RSA Security Solutions for Virtualization

1. RSA Security Solutions for Virtualization Martin de Jongh, Presales team lead EMEA North

2. RSA Market Opportunity RSA capabilities for Virtualization RSA VCE’s Vblock security Words of Wisdom 2

3. RSA, The Security Division of EMC EMC²is the world leading information infrastructure company enabling organizations to bring the power of their information to life Virtualize& Automate AddIntelligence VMWareis the world leading Virtualization company Virtualize, Optimize & Energize Information Protect Store RSA is the world leader in securing information infrastructureensuring that information is always an asset and never a liability

4. RSA Security Leadership 1 25 25 175K st + + + Inventors of RSA algorithm yearlegacy yearlegacy organizations protected phishing attacks shut down 35K + World’s Largest 1B 250M + + productsshipped with RSA BSAFE®encryption online identities protected information security industry event

5. RSA Security Leadership 1 st Leader Leader Leader Authentication Data Loss Prevention Web Fraud Detection SIEM Source: Frost & Sullivan Source: Gartner Magic Quadrant Reports

6. RSA Market Opportunity RSA capabilities for Virtualization RSA VCE’s Vblock security Words of Wisdom 6

7. IT Budget wishlist for 2010 survey of 1,189 CIOs in the US and Canada.

8. Market Opportunity Biggest increases in spending for 2010: Security (20%), Virtualization(12%) &Cloud Computing………. In 2009 only 18%of enterprise datacenter workloads that could be virtualized have been virtualized. In 200940%of virtualization deployment projects undertaken were without involving the information security team in the initial architecture and planning stages. Through 2012, 60%of virtualized servers will be less secure than the physical servers they replace .

9. RSA Market Opportunity Cloud Computing RSA capabilities for Virtualization Summary Words of Wisdom 9

10. The Business View of Clouds

11. The Security View of Clouds

12. New Cloud Security challenges • Information Sensitivity • What information will be going to the cloud? • Are there privacy or confidentiality issues? • Information Mobility • Where physically will the information be? Are there legal/sovereignty issues? • Can I be sure I get it all back – and all copies are permanently deleted– if I stop using the cloud vendor or infrastructure? • Will the cloud vendor outsource any of its functions? Can I control that? • Transparency, Accountability, Trust • Can I get clarity into whether security controls, and other best practices, are being deployed? • Can I meet audit and compliance requirements for the information or business process? • Can I trust the cloud service provider? • Who Are My Neighbors? • Are there controls in terms of who else is using this cloud infrastructure? • Is there good discipline over separation of data, processes and infrastructure? • Is there strong identity management both for customers and for employees? • The Human Dimension • Can I get insight into hiring practices and training practices regarding privacy and security?

13. RSA/EMC/VMWare’Private’ Cloud strategy

14. RSA Market Opportunity Cloud Computing RSA capabilities for Virtualization Summary Words of Wisdom 14

15. RSA capabilities for VirtualizationInfo Centric vs. Perimiter defense

16. RSA’s approach - Transforming Security within the Virtualized infrastructures Today Most security is enforced by the Network, OS and application stack. APP APP APP OS OS OS vApp and VM layer VDC Services Layer RSA’s Vision Surpass the levels of security possible in today’s physical infrastructures by pushing information security enforcement down the virtual stack. Security Management & Reporting (SIEM) Cloud Computing Virtual Infrastructure(including hypervisor) Compute Network Storage 16

17. RSA capabilitiesfor Virtualization RSAportfolio Multi-product solutions Encryption, Identity/Access controls, SIEM & DataLossPrevention RSASecurBook for VMWare View Solution Architecture Solution deployment and configuration guides Operational guidance for effective using the solution Troubleshooting guidance Solution guides for planning, deploying, and administering RSA solutions in an Virtual infra. “…we don't usually do this as part of our briefings, but I must say I looked at the RSA SecurBook and was very surprised with the level of detail and material in there.  Lots of screen shots and other materials I wasn't expecting.  Very nicely done.  Excellent resource.” - Gartner Analyst, December 2009

18. RSA Identity & Access controls for the Virtual Infrastructure VMware View (Desktop virtualization-VDI) RSA SecurID & Authentication Manager strong authentication secures access to the portal through which virtual desktops are accessed remotely VMware vSphere (ESX) (Sever virtualization) RSA SecurID & Authentication manager strong authentication secures administrative access to ESX console and vSphere Management Assistant Authentication Manager

19. RSA Security Management & Reporting forthe Virtual and physical infrastructure Overview Ease of analysis, implementation, compliance and change control in VMware environment. • RSA enVisioncollects distinct logs from VMware environment thru 1 seamless, agentless connection • vCenter logs • VMWare Servers logs

20. RSA enVision (SIEM)VMware Events and Activity

21. RSAData Loss PreventionSuite DLP Datacenter DISCOVER Where is my sensitive data? Enterprise Manager DLP Network MONITOR Where is my sensitive data going? Policies Remediation DLP Endpoint ENFORCE How do I prevent loss of my data?

22. VMware VSphere VMware VSphere VMware VSphere VMware VSphere RSA Data Loss Preventionfor Virtual networks • Overview • Leverages the capabilities of VMware vShield Zones to deploy RSA DLPinternallyas a OS imbedded virtual sensor monitoring data traversing among virtual networks. • Uses a centrally managed policies and enforcement controls to prevent data loss in the virtual datacenter RSA & VMware ‘vSafeprogram’ Zone3 vShield Zone1 Zone2 RSA DLP sensor RSA DLP Sensor RSA DLP Sensor RSA DLP Sensor Network INTERNET

23. RSA Solution Suite forVirtual infrastructure VMware IonixSCM for security config and patch management RSA DLPfor protection of data in use RSA SecurID for remote authentication RSA enVision for security monitoring and reporting RSA SecurID for ESX Service Console

24. RSA Secures the Core Vblock Platform (VCE) Validated with Vblock Security and compliance officer vSphere Vmware Administrator UCS vSphere Management Assistant RSA SecurID RSA enVision Storage Comprehensive visibility into security events Security incident management, compliance reporting Strong authentication before access to ESX Service Console and vSphere Management Assistant

25. RSA Market Opportunity Cloud Strategy RSA capabilities for Virtualization Summary Words of Wisdom 25

26. Summary: Leading the Way Toward 100% VirtualizationRSA: Security and Compliance for Virtual Environments ProtectIdentities MonitorInfrastructure SecureInformation

27. Additional Information • RSA Security Brief: • Security Compliance in a Virtual World • RSA SecurBook for VMWare View • RSA White Paper: • VMWare Virtual Desktop Infrastructure • Website: • RSA Solutions for Virtual Environments • RSA White Paper: • Desktop Virtualization Management and Security

28. RSA Market Opportunity Cloud Strategy RSA capabilities for Virtualization Summary Words of Wisdom 28

29. Words of Wisdom There is no better way to fully understand a “security”challenge…….. then to look at it from all divergent angles !! 29

30. Thai Traditional Chinese Gracias Thank You!! Spanish Russian Obrigado English Brazilian Portuguese Danke Arabic Grazie German Merci Italian French Simplified Chinese Korean Japanese Takk! Norwegian Tack så mycket Swedish Hartelijk dank! Dutch

31. Thank you!