
Patch Mgmt
Vuln Mgmt
IAM/NAC
IPS
Antivirus
Email/Web
IDS
FPC
Forensics
AMD
Log Mgmt
SIEM
Attack Continuum
Discover Enforce Harden
Detect Block
Defend
Scope Contain
Remediate
© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
Comprehensive Security Product Portfolio
IPS & NGIPS
• Cisco IPS 4300 Series
• Cisco ASA 5500-X Series integrated IPS
• FirePOWER NGIPS
• FirePOWER NGIPS w/ Application Control
• FirePOWER Virtual NGIPS
NAC + Identity Services
• Cisco Identity Services Engine (ISE)
• Cisco Access Control Server (ACS)
Email Security
• Cisco Email Security Appliance (ESA)
• Cisco Virtual Email Security Appliance (vESA)
• Cisco Cloud Email Security
Web Security
• Cisco Web Security Appliance (WSA)
• Cisco Virtual Web Security Appliance (vWSA)
• Cisco Cloud Web Security
UTM
• Meraki MX
Advanced Malware Protection
• AMP for Networks
• AMP for Endpoints
• AMP for Private Cloud / Virtual Appliance
VPN
• Cisco AnyConnect VPN
Firewall & NGFW
• Cisco ASA 5500-X Series
• Cisco ASA 5500-X w/ NGFW
license
• Cisco ASA 5585-X w/ NGFW blade
• Cisco ASA with FirePOWER Services
© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
BEFORE Discover
Enforce
Harden
AFTER Scope
Contain
Remediate
Detect
Block
Defend
DURING
Network as a Sensor Network as an Enforcer
Next Generation Firewall
VPN + AnyConnect
Web / Email Security (cloud)
Next Generation IPS
Advanced Malware Protection
Web / Email Security (cloud)
Advanced Malware Protection
pxGrid
APIC-EM
© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 13
Branch Campus Edge Operational
Technology
Cloud Data
Center
Services
Endpoint
Security Everywhere
Cisco Confidential – For Internal Use
Only