[music] [music] [music] A quick introduction. My name is Simon Eperello. Uh I'm the SVP for AMIA region.
I've been at IBOS for over 10 years and uh seen a lot of um consolidation in the industry and that's certain certainly where IBOS play uh helping organizations uh modernize their security and and use new security techniques in line with things like zero zero trust uh projects and initiatives. So that's kind of where we fit that's where we fit in. We've been doing this for a long time.
Um the company's over 15 16 years old now. So um we started off in the secure web gateway um quadrant and the security domain um and now we've we've expanded our security capabilities uh to cover a lot of areas. So I'll cover all these areas and and and areas where we can really help organizations modernize.
So first of all, you know, we see some challenges out there um that that I think all enterprises, companies uh are challenged with today. Um certainly increasing complexity um where we've been building up our security stack where we've you know we perhaps you know if we go back 20 years we we had firewalls and they were doing most of the functionality for us but then we we needed other tools for visibility for control uh to stop malware to stop fishing threats uh to control um data sovereignty uh uh data loss um so we've been building up these these security capabilities, but that's that's definitely um led to increased complexity as well as governance and compliance. I I think whatever vertical you're working in with government, finance, healthcare, uh we're all under increasing uh regulative controls.
Um and we're expected to know um where our data resides, you know, if there's if there's any kind of issues. um and and putting good good things like threat prevention as well to protect our customers data. [snorts] Um we've definitely seen an escalation in risks.
Um the more recent one of course is AI. Uh AI is is good of course uh we use it in our company and in our product but it has brought a new attack vector. Um, so companies want to use I AI, but they want to use it in a in an ethical way and they want to use it in a safe way.
Um, and of course the bad actors out there are using AI uh to create new types of uh attacks and threats. Uh, and one of the things that we've seen, of course, is there's an escalation in in SAS applications out there that are being built with AI as well. So, and these applications, you know, are applications that we've never seen before.
We don't know if there's any threat around using them or storing data there. And of course, cost cost pressures. I think no matter what vertical we're in, um, we're all driven now to to reduce costs and consolidation is is is one of the ways of doing that, reducing the number of vendors that we use.
So IBOS are providing you know to meet these challenges a unified platform. Uh one of the things around Sassy is really cons consolidation. So rather than you know using a lot of different point solutions it's really about consolidating some of these legacy technologies that we've been using into a single platform.
And by doing that um it makes things less complex and just just by doing by doing that we we reduce risk because you know looking after multiple systems uh is hard uh and complexity can breed risk. So we cover everything. Um if any of you have seen the sassy wheel that that Gartner produced uh five or six years ago when they when they termed uh uh sassy and and the the other one is secure service edge which focuses on the security side um you'll know it covers a lot of security areas proxy DNS security data loss prevention CASBY VPN remote user access uh there's a and and and we cover all of these areas and and I'll dive into each one.
So, um yeah, uh web web something, you know, web security is something that IBOS have been doing for many years. Uh we we uh we have over 100 categories um to classify web traffic. Um we have crowdsource malware defense from many vendors uh including uh fishing command and control uh feeds to really you know help the security team control where our users are going to and you know just stop them from from going to anywhere bad from either fishing links or or or just you know just just misuse of the internet.
So we've been doing that for a long time. The new thing of course is AI. So Gen AI of course is is out there on the internet.
We want to have some visibility into that, some control uh and and that's been in our platform now for a few years. Network DLP again um something that um is part of Sassy very important piece. I think we're all concerned about things around you know what what is leaving our network what's leaving our endpoints where is our data and to have some control and visibility around that so it's embedded in our platform cloud access security broker CASB it's a technology that's been around for a long time it gives us visibility about what applications our users are using either either inside our network or or on the public internet so I think we're all using some kind of SAS application today.
Some organizations have gone completely cloud of course and they only use SAS applications. So, CASB gives us vis visibility, shows us any shadow IT use, but also gives us good control around how we're using those SAS applications as well. I'm going to drill into this, but we're now using AI to give us enhanced visibility in real time.
So where we're seeing new applications that perhaps built with AI that nobody's ever seen before, we're using AI to give us some risk classification around that uh around that application and the data as well. So I I'll dig into that. ZTNA I think is a very popular subject.
The VPN has been used 20 years, maybe more. um and it's done a good job at providing a method for remote users to access information and services on a private network, but it has been around a long time. Um it's probably definitely the main conduit for threats um things like ransomware getting into our network and uh there's now a better way.
