Presentation is loading. Please wait.

Presentation is loading. Please wait.

Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 1 Cloud Web Security Update.

Similar presentations


Presentation on theme: "Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 1 Cloud Web Security Update."— Presentation transcript:

1 Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 1 Cloud Web Security Update

2 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2

3 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3 At the end of the session, the participants should be able to: Articulate the strategy of the product Speak to the upcoming feature sets Understand the deployment mechanism Defend against competitive talking points

4 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4 5 beta customers with100% functional coverage Included strategic partners BT, CDW and key customers like Nike ASA with ScanSafe is brilliant - BT 3 customers tested the code in production Easy configuration and setup Management across two platforms Documentation clarity Configuration with the new identity mechanism via IDFW not fully stressed

5 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5 ASA PlatformNumber of Users X X X , X1, , X3, X SSP10 – 5585-X SSP607,500

6 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6 IronPort / ScanSafe Pricebook with Multiple Buying Options Silo-ed Development of Features Perceived Product Complexity GPL Availability – May 2013 Convergence of Features within Web Security Portfolio Fewer deployment options, auto provisioning and configuration Cloud Web Security ISR G2 ASA AnyConnect WebSecurity WSA Connector PLATFORMS SERVICE

7 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7 Time varies from 3 days to weeks OrderVerification Provision & Capacity Deployment Service Enabled Specialized sales or CSE engagement Need details on customers network (IP, breakouts etc.) Order verified; if information is incomplete sent back to customer via partner Portal provisioned and capacity allocated manually (towers, proxy etc.) TAM engages with customer to deploy CWS Can be time- consuming if network is complicated or poor sales qualification Manual activation process not conducive to Cisco and partner-led sale Automated order-deployment process is key to higher attach

8 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8 Business Ops Minimize touch points, integrate with GPL Order & Quoting Eliminate non- essential or double-entry of data Create a single source of truth for customer data Portal 2.0 Faster, smarter and flexible. Rebrand to Cisco Ease-of-use Reduce CS overhead, enhance customer experience On-going Service Rebrand to Cisco Element of self diagnosis in the portal Category checker, notifications, exception management Open support tickets via portal, automated error report Simplified portal for reporting and policy, flexibility in design and customization Create a full Cisco kit for the datacenter; economies of scale Next Gen Tower Leverage UCS for scalability and cost savings Infrastructure Customers not tied to a tower; dynamically move customers Reduce manual steps in capacity allocation Smart Connector Self-deploying proxy Automatically configured ASA/ISR; reduce dependencies on the proxy Reduce the number of supported deployment mechanisms Deployment

9 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9 Network Attach Enterprise Features Simplification Security Services Convergence

10 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10 Network Attach Enterprise Features Simplification Security Services Convergence Next Gen Tower Smart Connector CS tools

11 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11 Network Storage Compute 20 Gbps capable fully redundant network stack (2nd IP transit provider) and auto geo site DR Internet scale router for full upstream connectivity Peering capability Virtualization layer (VMware) on scalable Cisco UCS hardware Proxy services: Thousands of VMs securing customer traffic Management services + Logging | Reporting | Monitoring | Debugging Future services + Room for product evolution and completely new products on same hardware SAN Based Fast | Flexible | Scalable storage Highly available

12 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12 Smart Connector FeaturesSupportMonitoringInformationUser DetailsOne format Configuration Auto Provisioning IdentityException End customer experience should reflect that of AnyConnect WebSecurity

13 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13

14 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14 RankBucketFeaturePriority 1Web Filtering Tools Recat Checker / SubmitEssential Policy Import / Backup Essential 2Customer Notification Ability to create notifications & allow customers to select how to receive the notification Essential 3Service Status Page Connector Status Essential Tower Status Essential Latency Monitoring tool Essential 4Customer Troubleshooting Website checker High ScanCenter Auditing High 5Customer Self Help Policy Tracer Essential PAC filer validator Essential Whoami.scansafe.net improvements Essential Templates (filtering + reporting) High 6Ad-Hoc Features ScanCenter UI Easy wins Essential ScanCenter configuration page changes Essential 7Security Tools More information of block classification – Threat Defense Essential BC: October 2012

15 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15 Easy to follow deployment guides VODs of deployment options Projects to streamline service deployment process Beta process running successfully for months – Complete 8 customers and over 1400 seats self deployed Deployment Deployment for All Accounts with < 500 seats

16 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16 Network Attach Enterprise Features Simplification Security Services Convergence Integrate Web Reputation Additional OI ScanLets

17 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17 We dynamically block web requests based on SIO Generated WBRS Scores Continuous monitoring by OI / SecApp The system will continue to work with the current WebRep db Mapping of Web Reputation threat types into Cloud Web Security types (e.g. Phishing, Spyware, Adware, Info) Provide whitelisting per company (for Operational use and NOT customer facing

18 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18 Network Attach Enterprise Features Simplification Security Services Convergence SAML 2.0 Authentication WSA-based Connector iOS Protection

19 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19 This solution is limited to any customer already using an IdP for Single Sign On (SSO) purposes ScanSafe uses the SAML technology to identify and authenticate users No need for Connector or other authentication method The SP is located within the ScanSafe cloud infrastructure All communication is performed via browser redirects and hidden forms containing SAML messages BETA Customers include: HCA, GE, ABF

20 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20

21 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21 Web Security customer requirement: Transparent deployment Local logging / SIEM Caching DLP Integration Native FTP support All these features will be available on the WSA-based Connector Phase 1: High performance connector NTLM v2 Transparent identification Local caching support Offbox DLP integration Appliance based Phase 2 (Not Committed): All of the above Native FTP scanning Local Logging Virtual form factor – VMware What? How?

22 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22 CWS

23 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23 Future Outside the Enterprise 3 rd Party MDM Appliance MDM Manager Hosted PAC + EasyID POC only !!!!!!! If successful CCB POC only !!!!!!! If successful CCB Hosted PAC EasyID CWS

24 Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 24

25 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25 Focus on attach model Continued integration with Monish Pahwas team WebSense and BC updates at competitive forum Nov 5-9th Focus on Efficacy, Simplification of deployment, Enterprise integration # ! %

26 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26 _security.shtml - _security.shtml allation_and_configuration_guides_list.html allation_and_configuration_guides_list.html ehttp://wikicentral.cisco.com/display/SSAFE/Hom e

27 Thank you.


Download ppt "Cisco Confidential © 2010 Cisco and/or its affiliates. All rights reserved. 1 Cloud Web Security Update."

Similar presentations


Ads by Google