1. Intra-Company Data Traversal Protecting Customer Data from Parent Company

2. Intra-Company Data Traversal Auditor : “Can Allstate Corp. capture outbound traffic from Allstate Bank?” Jason : “Yes”… “I mean no!”… “Ah damn!”

3. Intra-Company Data Traversal The Business Need Allstate Bank (AB) wants to protect its customer data from Allstate Corp. (ALL)

4. Intra-Company Data Traversal The Problem  How do we protect non-public customer data that is being electronically transmitted from Allstate Bank through Allstate Corp’s corporate LAN?

5. Intra-Company Data Traversal Problem Specifics Regulatory 1. Regulations dictate that there can only be limited access to sensitive customer information. 2. US Consumer & Privacy laws must be followed in all cases.

6. Intra-Company Data Traversal Problem Specifics Data For that information that can be sent: 1. Data cannot be in Plaintext as it traverses Allstate corporate network. 2. Payload of packet cannot be encrypted by router when it reaches the Allstate corporate network perimeter.

7. Intra-Company Data Traversal Solution : IPSec tunnel between 2 new Cisco routers

8. Intra-Company Data Traversal Auditor : “Can Allstate Corp. capture outbound traffic from Allstate Bank?” Jason : “Yes”… “But only in 1 place … instead of 5”