So, so using ZTNA employ zero trust um principles and extra controls around controlling access and monitoring access for remote users. Something that can that that can enhance that is browser isolation. Uh browser isolation um is a way of really separating the user from the services and the data that they're that they might need to access or view.
Um it can be used in combination with ZTNA to gain access to private resources or it can be used for public SAS resources as well. But it's really used it's great it's a great use cases for uh people like contractors BYOD devices um and controlling access to like very highly confidential systems and data. And then um oh probably over a year ago now we also added uh SDWAN into our platform.
Uh this is a connectivity method of course that we're probably all fairly aware of now but this is it ZT uh zero trust SDWAN it's embedded in our platform the security is embedded into the connectivity um so our platform can now connect your locations together in a secure way. So, let's let's let's take a a quick look at these. Um, and real quickly, um, all of the technology that I'm about to talk about is IBOS technology.
It's it's all it's all built uh out of the US. It's where all our dev teams are. It is cloud first, but we do support on premise.
We support hybrid uh deployments. Uh definitely I think especially in your region um you know especially if you're working with government or maybe it's financial and you've got your own data center you know you you you may want us to be in your own data center or or located in in your sovereign region within your country's boundaries. So we can facilitate that but we do have our own cloud we have our own points of presence as well.
uh if you want to do full cloud, we do use AI uh both as a company internally uh but we use it in our product as well. We're using it to um help the security team um and and bring threats to the to the forefront and increase visibility around uh any kind of threat or data loss event. So let let's dig into each one of these areas.
Um we'll start with ZTNA um the VPN replacement and I start here because often if people are looking at modernization or you're going on that that zero trust journey because zero trust isn't a product as such it's it's really a set of principles it's it's the way you architect your network uh and and you will use products like ours um to create that architecture and many organizations they've got some form of uh zero trust architecture already. The VPN's a good place to start because um it's fairly easy to replace and um you you get you get a lot of risk reduction just from doing this one thing. So the problem with with VPN is um you you're really connecting these remote users to your network or your network to to the location where those remote users are.
And there's a lot of risk around that. you know, is that user who they say they are? Um, is their device in a in a good state?
Is it in a good security posture? And where are they? What kind of network are they on?
Is it a compromised network? Maybe they're in an airport and someone's running their own access point or a coffee shop. So um we we definitely see you know a lot of the threats that probably hit the news especially things around ransomware the VPN's been being the chief uh conduit and you know a lot of times we we'll give contractors or uh people with their own device VPN access we've just got no idea um you know really who that user is.
It's hard to guarantee their identity. We don't know where they are. we don't know what device they're using.
So, so ZTNA um will help with uh this this challenge and and lower the risk around remote user access. So, we use you know modern uh techniques to you know to identify users. So we integrate with modern identification authentication IDPS things like uh SAML any kind of SL provider but octa ping Microsoft the calls Microsoft Entra or if you're still running AD uh we can integrate with that as well um we'll also do things like posture checks uh are they using MFA what country are they in what time of day is it uh what's the what's the state of their endpoint do they have disk encryption enabled are they running AV there's multiple way there's multiple kind of gates that you can set before you allow the user to connect and then when they do connect rather than you know like a VPN allowing that user into the network where even if you you know you use segmentation you've got this problem about lateral movement and and once they're in the network and if there's something bad on their endpoint it can get into the network and then it can do reconnaissance and do lateral movement.
Uh the idea of ZTNA is lease privilege access, right? So so when when you set up your ZTNA policies, you only allow access to the systems that that user um uh users identity should have access to. And not only that, we're going to broker that connection for our clouds.
They're going to go to our cloud first. We're going to do all of the posture checks. We're going to do all the checks.
And then every single time they connect, we're going to rerun those checks before they before they access that application. So it's almost like streaming the application to the end user without letting them directly onto the network. If we do see any threats, we can take immediate dynamic action to contain that threat, quarantine that device, block that device, and of course send real-time email alerts.
So ZTNA is a great place to start. Um, there's still a lot of legacy VPNs out there. Um, it's very easy and quick to replace and you can really you can really lower your p your risk profile.
I probably covered all these. I've skipped ahead in my my slides a little bit. Uh, but certainly from a user experience and visibility perspective, um, the user experience is seamless.
It's effectively always on. Um but we we know when they're accessing a private resource because our cloud does the routting. We know where those um private resources are whether it's network based or applicationbased and all the information goes to our cloud and then we'll just route it in the right way.
