Microsegmentation for enterprise data centers
Download as PDF, PPTX2 likes286 views
The document discusses the need for modern security solutions in dynamic data center environments, emphasizing the ineffectiveness of traditional perimeter security against sophisticated cyber threats. It advocates for micro-segmentation as a proactive security measure to protect data center assets by segmenting networks down to individual hosts and reducing the attack surface. The text outlines various approaches to implementing micro-segmentation, with a focus on the advantages of host-based micro-segmentation provided by the Colortokens platform.
![THANK YOU
Micro-Segmentation in 3 Easy Steps [Video]
See a Live Demo
Got Questions?
For more information about the ColorTokens
solution email us at sales@colortokens.com
Call +1 (408) 341-6030 to speak to a
ColorTokens security specialist.](https://image.slidesharecdn.com/microsegmentationforenterprisedatacenters-181231120745/85/Microsegmentation-for-enterprise-data-centers-17-320.jpg)
More Related Content
Similar to Microsegmentation for enterprise data centers (20)
![Strategic Picks — Prioritising the Right Agentic Use Cases [2/6]](https://cdn.slidesharecdn.com/ss_thumbnails/session-2-250902135931-4c97717a-thumbnail.jpg?width=560&fit=bounds)
Microsegmentation for enterprise data centers
- 1. Zero Trust Security. Implemented. Micro-Segmentation For Enterprise Data Centers © 2019 ColorTokens
- 2. Traditional Data Center Protection © 2019 ColorTokens, Inc | 2 To protect the data center, we use several security products, from several vendors, at different layers of the OSI model.
- 3. Traditional Security is Rigid, Reactive and Complex >75% of data center traffic – East-West • Perimeter security is no more SECURE – Attackers and attacks happening inside the data center • Reactive security doesn’t help – Antivirus solutions playing catchup with sophisticated attacks (zero-day, APTs) E W N S Bare-metal Hypervisors Cloud Containers Data center evolution Microservices | 3
- 4. Data Centers of Today and Tomorrow • Dynamic application environments – Changing testing, development & staging environments – Changing data access policies among these environments | 4 Users Web Server App Server DB Development Web Server App Server DB Testing Web Server App Server DB Staging Users
- 5. Data Centers of Today and Tomorrow • Dynamic workloads – Dynamic provisioning of Web, App or DB servers in an application environment – Changing resource access policies | 5 Web Server App Server DB App Server DB Security Policies Security Policies
- 6. Data Centers of Today and Tomorrow • Dynamic users – User access from within the office – User access from outside the office – Vendor/contractor accesses | 6 Web Server App Server DB App. 1 Web Server App Server DB App. 2 Office Users Mobile Users Vendor/Contractor
- 7. Data Centers of Today and Tomorrow • Hybrid Data Center – Application environments on the cloud and on-premise – Dynamic resource access policies | 7 Web Server App Server DB Development Web Server App Server DB Testing Office users Mobile users Web Server App Server DB Cloud Resource Access Policies
- 8. | 8 Are no longer monolithic Are spread across multiple locations Have dynamic workloads created, deleted/migrated across clouds In short, modern data centers: Your data center can no longer be built around rigid security solutions Maintaining consistent security policies in hybrid environments is a challenge Increases the attack surface - risk and exposure to data theft Accomplishing compliance is painful Because: Data Centers of Today and Tomorrow
- 9. And, Hackers Know Rigid, Traditional Security is Ineffective | 9 Web Server App Server DB Development Web Server App Server DB Testing Web Server App Server DB Cloud Office Users Mobile Users Vendor/Contractor
- 10. The Solution? Data Center Micro-Segmentation! | 10 Proper ‘segmentation’ to protect data center assets One of the golden rules in security Foundation for compliance standards and security best practices! With the increase in frequency and sophistication of cyber- attacks such as ransomware and data exfiltration, enterprises are starting to adopt micro-segmentation as a key defense: - To segment the network down to individual hosts, and - Reduce the attack surface
- 11. Different Approaches to Data Center Micro-Segmentation? | 11 Network-based Hypervisor-based Host-based Most common micro-segmentation techniques
- 12. Network-Based Micro-Segmentation | 12 - Most of the network teams are familiar with implementation as it’s been around for a while - Firewall rules are managed and enforced outside the workloads or hypervisor - Leverages perimeter firewall for both N/S and E/W traffic Pros Cons - Network centric approach - one can end up creating macro- segmentation, increasing the attack surface - Difficult to have fine grained/micro policies at the workload level - Policies are not agile when the workloads move - Thousands of ACLs/firewall rules become cumbersome in dynamic environments - Can become very expensive with security inspection - $$$ in public cloud implementations - cost of firewall + cost of running multiple VMs to support firewall function (minimum 2 for HA) - Performance impact due to additional gateway bottlenecks
- 13. Hypervisor-Based Micro-Segmentation | 13 - Programmable overlay networks and policies - Policies are enforced outside the workload on the hypervisor itself - Agility to move policies along with workloads Pros Cons - No support for bare metal /physical workloads - Hypervisor and vendor specific - lock-in - Limited or no support to public cloud environment - No support for container workloads - Lack of process visibility - Performance impact (CPU impact natively on the hypervisor) - Number of policies supported by hypervisor
- 14. Host-Based Micro-Segmentation | 14 - Completely independent of infrastructure/hypervisors - Works across multi-vendor OS environments - Works seamlessly across dynamic, distributed environments - Independent of network changes (deploy one VM or thousands in minutes) - Policy agility along with the workloads - Granular context awareness and visibility on every workload - Insights into processes running on every workload to address issues like dynamic port range, etc. - Built around zero trust Pros Cons - Need to install an agent on every host
- 15. Host-Based Micro-Segmentation | 15 ColorTokens provides a paradigm shift in enterprise IT security. ColorTokens is platform-independent and enables enterprises to shift from reactive to a proactive security model, without additional investment in hardware and operational complexities.
- 16. ColorTokens Proactive Security for Hybrid Data Centers | 16 Web Server App Server DB Development Web Server App Server DB Testing Web Server App Server DB Cloud Office Outside Vendor/Contractor X X Micro-segmentation Visibility Process level security
- 17. THANK YOU Micro-Segmentation in 3 Easy Steps [Video] See a Live Demo Got Questions? For more information about the ColorTokens solution email us at [email protected] Call +1 (408) 341-6030 to speak to a ColorTokens security specialist.