i7 networks

Copyright i7 Networks, i7nw.com

Welcome to “Me” Enterprise

How BYOD has changed the security map and how “Peregrine 7” helps tackle it?


Manjunath M GowdaCEO, i7 NetworksBangalore, India

manju_s7in/manjunathgowda/

http://in.linkedin.com/in/manjunathgowda/

WHY BYOD matters?


• 90% of enterprises will use personal devices in Enterprise by 2014 - Gartner

• 20% Savings: CISCO claimed due to BYOD & declared: “We don’t pay for it, and our users are happier.”

• Survey: Enterprises that don't support BYOD are at competitive disadvantage


So what is stopping them?


75% CIOs said Compliance & Security biggest challenge in allowing BYOD


DARK READING – July 2013



62% - Loss of a device that has Sensitive Data – (MDMs solve this)

61% - An infected personal device connecting to the Corporate Network

Business overview


79% business had a mobile incident last year alone – Checkpoint

600%+ growth in mobile malware in last 2 years

20 Mn+ devices jailbroken in just two months (Jan 2013)

18 Mn infected Android devices by end of 2013

71% mobile devices have OS / application vulnerabilities


$500K+ cost per such incident

$1.5Mn cost per such settlement


Why traditional tools can’t help here?


• Perimeter security and not for inside-inside or inside-out threats

• Used to IT-owned devices and not personal devices (agented)

• Used to take care of outside2inside threats


So what tools do exist to solve it?


15 Copyright i7 Networks, i7nw.com

MDMs, EPPAirwatch, MobileIron, Zenprise

MAMsBitzer, IBM, SAP, Good

MDPsAT&T toggle, Divide,

VMware

MNACi7Networks

Device level

network

Mobile Security Tools Quadrant

Server side

Our value proposition


“We protect your network from malicious/infected BYODs”


“We Protect the Enterprise Network” by

-Detect & Fingerprint1 all personal devices

-Prevent the malicious devices from connecting

-100% Agentless (Zero-touch)

-Zero-Latency Deployment

-Provide detailed Compliance Reports

“To Know & To Protect”

1 Secure detection & fingerprinting (US patent pending)


• Name

• Screen caps

• Demo

PeregrineGuardTM

i7 Networks; i7 Confidential

Not just phones,we support all wireless devices.

Continuous Monitoring

Complete Visibility Complete Visibility

Endpoint Authentication Endpoint Authentication

Vulnerability and malicious assessment

Vulnerability and malicious assessment

Granular policy enforcement

Granular policy enforcement

Compliance ReportingCompliance Reporting

Entry Verification – Corporate Wi-Fi or

VPN?

Entry Verification – Corporate Wi-Fi or

VPN?

Allow

Deny

Compromised /Jailbroken/ Unauthorized/Unmanaged

check

Compromised /Jailbroken/ Unauthorized/Unmanaged

check

Deny

Deny

Personal Devices

the questions we answer



• What devices are getting into the corporate network?

• Who do they belong to?• Are they infected? • Are they compromised or malicious?• How vulnerable are they?• What are they accessing?• What apps* are they running?• Can I control the access?• Can I get Compliance audit reports?

How do you deploy?


• 100% agentless and non-intrusive – Zero Touch

• Complete off-line deployment – Zero-Latency

• Just ONE probe* in the network

• Supports: Corporate Wi-Fi/ Public Wi-Fi/3G/4G/LTE

Deployment

i7 Networks; i7 Confidential

- Microsoft AD, RADIUS and LDAP

- Microsoft Exchange

- Maas 360 MDM

- Microsoft System Center*

- IBM Tivoli*

- Cisco/Juniper and Fortinet VPN

- Snort IDS

- CVE database

Integrates with

Why “Agentless” is Sweet?


14 different OS types & growing; Add versions and models5

45% enterprises have more than 5 times as many BYOD as they had 2 years ago3

3.5 – Average number of devices per Employee

42% - Average churn of devices per year among enterprise employees

< 10% enterprises aware of all mobile devices accessing their network & servers3

27% of devices are ‘approved’ by the company6


So what’s unique?


4A (Attributes)

Discovery & FingerprintingHealth CheckDiscover Apps on the wire*,Policy Enforcement

4A (Attributes)

Discovery & FingerprintingHealth CheckDiscover Apps on the wire*,Policy Enforcement

4D (Deployments)

100% Agentless (Zero-touch), ZERO-Latency SINGLE Probe,Wi-Fi/3G/4G/LTE

4D (Deployments)

100% Agentless (Zero-touch), ZERO-Latency SINGLE Probe,Wi-Fi/3G/4G/LTE

4T (Threat-Protections)

Malicious & Intrusion PreventionZero-day Attack Prevention*,Vulnerability CheckCheck of anti-malware s/w

4T (Threat-Protections)

Malicious & Intrusion PreventionZero-day Attack Prevention*,Vulnerability CheckCheck of anti-malware s/w

4K (Keywords)

100% AgentlessPatent-Pending AlgorithmsDetailed FingerprintingZero-Latency

4K (Keywords)

100% AgentlessPatent-Pending AlgorithmsDetailed FingerprintingZero-Latency

Available as : Appliance / Virtual Appliance

Available as : Appliance / Virtual Appliance

What is that you do MDM cannot?


oCannot do Discovery and fingerprint of all devices Authorized

Unauthorized

Unmanaged

Non-mobile devices like e-Readers, Wi-Fi watches, Gaming devices, Healthcare devices etc.


oMalware detection via signature is only 28%; Cannot catch malicious traffic @ network layer (not even at device layer)

oCannot do Access control based on device attributes

oCannot enforce different access rules for different departments/ LoBsCopyright i7 Networks, i7nw.com

oHot-spotting/Mac-spoofing cannot be detected

oFails where you are not allowed to install a client on the device due to privacy or compliance

oNot dynamic (need to stop iOS6.1?)


How different are you from a traditional nac?


Support all: Wi-Fi & 3G/4G/LTE 100% Zero Touch (agentless) Zero Latency (offline) (still we control) Just ONE probe Fits into any network infrastructure

Support all: Wi-Fi & 3G/4G/LTE 100% Zero Touch (agentless) Zero Latency (offline) (still we control) Just ONE probe Fits into any network infrastructure

US Patent-pending fingerprinting algorithm

Mac-spoofing/Hot spotting DVItm (Device Vulnerability Index) Detecting apps on the wire (dropbox)

US Patent-pending fingerprinting algorithm

Mac-spoofing/Hot spotting DVItm (Device Vulnerability Index) Detecting apps on the wire (dropbox)

Completely focused on BYOD Security

Completely focused on BYOD Security

Product Road Map?


• Recognition of all Apps on the Wire• Detection of EPP (End Point Protection)

tools• Chaining of P7s• Integrations into System Center and Tivoli• Integrations into MDMs• mNAC in the cloud to detect cloud access


The TEAM


JeffHunter

Evangelist

PeterGilsonCTO

FirstLastCFO

JackFranklin

CMO

HeatherAdlerCEO

Investors & Advisors

1st venture: $8.4M by Bluecoat (2010)Team together for second timeStarted June 12’ Product start Jan 13’

Questions?


[email protected]_s7

i7 networks - presentation at zensar #techshowcase - an ispirt productnation initiative

Business

vulnerability

spoofinghot

copyright

day attack

device vulnerability

latency single

intrusion