The Software-Defined Perimeter in Action A Cloud-Ready Network Security Solution for the Modern Enterprise Christopher Day, CISSP Chief CyberSecurity Officer & General Manager

Built like cloud, for cloud A better approach to network security: Software-Defined Perimeter Built like cloud, for cloud 3 Colocation 1 Identity-centric Zero-trust model 2 By 2021, 60% of enterprises will phase out network VPNs for digital business communications in favor of software-defined perimeters.” “

AppGate SDP: Identity-centric, network enforced IDENTITY PROVIDER 1 Using Single-Packet Authorization, client makes access request to controller CONTROLLER GATEWAY CLIENT 2 Controller checks context, passes Live Entitlement to client 3 Using SPA, client uploads Live Entitlement, which gateway uses to discover applications matching the user’s context APPLICATION Lead in for this slide: “Cyxtera has a product that implements the SDP spec – AppGate SDP. It’s an enterprise—ready solution, deployed by many customers, and as an enterprise solution has filled in the gaps where the core SDP spec is silent.”. 4 Dynamic Segment of One network is built for this session APPLICATION 5 Continuously monitors for any context changes, adapts Segment of One accordingly APPLICATION

Enumerating user location, access and activity Built-in Identity Management AUDIT Logs contain over 100 fields User Account & Desktop Configuration Geolocation and Foreign Language Detection All Allow/Deny information captured Implementation dependent logging values 4

Transform security to support virtual & 3rd-party workforce CASE STUDY: TRAVEL AND LEISURE COMPANY Transform security to support virtual & 3rd-party workforce Challenges Need to secure access for virtual agents & contractors Cumbersome user access experience Existing VPNs lacked contextual control of user privileges Results with AppGate SDP Lowered personnel costs and able to handle seasonal peaks Replaced VPN to segment and secure remote users Improved user experience with superior SDP performance Dynamically control access based on user and environment

Streamline and improve security post M&A CASE STUDY: SECURE INFRASTRUCTURE COMPANY Streamline and improve security post M&A Challenges Simultaneous acquisition of five different companies Disparate, incompatible standalone security solutions Costly to maintain complex, aged security hardware (firewalls, VPN) Difficult to integrate additional acquisitions Results with AppGate SDP Secure user access globally with single integrated solution Consolidated security management and admin Eliminated need for additional costly security hardware Flexible framework can easily adapt for future expansion

Security across diverse access paths CASE STUDY: CLOUD SERVICE PROVIDER Security across diverse access paths Challenges Manage privileged users in multi-tenant environment Need to improve personnel access control and audit Adapt security to support BYOD and BYOOS Replace VPN for remote access users Results with AppGate SDP Automatically manages call center agent access to protected workloads ONLY when trouble ticket is active Consistent experience for all users on-prem or cloud Secure access for IaaS, remote and privileged users Scale to support organization growth to 6500 users

Summary: The Software-Defined Perimeter in Action Secure high-risk apps and data Improve security enterprise-wide Lower costs, simplify operations

Visit Cyxtera at RSA in booths: #1333 in Moscone South #941 in Moscone North www.cyxtera.com | info@cyxtera.com