1. Not to Make You Paranoid, But …
An Update on Cybersecurity Threats and Prevention

2. Mirazon Network Engineering Manager Mirazon Systems Engineer
Nice to Meet You
Jay King
Mirazon Network Engineering Manager
Justin Cottrell
Mirazon Systems Engineer

3. Agenda Threat landscape Malware Ransomware Intrusion methods
Approaches to preventing these threats
The end users
UTM
“Defense in depth”
Monitoring
Q&A

4. Threat Landscape Phishing/spear phishing
Malicious ads in legitimate places
Intrusion methods
Ransomware

5. Security Approaches: Educating End Users
Often overlooked yet important
Update them frequently on what to look for
Encourage them to approach IT with anything suspicious without fear of retribution
Remediation planning
Access controls
Arm them with antivirus, endpoint protection, content filtering, spam filtering
Policies: AUP, DAR, site/physical
Dedicated resource for security, policy, planning, remediation

6. Unified Threat Management
Endpoint protection
Content filtering
Deep packet inspection
Application control/cloud access security inspection
Intrusion Prevention
Spam filtering
DNS filtering
SSO
DLP

7. Defense in Depth Edge firewalls Interior segmentation
Internal security
Device hardening
NAC/Onboarding
Wi-Fi
Load balancing/WAF
Backups DR

8. Monitoring Have baselines Can catch suspicious behavior
Log retention policies
Importance of careful analysis
Can catch suspicious behavior
Splunk, FortiAnalyzer, PRTG, SolarWinds
sanity-to-your-it-monitoring-tools/

9. Questions?