Prevent Costly Data Leaks from Microsoft Office 365 9/20/2018 9:21 AM THR1035 Prevent Costly Data Leaks from Microsoft Office 365 Anuj Sawani Palo Alto Networks © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Office 365 Apps Storing Data in the Cloud OneDrive SharePoint Exchange Yammer

How Do Data Leaks Happen? MALICIOUS OUTSIDER ACCIDENTAL DATA EXPOSURE MALICIOUS INSIDER 59% 23% 14% SOURCE OF BREACH DATA – 2013-2017 – breachlevelindex.com

Native Office 365 Security Controls Identity Management Data Compliance Rights Management Malware Detection

Extend Native Security Controls 9/20/2018 9:21 AM Extend Native Security Controls When you need… Data protection for other cloud apps In-line visibility and granular app control Leverage advanced DLP capabilities Threat protection across network, cloud and endpoints Protection against zero-day malware © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Abundant Use of SaaS Applications Sanctioned Remote users Tolerated Unsanctioned On-prem users

The Overlay (and Insufficient) Approach Sanctioned Remote users CLOUD PROXY Pac File Merge Or Addt’l VPN Agent Tolerated Pac File Merge CLOUD PROXY Unsanctioned Log Forwarder On-prem users Traffic Forwarder AD Connector

The Overlay Approach Does Not Scale Sanctioned Remote users On-prem users Log Forwarder Traffic Forwarder AD Connector Pac File Merge Or Addt’l VPN Agent CLOUD PROXY Tolerated CLOUD PROXY Unsanctioned Evasion tools

Palo Alto Networks’ Platform Approach Monitor and control in-cloud activity with Aperture Sanctioned Remote users Complete visibility and control for remote users via GlobalProtect Tolerated Complete visibility and control for on premise activity with PAN-OS Next Generation Firewall Unsanctioned On-Prem users

344 KB slideshare-uploading PowerPoint slideshare prodmgmt HTTP application function PowerPoint file type “Confidential and Proprietary” content slideshare application 344 KB prodmgmt group HTTP protocol file-sharing URL category mjacobsen user SSL protocol canada destination country 172.16.1.10 source IP 64.81.2.23 destination IP TCP/443 destination port

Discover Cloud Apps and Assess Risk SaaS Usage Reporting Interactive SaaS Dashboard

Aperture Security Components DLP Malware Prevention User Anomalies and Activity Monitoring Machine Learning Control third-party apps Cloud Asset and Risk Discovery

Comprehensive Cloud App Coverage API-BASED INLINE 2500+ APPS (SAAS AND NON-SAAS) https://applipedia.paloaltonetworks.com

Comprehensive Protection for Microsoft Environments In the Cloud Securely enable Office 365 and Azure migrations Protect cloud environments from threats Prevent data loss in Office 365 On the Network Next-generation firewall; appliance or virtualized Securely enable Microsoft applications Prevent known and unknown threats On the Endpoint Enforce policy consistency for all users and devices Prevent known and unknown threats

Please evaluate this session Tech Ready 15 9/20/2018 Please evaluate this session From your Please expand notes window at bottom of slide and read. Then Delete this text box. PC or tablet: visit MyIgnite https://myignite.microsoft.com/evaluations Phone: download and use the Microsoft Ignite mobile app https://aka.ms/ignite.mobileapp Your input is important! © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

http://go.paloaltonetworks.com/secureo365 9/20/2018 9:21 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9/20/2018 9:21 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Backup

Aperture For Cloud-based Email Email Security Threat Prevention and DLP 0-Day Malware detection tied to WildFire Detection of sensitive content and exposure Activity monitoring and anomalies Email Controls Monitoring Detection of auto-forwarding to untrusted domains Detection of Public Folders Detection of Retention Policy Violations APERTURE THREAT INTELLIGENCE CLOUD

Aperture For SharePoint & OneDrive Protect against Data exfiltration Detection of sensitive content Activity monitoring and anomalies Monitor SharePoint Sites Users OneDrive Folders Remediate accidental exposure Stop Malware Propagation Detect Malware Quarantine APERTURE THREAT INTELLIGENCE CLOUD