A new security approach for the modern network

Issue 1 2021 Cyber Security

In a digitally transforming world, where a large portion of an organisation’s crucial data and applications reside in the cloud, the traditional firewall is no longer as effective as it used to be. Firewalls have been gatekeepers, preventing cybercriminals from accessing the corporate network, however, these have become ineffective on their own and cannot protect businesses from rapidly evolving cyber threats. Security breaches are now becoming a question of ‘when’ and not ‘if’.

Although traditional firewalls are important in any security strategy, as they protect the north/south flow of traffic, today some 85% of organisational traffic runs east/west – in other words, across the network, rather than in and out of it, and that poses a serious problem for organisations.

Patrick Assheton-Smith, CEO of Symbiosis IT, explains that while perimeter defence remains important, many of today’s threats come from within. Whether this is a machine compromised externally that has since been brought in and connected to the corporate network, or a criminal gaining access through a successful phishing attack, obtaining clear visibility of your east/west traffic is more critical than ever.

“This is where micro-segmentation comes in. Micro-segmentation creates secure zones across cloud and data centre environments, allowing you to isolate application workloads and secure them individually, using a zero-trust security approach to reduce attack surfaces,” he says. “This means less traditional firewalling and VLANs, with more control.”

Micro-segmentation, he points out, enables you to control the flow of traffic more easily and securely. The reason it is not well known and used more widely is simply that it is generally viewed as a complex undertaking.

Symbiosis IT is able to reduce this difficulty by using Guardicore, which is significantly easier to implement than most other micro-segmentation solutions. Being software, it essentially allows you to put an agent on every machine, server and workstation in your organisation. This gives you control at a level below the ports and destinations secured by firewalls, allowing you to secure where the processes running on each machine can talk.

“Guardicore is designed for the way we build networks today, which are too agile and dynamic for static firewalls to cope with on their own. Not only does this micro-segmentation tool enable agility, it also reduces complexity from a networking perspective, and the enormous security benefits it offers far outweigh whatever complexity it does add.”

Assheton-Smith notes that by virtue of having an agent on every machine, it becomes possible to finitely control and thoroughly visualise the network traffic right down to the process level and to create security policies to govern every machine.

“Statistics show that the average dwell time to discover a breach is 191 days, which is a long time for the bad guys to have access to your systems before you learn about it. Remember, any breach has the potential to damage your business, your earnings and your reputation significantly.

“Micro-segmentation is recommended to reduce not only attack surfaces, but also the so-called ‘blast radius’ – if a criminal gets in, they are unable to get further into the network. Guardicore is, therefore, key to eliminating blind spots, improving detection time and reducing dwell time.”

What sets this solution apart, he indicates, is that it is possible to deploy some form of security within a matter of weeks. The company’s security expert can then tweak and improve this over the following weeks, making the network even more secure. This is possible thanks to a dashboard that allows them to clearly visualise the entire network and create policies quickly, accurately and effectively.

“Micro-segmentation may not be simple, or necessarily cheap, but the value it offers is such that my advice to organisations of all sizes is this: if for any reason you cannot start big, then start small, but the sooner you start with micro-segmentation, the safer you will be,” concludes Assheton-Smith.

For more information go to www.symbiosys.it




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

More is less in cybersecurity
Issue 2 2021 , Cyber Security
Post-pandemic paradox: more solutions do not bring better protection. Despite 80% of organisations running up to 10 different protection and cybersecurity solutions simultaneously, more than 50% of them experienced downtime from data loss last year.

Read more...
Ransomware and Microsoft Exchange Server attacks are surging
Issue 2 2021 , Cyber Security
Check Point Research sees global surges in ransomware attacks, alongside increases in cyberattacks targeting Microsoft Exchange Server vulnerabilities at a time where CISA has raised the alarm about ransomware attacks against Microsoft Exchange servers.

Read more...
Malware disguised as meeting apps spiked by 1067%
Issue 2 2021 , Cyber Security
Atlas VPN analysis reveals that cyber threats disguised as videoconferencing applications jumped by 1067% in a year. The data analysed was provided by Kaspersky.

Read more...
Free technology to boost future careers
Issue 2 2021 , Cyber Security, Security Services & Risk Management
A global shortage of cybersecurity professionals has become so severe that companies are increasingly at risk from hacking and industrial espionage.

Read more...
IoT malware attacks worldwide surge by 66%
Issue 2 2021 , News, Cyber Security
Based on the ‘Global Cyberattack Trends’ report by SonicWall, in 2020, malware attacks on IoT devices spiked by 66% compared to 2019. In a year, they grew from 34,3 million cases to nearly 56,9 million.

Read more...
New security frontiers: An opportunity to rewrite the rules
Issue 2 2021 , Cyber Security
Paul Crichard, chief security technology strategist, BT, explores how organisations can reimagine their security for the cloud, turning it into an enabler for better ways of operating.

Read more...
Seven simple steps to keep your SME cyber-safe
Issue 2 2021 , Cyber Security
Cybersecurity experts at ENHALO, a full-circle cyber defence group, understand the cyber-challenges facing the SME owner; here are seven simple steps to keep your SME cyber-safe in 2021.

Read more...
Snyk launches in South Africa
Issue 2 2021 , News, Cyber Security
Snyk provides a platform to secure all of the critical components of today’s cloud native application development, including the code, open source libraries, container infrastructure and infrastructure as code.

Read more...
Acronis acquires Synapsys in South Africa
Issue 2 2021 , News, Cyber Security
Acronis has acquired Synapsys, its long-time partner located in Cape Town, South Africa, that specialises in distributing Acronis Cyber Protection Solutions through the service provider channel.

Read more...
Gallagher achieves UK cybersecurity standard
Issue 1 2021, Gallagher , Access Control & Identity Management, Cyber Security, Government and Parastatal (Industry)
The Gallagher UK CPNI CAPSS High Security System features compliances to the Cyber Assurance for Physical Security Systems (CAPSS) standard, and the Centre for the Protection of National Infrastructure (CPNI) Readers and Tokens standards.

Read more...