Aterrizando GDPR/RGPD

Transcripción

1 Aterrizando GDPR/RGPD Rubén Aparicio RAM Fortinet Mayo 2018 Copyright Fortinet Inc. All rights reserved.

2 Algunos datos 2

3 Están las empresas preparadas? 3

4 El Valor de los Datos 4

5 Notificación de incidentes 5

6 Notificación de incidentes 6

7 Notificación de incidentes 7

8 Notificación de incidentes 8

9 El reto 9

10 UN TRABAJO EN EQUIPO SECURITY FABRIC 10

11 FORTINET SECURITY FABRIC 2018 PARTNER API MANAGEMENT- ANALYTICS MULTI- CLOUD 2018 IOT- ENDPOINT WEB APPS NETWORK UNIFIED ACCESS BROAD ADVANCED THREAT PROTECTION A Security Architecture that is: INTEGRATED AUTOMATED Provides Visibility and Protection Across the Entire Digital Attack Surface Multiple Technologies Working Together for the Detection of Advanced Threats Embedded Intelligence for Automatic Response & Continuous Trust Assessment 11

12 Introducing The Fabric 8 Network Security Multi-Cloud Security Endpoint Security Security Web Application Security Secure Unified Access Advanced Threat Protection Management & Analytics Multi IoT Web Unified Advanced Management Cloud Endpoint Applications Access Threat Protection Analytics FortiGate Enterprise Firewall FortiGate Virtual Firewall Network Security FortiClient EPP FortiMail Secure Gateway FortiWeb Web Application Firewall FortiAP Wireless Infrastructure FortiSandbox Advanced Threat Protection FortiAnalyzer Central Logging /Reporting FortiGate Cloud Firewall Network Security FortiSwitch Switching Infrastructure FortiManager Central Security Management FortiSIEM Security Information & Event Management 12

13 Cual es el punto fuerte de Fortinet? El fabricante de seguridad con mayor número de unidades vendidas 13

14 QUE PUEDO PROTEGER EN MI ORGANIZACION? 14

15 SEGURIDAD EN DATACENTER 15

16 Solución completa para Datacenter FortiGate FortiAnalyzer FortiMail FortiWeb FortiSandbox FortiADC FortiDDoS Protección Visibilidad Seguridad TODA Escalable Autoaprendizaje protección unificada tráfico el correo Norte frente - Sur aplicaciones Rendimiento» Spam Mínima Reporting a amenazas Remediación latencia avanzadas web. < 2s APTs» Phishing unificada El Gestión Disponibilidad Solución» mejor ATPs de en 100% alertas DC IPS y NSS Labs Seguridad eventos hardware accionable en capa aplicación FortiGuard Web Server 2 Web Server 1 Web Server 3 Un fabricante Seguridad Integrada Mail Server Sólo con Fortinet Data Center Security AppSec 16

17 Visibilidad - Fortinet Security Fabric 17

18 Visibilidad ante una brecha de seguridad 18

19 SEGURIDAD EN SEDES REMOTAS 19

20 Empresa con Sedes Remotas FortiGate Central» Visibilidad en tiempo real unificada» Punto central FortiGate sedes remotas» Acceso seguro a internet» Conectividad con sede central FortiManager» Configuración y políticas centralizadas FortiAnalyzer» Visibilidad y reporting centralizados FortiAP y FortiSwitch» Acceso a la red seguro FortiSandbox» Protección frente a amenazas avanzadas o APTs. 20

21 Visibilidad Management & Visibility FortiManager (Monitor) 21

22 SEGURIDAD EN ENTORNO INDUSTRIAL 22

23 Best Practice 1: Segmentation and Encrypted Communication Network Segmentation/Segregation * FortiGate Device» SPU = Low latency» L4 FW, IPS, AV (+FSA) Segmentation and Encrypted Communication (FortiGate) Valve Fan Pump * IEC recommends creating secure areas = Network Segmentation/MicroSegmentation 23

24 Best Practice 2: Access Control Segmentation and Encrypted Communication (FortiGate) Role Based Access Control Users, Devices, Applications and Protocols (FortiGate and FortiAuthenticator) Valve Fan Pump 24

25 Best Practice 3: Secure Wired and Wireless Access Segmentation and Encrypted Communication (FortiGate) Role Based Access Control Users, Devices, Applications and Protocols (FortiGate and FortiAuthenticator) Enable Secure Wired and Wireless Access (FortiAP, FortiSwitch) Valve Fan Pump 25

26 Best Practice 4: Vulnerability and Patch Management Segmentation and Encrypted Communication (FortiGate) Access Control Users, Devices, Applications and Protocols (FortiGate and FortiAuthenticator) Secure Access (FortiSwitch/FortiAP/FortiExtender) Vulnerability and Patch Management (FortiWeb, FortiClient and FortiGate) Valve Fan Pump 26

27 Best Practice 5: Visibility, behavioral Analytics, tracking and simplicity Segmentation and Encrypted Communication (FortiGate) Access Control Users, Devices, Applications and Protocols (FortiGate and FortiAuthenticator) Secure Access (FortiSwitch/FortiAP/FortiExtender) Vulnerability and Patch Management (FortiWeb, FortiClient and FortiGate) Valve Fan Visibility, behavioral Analytic, tracking and simplicity: (Fortisiem, FAZ, Nozomi, FortiClient, Fortiswitch, FortiAP and FortiGate) Pump 27

28