1. The Software-Defined Perimeter in Action
A Cloud-Ready Network Security Solution for the Modern Enterprise
Christopher Day, CISSP
Chief CyberSecurity Officer & General Manager

2. Built like cloud, for cloud
A better approach to network security:
Software-Defined Perimeter
Built like cloud, for cloud 3
Colocation 1
Identity-centric
Zero-trust model 2
By 2021, 60% of enterprises will phase out network VPNs for digital business communications in favor of software-defined perimeters.” “

3. AppGate SDP: Identity-centric, network enforced
IDENTITY PROVIDER 1
Using Single-Packet Authorization, client makes access request to controller
CONTROLLER
GATEWAY
CLIENT 2
Controller checks context,
passes Live Entitlement to client 3
Using SPA, client uploads Live Entitlement, which gateway uses to discover applications matching the user’s context
APPLICATION
Lead in for this slide:
“Cyxtera has a product that implements the SDP spec – AppGate SDP. It’s an enterprise—ready solution, deployed by many customers, and as an enterprise solution has filled in the gaps where the core SDP spec is silent.”. 4
Dynamic Segment of One network is built for this session
APPLICATION 5
Continuously monitors for any context changes, adapts Segment of One accordingly
APPLICATION

4. Enumerating user location, access and activity
Built-in Identity Management
AUDIT Logs contain over 100 fields
User Account & Desktop Configuration
Geolocation and Foreign Language Detection
All Allow/Deny information captured
Implementation dependent logging values 4

5. Transform security to support virtual & 3rd-party workforce
CASE STUDY: TRAVEL AND LEISURE COMPANY
Transform security to support virtual & 3rd-party workforce
Challenges
Need to secure access for virtual agents & contractors
Cumbersome user access experience
Existing VPNs lacked contextual control of user privileges
Results with AppGate SDP
Lowered personnel costs and able to handle seasonal peaks
Replaced VPN to segment and secure remote users
Improved user experience with superior SDP performance
Dynamically control access based on user and environment

6. Streamline and improve security post M&A
CASE STUDY: SECURE INFRASTRUCTURE COMPANY
Streamline and improve security post M&A
Challenges
Simultaneous acquisition of five different companies
Disparate, incompatible standalone security solutions
Costly to maintain complex, aged security hardware (firewalls, VPN)
Difficult to integrate additional acquisitions
Results with AppGate SDP
Secure user access globally with single integrated solution
Consolidated security management and admin
Eliminated need for additional costly security hardware
Flexible framework can easily adapt for future expansion

7. Security across diverse access paths
CASE STUDY: CLOUD SERVICE PROVIDER
Security across diverse access paths
Challenges
Manage privileged users in multi-tenant environment
Need to improve personnel access control and audit
Adapt security to support BYOD and BYOOS
Replace VPN for remote access users
Results with AppGate SDP
Automatically manages call center agent access to protected workloads ONLY when trouble ticket is active
Consistent experience for all users on-prem or cloud
Secure access for IaaS, remote and privileged users
Scale to support organization growth to 6500 users

8. Summary: The Software-Defined Perimeter in Action
Secure high-risk apps and data
Improve security enterprise-wide
Lower costs, simplify operations

9. Visit Cyxtera at RSA in booths:
#1333 in Moscone South
#941 in Moscone North |