So as far as the users concerned there's no turning on and off VPNs. all the traffic goes to our cloud anyway and we'll just connect them to the service. From a visibility point of view, um we really treat a private resource and a public resource the same way.
The we we run the same checks, the malware, the DP, and we audit everything in our logs. So every time they access an internal resource, it's going to go into our audit logs just like it would if they were accessing an internet resource or a public SAS resource. You get a lot more visibility.
Okay. Uh just in the interest of time, I'll go through this quite quick. So let me let me let me let me talk about CASBY.
So So you know we can enable remote user access. Remote users can access the internet securely as well. Users inside the office, we don't treat them any differently, right?
Everybody goes to our cloud, everybody gets the same security posture wherever they are on any device. Now, if you if you imagine us as the um security edge or your security stack in the cloud, right, it doesn't matter where where where your users are, they're all going to go through the same security edge. CASB is now giving you the ability and extra visibility about any kind of access to any kind of internal resource or public resource, internet resource, public SAS resource.
And the way vendors used to do this around, you know, um is this is this a good resource to access is they used to build up cataloges of of applications. And there's always been a lot. There's tens of thousands, maybe hundreds of thousands.
But that that number of applications is growing exponentially because of AI. We now have this concept of zero day applications. Uh because people are using AI to build applications and you know you can't catalog them.
You can't keep up um you know risk scoring every single app. So we've we've used AI and we've developed uh AI powered CASB to do this in real time. So we use AI, we use a lot of indicators, we go out, we look at the app, we look at the history around the app, we look at things like who is information, how long's this app been on the internet for, how long's the domain been there for, what country is it located in, has there been any risk reports.
there's a lot of information we can gather and we do something called dual risk scoring. We give her a risk score around that you know is this app safe to use in general and then we give her another score about you know is it safe to to store data there um perhaps you know uh the application is a popular application uh but perhaps they've had some security incidents in the past and that will affect the data risk score. So this is real time.
It will discover any new application and it will give you a lot of visibility into um what applications your users are using. It will highlight any kind of shadow IT use. Is someone using Drpbox when they should be using the company uh SharePoint uh tenant and things like that.
Okay, we'll move on to DLP. Um definitely in highly regulated organizations, organizations dealing with customer data, employee data, um perhaps they've got their own highly confidential information. Uh DLP is a great tool um around controlling data movement.
So we are um what's known as an inline DLP. We look at data movement going for our security edge. um as it happens.
Um you we have inbuilt patterns to look for things like uh uh uh personal identifiable information, credit card information, but you can build your own. You can build your own patterns to look for perhaps you have your own, you know, customer naming scheme. Perhaps if you're in FSI, you know, you have your own customer numbers, account numbers, but you can pretty much it's a very flexible engine.
We use this in very large uh financial institutions. Um it has advanced features like exact data match document label integration with things like Balden James and Microsoft's MIP as well for document labeling. Okay.
So the web and AI protection I think we've all been doing some kind of web filtering for a long time. Uh malware malware defense and fishing defense is an important part of that. Um also what comes into play here is monitoring for any kind of um commander control signals.
Uh but not just monitoring web traffic but also monitoring DNS traffic as well. All of this happens on our platform. Um and again getting back to the new threat vector uh which is Gen AI.
Um we've now got this new internet traffic as well. Um and we we want to use it. We want to stay competitive as an organization.
We want to use AI. We we want to foster safe usage of it and we want to monitor it. How are our employees using it?
And also if they upload anything to a genai engine, is it safe and uh does it contain any uh confidential information? So, so our platform will audit uh the full conversation. Um it will uh do mail and DLP protection as well.
Um those engines are built into our uh our platform. Again, every everything happens in a single security edge. We decrypt everything.
We analyze it, malware, DLP, and we'll we'll audit everything, including the actual AI conversation. So, you can actually see what your users are asking. Gen AI, you can control what AI engines they're using and you can protect against data loss because we'll if they upload any kind of file, PDF, word document, spreadsheet, we'll actually we'll actually decrypt that and look at the content and and make sure there's nothing confidential in there uh that's going to these the these large large language models.
As a few of the engines um we're adding on this all the time. We actually started off with chat GPT um 18 months ago or so. It wasn't definitely at the time the most popular, but of course we've seen many others uh that companies want to use um and we're adding to this all of the time.
Okay, real quick. Uh browser isolation. Um think of it as a sandbox.
Um people talk about um enterprise browsers and browser isolation really achieving the same thing. The difference is with enterprise browsers of course you got to push them out. Everybody's got to install them.
