Juniper Software-Defined Secure Network Haitham Saif

54% 60% 75% $11M Market Situation of the data breaches were related to compromised servers 60% of breaches were took weeks or months to discover 75% of attacks are driven by financial motives $11M average cost due to data breach

Market Situation Hacking is a multinational enterprise Security incident every 7 minutes Cost increasing per security incident $ Data breaches – 6 successful per day Source: Verizon 2015 Data Breach Investigation Report.

Network Security Complexity Multi-vendor, multi-vector solutions deployed Layered on top of the network Security tools lagging behind attacker ingenuity Unmanaged risk to business outcomes and operations App Servers Application Security Unified Threat Management Firewalls Data Loss Prevention Inline Intrusion Prevention LAG Core Centralized DHCP and Other Services Inline Anti Prevention

Threat Intelligence Feeds Actionable threat intelligence: Command and control threats GeoIP location information Open Scalable High capacity Effective Adaptive Threat Data Cloud Other threat intelligence Command & control GeoIP feed Device Management Security Management Cloud Data Connector SRX

A Change in Mindset Realize threats are everywhere. They are already inside. They walked in your front door Recognize perimeter security isn’t enough Detection and Enforcement should be enabled anywhere Acknowledge security is everyone’s problem – horizontal and vertical 6

The Software-Defined Secure Network Operate network as single enforcement domain, every element becomes a policy enforcement point Create and centrally manage intent based policy directly aligned to business objectives Gather & distribute threat intelligence, from multiple sources – know who the bad guys are faster Leverage cloud economics for real time analysis – find the bad guys faster Enforce policy to the threat feed information, real time across the network – adapt the network real-time Detection Policy Enforcement 7

SDSN Innovation Summary Simple Single network-wide policy manager Reduce risk of error and overlap function Open Most advanced threat detection capabilities by integration threat data from Juniper and 3rd party Comprehensive Adapt zero-trust and micro-segmentation to enforce network-wide policy Scalable Utilize all network resources to enforce policy and detect threats