Get to know us better! Gain valuable insights into how we think by visiting our blog, or take a look at the industry events we're frequenting on our events page. You can also geek out with us by attending one of our security management webinars, or dive head first into the products and solutions we provide in our Resource Library. There's lots to keep you busy!
In Part 1, we built the case that SIEMs are ineffective for threat hunting, based on the following reasons:
To date, SIEM vendors have not provided the market with the functions needed for producing world-class threat hunting. Again, threat hunting is a method. In order to follow this method, we have to have tools that accelerate and amplify our human work, rather than using technologies that brush aside our method in favor of operating within their paradigm. Too many threat hunting programs are sputtering because we continue to believe that the method should conform to the technology, but that gets things backwards.
Threat hunting remains an undeveloped competency for far too many organizations. When surveyed, security professionals confess an overall lack of competency to detect and respond to advanced attacks that slip through their defenses. In my experience, many organizations still rely on alerts from a SIEM (among other prevention systems). Most security teams will painstakingly build models for indicators of compromise, receive alerts from their SIEM, and “do the best they can” to eliminate the intrusion. What are the results?
How do you know if your security posture is where it needs to be? Most organizations look at standards, be it national standards, industry standards or their own corporate standards. They may also look at their industry’s best practices. But if you aren’t looking at your risk vulnerability, you are likely not looking at the entire spectrum of your network’s security posture.
El nuevo paradigma de la automatización es la “Administración del Ciclo de Vida”
Te mostraremos cómo FireMon Intelligent Policy Automation utiliza la tecnología de automatización e inteligencia para reducir el esfuerzo e incrementar la eficacia en cada etapa del proceso de cambios.
Innovation streak continues with new Intelligent Security Management solutions for the cloud
OVERLAND PARK, KANSAS and DALLAS, TEXAS – October 25, 2016 – FireMon, the global leader of the Network Security Policy Management (NSPM) market, today announced its acquisition of FortyCloud, a field-proven cloud infrastructure security broker. The move advances FireMon’s cloud management capabilities across all major cloud platforms providing a comprehensive view and consistent control of the complex hybrid environments enterprises must manage.
According to Gartner’s 2017 Planning Guide for Cloud Computing, “Through 2020, 95% of cloud security issues will be the organization's fault, not the cloud provider's.” FireMon recognizes that managing the complexity of today’s networked environments is not always straightforward as they consist of a variety of disparate technologies and security controls in the cloud and on premise. The report goes on to say, “Inadequate security practices can quickly turn an otherwise well-intentioned cloud initiative into a massive disaster for an organization.”
The company’s acquisition of FortyCloud addresses this market need by providing solutions to help effectively secure cloud infrastructure and make the transition to the cloud simpler by extending security and connectivity to the public cloud.
“Our customers are at varying points on their journey of implementing public and hybrid cloud strategies,” said Satin H. Mirchandani, CEO, FireMon. “While the security needs are very similar in cloud infrastructure and on-premise networks, the technology implementations can be very different. FireMon intelligent security management solutions allow the network and security teams to quickly deliver the capabilities the business demands to stay competitive.”
In addition to the strategic importance of cloud security technologies, it’s critical to have a team and solutions that have proven successful in real-world environments.
“One of the most impressive aspects of the FortyCloud technology is the customer and market acceptance,” said Jody Brazil, co-founder and chief product strategist, FireMon. “The FortyCloud team has built a great, multi-cloud security solution that is being used by many large and complex global organizations. We look forward to working with them to further advance the great solutions they’ve already produced.”
With the addition of FortyCloud to its suite of products, FireMon will support:
“I’ve been very impressed with the entire FireMon team and am very excited to work with the leading global NSPM vendor,” said Amir Naftali, CTO and co-founder, FortyCloud. “We look forward to sharing our solution with FireMon’s 1,000+ customers and continuing to expand our vision of securing the public cloud.”
FireMon’s Intelligent Security Management solutions are a complete package of policy and risk analysis, automated change management and security analytics and monitoring. It does this in a single platform that gives security professionals a centralized view of the traffic, rule usage and changes happening across the environment.
Helping Enterprise Security Teams Improve Resource Efficiency & Reduce Overall Risk Exposure
Firewall technology has come a long way since its initial, most rudimentary forms. Next-Generation Firewalls (NGFW) are the latest development, and organizations are accelerating adoption to the new technology. But NGFWs aren’t a fix-all solution.