© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 1 © 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 1

Cisco Security: Moving to Security Everywhere

Stefano Volpi

13-10-2015

#TIGcyberSec

© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 2

Q2 FY15 Earnings Call

February 11, 2015

John Chambers

CEO, Cisco

I expect security to grow very

healthily as we move forward. And

you will continue to see us make a

number of resource investments in

areas like services, sales, and

consultancy in a way that really

brings this picture to life. I think

you’re going to see good growth

out of our security business. . .we

are positioned really well.

“

”

Cisco is All In with Security

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3

Cisco Confidential 3 © 2013-2014 Cisco and/or its affiliates. All rights reserved.

In the news: Feb 2013 Today

Cisco Confidential 3 ©2014 Cisco and/or its affiliates. All rights reserved.

Global Security Sales Organization

6000+

© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 4

Talos Group: Threats by the Numbers

7399 Common Vulnerabilities and Exposure (CVE) Entries in 2013 a

10% increase from 2012

1,100,000 Incoming Malware Samples Per Day, Increasing Daily

4.2 Billion Web Filtering Blocks Per Day

1 Billion Sender Base Reputation Queries Per Day

© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 5

The Security Problem

Changing

Business Models

Dynamic

Threat Landscape

Complexity

and Fragmentation

© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 6

Silos Create Security Gaps

W W W

Context- Aware

Functions

IPS Functions

Malware Functions

VPN Functions

Traditional Firewall

Functions

© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 7

Increases Visibility Accelerates Detection Scales Enforcement

Synergies Through Integration

The Network and Security

© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 8

Advisory Integration Managed

Custom Threat

Intelligence

Technical Security

Assessments

Integration

Services

Security Optimization

Services

Managed Threat

Defense

Remote Managed

Services

Security Services

© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 9

Strategic Imperatives

Network-Integrated,

Broad Sensor Base,

Context and Automation

Continuous Advanced Threat

Protection, Cloud-Based

Security Intelligence

Agile and Open Platforms,

Built for Scale, Consistent

Control, Management

Endpoint Network Mobile Virtual Cloud

Visibility-Driven Threat-Focused Platform-Based

© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 10

Mapping Technologies to the Model

Security Services

Firewall

App Control

VPN

Patch Mgmt

Vuln Mgmt

IAM/NAC

IPS

Antivirus

Email/Web

IDS

FPC

Forensics

AMD

Log Mgmt

SIEM

Attack Continuum

Discover Enforce Harden

Detect Block

Defend

Scope Contain

Remediate

© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 11

Comprehensive Security Product Portfolio

IPS & NGIPS

• Cisco IPS 4300 Series

• Cisco ASA 5500-X Series integrated IPS

• FirePOWER NGIPS

• FirePOWER NGIPS w/ Application Control

• FirePOWER Virtual NGIPS

NAC + Identity Services

• Cisco Identity Services Engine (ISE)

• Cisco Access Control Server (ACS)

Email Security

• Cisco Email Security Appliance (ESA)

• Cisco Virtual Email Security Appliance (vESA)

• Cisco Cloud Email Security

Web Security

• Cisco Web Security Appliance (WSA)

• Cisco Virtual Web Security Appliance (vWSA)

• Cisco Cloud Web Security

UTM

• Meraki MX

Advanced Malware Protection

• AMP for Networks

• AMP for Endpoints

• AMP for Private Cloud / Virtual Appliance

VPN

• Cisco AnyConnect VPN

Firewall & NGFW

• Cisco ASA 5500-X Series

• Cisco ASA 5500-X w/ NGFW

license

• Cisco ASA 5585-X w/ NGFW blade

• Cisco ASA with FirePOWER Services

© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 12

BEFORE Discover

Enforce

Harden

AFTER Scope

Contain

Remediate

Detect

Block

Defend

DURING

Network as a Sensor Network as an Enforcer

Next Generation Firewall

VPN + AnyConnect

Web / Email Security (cloud)

Next Generation IPS

Advanced Malware Protection

Web / Email Security (cloud)

Advanced Malware Protection

pxGrid

APIC-EM

© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Public 13

Branch Campus Edge Operational

Technology

Cloud Data

Center

Services

Endpoint

Security Everywhere

Cisco Confidential – For Internal Use

Only