They have compatibility issues. Browser isolation there is there is no um agent to push out. It's very useful for contractors unmanaged devices.
It uses uh pixel rendering. So we give anybody going for an isolated session really a picture of uh the page they're trying to look at. um you know they can still enter text, they can still move the mouse, they can upload, download, but only if you allow them to.
You have full control of the session, everything's audited. Um and it's a great way of reducing risk for any kind of contractors, unmanaged devices. And this also works with ZTNA.
So it can also give um these remote users access to internal resources. So you can use this anywhere. So it's a great way of reducing risk.
Okay. Um last bit uh SDWAN um we've been doing this uh for a couple of years. Um so you know everything I've spoken about so far is really kind of in the cyber security domain.
Um securing information data and users SDWAN is a connectivity method. Uh the difference with our SDWAN is it's ingrained in our platform. So we connect sites together securely and we can either do that purely from the cloud or we can do it with with hardware.
We have different form factors for the hardware. For small branch offices that SE170 is just a small uh like modem size device one U 4U depends on the size of the site how much throughput you need. This is ingrained in our platform and it will enable you to connect your offices together in a secure fashion with full auditing as well.
of and it's very cost- effective because it's built into our platform. It's not a separate solution because we've definitely seen in this area uh vendors doing things like uh bandwidth searchcharging if it goes through their cloud where where your bills can change every month. But this is um fixed price monthly pricing uh includes the hardware or you can do it in the cloud and uh very easy to configure as well.
It's it's all APIdriven. you just you just do it from our central console. So um you know these are our pillars.
I'll just I'll just skip on in the interest of time. Just got a few minutes left. You know these are our pillars.
Advanced threat protection, malware, fishing, content analysis, DLP. Um all of these things fit together. It's a very it's a very um intuitive cloud-based administration console where we've brought many technologies together and you can orchestrate them, view them and administrate them all in one place.
>> Uh thank you Simon. Perfect uh timing. We [clears throat] have couple of questions uh interesting questions and hoping uh you can answer them without getting into half an hour discussion.
[laughter] >> I'll try. >> Let's try that. So uh again um very good question about uh as we started replacing VPN.
Uh so uh the question is what's the cleanest path to DNA without breaking legacy apps and maybe you know about common pitfall. >> Yeah. Yeah.
and and and and we've seen it right when when we first started doing this. And actually, you can deploy ZTNA in in a couple of different ways, but we actually do support um a method that we have an we have an endpoint um agent that goes on the endpoint Chromebooks, Windows devices, Macs, iOS, Androids. uh and that will actually create a full tunnel into your private network and it will support any protocol.
Um it works in a similar way to a VPN, but you've got all of the zero trust um techniques on top of that around posture checking, identif uh modern authentication with IDPS and then once they're on there, we'll actually support any any protocol. So even old things like SMB, NTLM, Cobar will work over that connectivity method. So once you've got our once you deploy our agent, which you can use any mass deployment tool like in tune or or group policy once it's out there uh you create your policy about what applications they can access and we'll support any protocol.
>> Thank you. Uh how about third parties and contractors? How do c customers handle those with your solution?
Uh do they typically on board them into the same policies or some kind of isolation separate access pass? >> Yeah, normally normally different a different policy that's probably a lot more defined. So you know if a contractor needs access to a certain server via RDP or they need access to a certain web application perhaps ordering system >> they would normally use uh RBI that contractor doesn't need any to install anything it's just a a URL >> uh browser isolation yeah >> browser isolation yeah sorry yeah RBI is the acronym remote browser isolation yeah uh it gives you full control everything's audited and they only access the system they're allowed to and you have full control about uploads, downloads, copy paste, you control their session.
>> Understood. And the last question uh I think we have maybe managed service providers here. Uh so u kind of understood that your solution is more of a enterprisegrade solution.
Uh but uh is it uh do you have a kind of a workflow for MSPs? >> We do. We do.
It's fairly new. We just brought it out in Q4 last year. >> So it's the same technology.
It's the same platform. You can give your your SMB mid-market customers the same experience that a tier one bank's using, but we support commercials that MSPs need. things like monthly billing, things like single invoicing and pool licensing.
It's available now. >> Oh, great. So, we will follow up on this.
Okay. Thank you, Simon. And and Victoria is here also from from your side.
So, thank you very much. Perfect timing. And uh see you next time.
>> See you next time. Look [music] forward to it. Thank you everyone.
