Get to know us better! Gain valuable insights into how we think by visiting our blog, or take a look at the industry events we're frequenting on our events page. You can also geek out with us by attending one of our security management webinars, or dive head first into the products and solutions we provide in our Resource Library. There's lots to keep you busy!
In Part 1, we built the case that SIEMs are ineffective for threat hunting, based on the following reasons:
To date, SIEM vendors have not provided the market with the functions needed for producing world-class threat hunting. Again, threat hunting is a method. In order to follow this method, we have to have tools that accelerate and amplify our human work, rather than using technologies that brush aside our method in favor of operating within their paradigm. Too many threat hunting programs are sputtering because we continue to believe that the method should conform to the technology, but that gets things backwards.
Threat hunting remains an undeveloped competency for far too many organizations. When surveyed, security professionals confess an overall lack of competency to detect and respond to advanced attacks that slip through their defenses. In my experience, many organizations still rely on alerts from a SIEM (among other prevention systems). Most security teams will painstakingly build models for indicators of compromise, receive alerts from their SIEM, and “do the best they can” to eliminate the intrusion. What are the results?
How do you know if your security posture is where it needs to be? Most organizations look at standards, be it national standards, industry standards or their own corporate standards. They may also look at their industry’s best practices. But if you aren’t looking at your risk vulnerability, you are likely not looking at the entire spectrum of your network’s security posture.
El nuevo paradigma de la automatización es la “Administración del Ciclo de Vida”
Te mostraremos cómo FireMon Intelligent Policy Automation utiliza la tecnología de automatización e inteligencia para reducir el esfuerzo e incrementar la eficacia en cada etapa del proceso de cambios.
Offers Industry’s Only Solution Providing Visibility Into and Control Over Both AWS and OpenStack Platforms
OVERLAND PARK, Kan., November 20, 2014
OVERLAND PARK, KS–(Marketwired – Nov 20, 2014) – FireMon, the industry leader in proactive security intelligence solutions, today announced expanded network security monitoring capabilities for cloud services, including Amazon Web Services (AWS) and OpenStack Icehouse.
The FireMon Security Intelligence Platform is the industry’s only solution offering comprehensive analysis and reporting of network security configuration change for both the AWS and OpenStack platforms, with support available to all customers in the current FireMon Security Manager (version 7.3) solution.
As recognized by leading industry analysts, organizations continue to rapidly adopt leading cloud-based services — in particular AWS and OpenStack — driving demand for supporting solutions that allow for management of related network security controls.
With end-user organizations ultimately responsible for oversight of security management within such environments, not cloud services providers themselves, practitioners require advanced capabilities to address their evolving deployments.
“The challenge of securing data that lives outside traditional boundaries of control for network security teams is complex; risks are expanded, while control and visibility are reduced,” said Jody Brazil, CEO of FireMon. “Extending security monitoring from traditional security infrastructure to include cloud assets is a critical first step, providing FireMon customers with a single pane of glass to ensure proper enforcement across all of their environments.”
With the ability to provide detailed visualization of both traditional and cloud-based controls, along with detection and reporting of related firewall rule changes, FireMon is the only solution that supports today’s real-world hybrid enterprise architectures.
FireMon’s State of the Firewall 2014 Survey found that close to 60 percent of today’s practitioners believe that traditional and next-generation firewalls will play a crucial role in securing cloud services.
As analysts at Gartner note in their Nov. 2014 report Implementing Effective IaaS Cloud Security in Amazon Web Services: “Many organizations expect that the cloud provider that they want to do business with will implement the exact same control patterns and implementations they have chosen on-premises; this is a fallacy.”
Among the specific capabilities FireMon Security Manager provides in support of AWS and OpenStack are features including:
For additional information about the FireMon State of the Firewall 2014 Survey see the Future of the Firewall blog series: http://www.firemon.com/category/future-of-the-firewall/.
FireMon is the industry leader in proactive security intelligence solutions for large organizations that deliver continuous control of infrastructure, policy and IT risk. The FireMon Security Intelligence Platform is a massively scalable, high-performance foundation for network risk detection, change workflow automation, firewall rule base clean-up, compliance audit assessment and security operations cost reduction.
Helping Enterprise Security Teams Improve Resource Efficiency & Reduce Overall Risk Exposure
Firewall technology has come a long way since its initial, most rudimentary forms. Next-Generation Firewalls (NGFW) are the latest development, and organizations are accelerating adoption to the new technology. But NGFWs aren’t a fix-all solution.