1. Customer confidential 1 Privilege Management Sean Moore Solutions Specialist

2. Customer confidential 2 2 AGENDA AppSense Privilege Management Demo Q & A Trusted Installers Application Admin Rights Discovery Web and Application Installation Application NAC License Management Selective Elevation Auditing Customer Challenges Business Value

3. Customer confidential 3 Customer Challenges Increased risk Lack of productivity High costs 24% higher cost (Gartner) Higher support cost Application compatibility Over licensing situations 24% higher cost (Gartner) Higher support cost Application compatibility Over licensing situations 97% higher risk (Verizon) Higher malware infection Overuse of admin rights Auditing/Compliance 97% higher risk (Verizon) Higher malware infection Overuse of admin rights Auditing/Compliance Limit users ability to change Inability to perform necessary actions Balance risk vs reward Limit users ability to change Inability to perform necessary actions Balance risk vs reward Source: Gartner, ID G00174099 http://www.verizonenterprise.com/resources/reports/rp_data-breach-investigations-report-2012- ebk_en_xg.pdf http://www.csoonline.com/article/726899/privilege-management-could-cut-breaches-if-it-were-used

4. Customer confidential 4 Business Value of Privilege Management Simple business case:  Up to 24% reduction in TCO  97% improvement in risk avoidance  Net increase in productivity Source: Gartner, ID G00174099 http://www.verizonenterprise.com/resources/reports/rp_data-breach-investigations-report-2012- ebk_en_xg.pdf http://www.csoonline.com/article/726899/privilege-management-could-cut-breaches-if-it-were-used So why does the graph rise again with higher cost the more you lockdown?

5. Customer confidential 5 Privilege Management Control application access and reduce license requirements Reduce risk and eliminate misuse of user privilege Lower desktop support costs by up to 24% Gartner: Save $1,278 per desktop per year* Meet regulatory compliance and governance requirements Benefit Identify applications requiring admin privileges Block malicious code from execution Central control of all privileges Manage device access and licensing Auditing/Reporting Capabilities

6. Customer confidential 6 Trusted Application Execution Explicitly allow or block applications Prevent unproductive desktop usage Block untrusted code/malware Java, Scripts, ActiveX and executables Requirement Static Application executable Trusted vendor (Signing cert) Hash and signature Path variables Time of day/schedule Dynamic Trusted Ownership Capabilities

7. Customer confidential 7 Application Admin Rights Discovery Provide IT insight into which applications require admin rights Policy Control to remove admin rights without causing disruption Allow apps to run without compromising least privilege Requirement Detect which applications require admin privileges Passive detection and reporting Analyze application data from multiple endpoints Convert discovery to rules Capabilities

8. Customer confidential 8 Web and Application Installation Users need to install web apps and regular apps: Web Conferencing, Adobe, Flash, Silverlight Anything from a particular trusted vendor Requirement Selectively allow approved applications to be installed Leverage prebuilt “snippets” Minimize app re-packaging and update costs Installation from network share Capabilities

9. Customer confidential Demo

10. Customer confidential 10 Application Network Access Control Control and limit 3 rd party contractors on site network access Report on access, by who, from what device & location Requirement Provides control based on user, not on PC based firewall Delivers per application control Regulatory compliance auditing of user access Limit what areas of the network a user or application can access Capabilities

11. Customer confidential 11 License Enforcement by Device Applications delivered via XenApp/RDSH require a license for every device that can potentially access the server Reduce over-licensing situations Control devices authorized to use the applicat ion Requirement Recognized by Microsoft® for enforcing device based licensing Application access defined by which devices are permitted Comply with licensing agreement based on number of devices Capabilities

12. Customer confidential Another Demo

13. Customer confidential 13 Selective Elevation Application requires elevation to run User requires elevation to access control panel applet Need to allow users to “self-elevate” with auditing Challenge / Response for users Requirement Remediate application compatibility issues – cannot run as “user” Transparently allow users to run as admin for selected capabilities Control child processes Real time User code to elevate Capabilities

14. Customer confidential 14 Auditing Monitor before enforcement begins Report on compliance once enforced Discover applications that require elevation Requirement Understand who is doing what in the environment Understand and monitor users before rule implementation Log activity for compliance audits Understand application operation functionality Capabilities

15. Customer confidential Yet Another Demo

16. Customer confidential 16 AppSense - Privilege Management  Maintain environment in desired state  Increased visibility into application landscape  Enforce licensing, ensure compliance  Reduces support calls  User acceptance

17. Customer confidential Thank you