Monty Möckel. Andreas Reisinger ÜBER UNS. Senior Technology Consultant IT Services Cloud & Datacenter

Größe: px

Ab Seite anzeigen:

Download "Monty Möckel. Andreas Reisinger ÜBER UNS. Senior Technology Consultant IT Services Cloud & Datacenter"

Erwin Stieber
vor 6 Jahren
Abrufe

1 CLOUD SECURITY

2 ÜBER UNS Monty Möckel Senior Technology Consultant IT Services Cloud & Datacenter Andreas Reisinger Senior Solution Engineer IT Services Cloud & Collaboration 2

3 SECURITY OVERVIEW

4 THE SECURITY PERIMETER HAS CHANGED Identity Devices Apps Data On-premises 4

5 THE SECURITY PERIMETER HAS CHANGED On-premises 5

MARKET IS ATTEMPTING TO SOLVE THE PROBLEM Singlesign

Management Mobile Device & Application Management

Loss Prevention Cloud visibility Cloud Data Loss

Broker Information Rights Management Cloud anomaly

6 MARKET IS ATTEMPTING TO SOLVE THE PROBLEM Singlesign on Discovery Identity governance Identity & Access Management Mobile Device & Application Management Conditional access Data Loss Prevention Mobile Data Loss Prevention Cloud visibility Cloud Data Loss Prevention Secure collaboration Cloud Access Security Broker Information Rights Management Cloud anomaly detection Threat Detection User & Entity Behavioral Analytics SIEM 6

8 AUSGANGSLAGE 8

9 SECURE PRODUCTIVE ENTERPRISE (SPE) 9

12 NEUER SICHERHEITSANSATZ 12

16 ACCELERATE DEPLOYMENT OF YOUR SECURITY SCENARIOS Protect your data on files apps and devices Detect and protect against external threats Protect your users and their accounts Work securely from anywhere, anytime Azure Active Directory Intune Cloud App Security Advanced Threat Analytics Azure Information Protection Windows 10 Office ProPlus Office Apps Azure Active Directory Intune Cloud App Security Advanced Threat Analytics Azure Information Protection Windows 10 Windows Defender ATP Office ProPlus Office Apps Exchange Client Client Access Services Azure Active Directory Intune Cloud App Security Advanced Threat Analytics Azure Information Protection Conditional Access Windows 10 Office ProPlus Office Apps Azure Active Directory Intune Windows 10 Mobile apps Office Apps Skype for Business Exchange Online SharePoint Online

AZURE INFORMATION PROTECTION Merkmale Cloudbasierte Lösung Klassifizieren, Bezeichnen und Schützen von Dokumenten und E-Mails Definition durch Regeln und Bedingungen oder

17 AZURE INFORMATION PROTECTION Merkmale Cloudbasierte Lösung Klassifizieren, Bezeichnen und Schützen von Dokumenten und s Definition durch Regeln und Bedingungen oder manuell durch Benutzer + Kombination Die Klassifizierung ist jederzeit identifizierbar unabhängig vom Ort oder Person Die Schutztechnologie verwendet Azure Rights Management 17

18 DEMO

19 AZURE INFORMATION PROTECTION Content Based Automatic Classification

25 AZURE INFORMATION PROTECTION User Initiated Content Classification

32 AZURE INFORMATION PROTECTION Re-classification and justification

Management for the entire Windows Security Platform Windows Defender Antivirus Windows Defender Application Control Windows Defender Application Guard

42 Management for the entire Windows Security Platform Windows Defender Antivirus Windows Defender Application Control Windows Defender Application Guard Windows Defender Credential Guard Windows Defender Exploit Guard Windows Defender Firewall Windows Defender Security Center Windows Defender SmartScreen

43 MICROSOFT ENTERPRISE MOBILITY + SECURITY Technology Benefit E3 E5 Identity and access management Managed mobile productivity Azure Active Directory Premium P1 Azure Active Directory Premium P2 Microsoft Intune Secure single sign-on to cloud and on-premises app MFA, conditional access, and advanced security reporting Identity and access management with advanced protection for users and privileged identities Mobile device and app management to protect corporate apps and data on any device Azure Information Protection P1 Encryption for all files and storage locations Cloud-based file tracking Information protection Azure Information Protection P2 Intelligent classification and encryption for files shared inside and outside your organization Microsoft Cloud App Security Enterprise-grade visibility, control, and protection for your cloud applications Threat protection Microsoft Advanced Threat Analytics Protection from advanced targeted attacks leveraging user and entity behavioral analytics 43

44 PUBLISH ON-PREM WEB APPS IN A SECURE WAY

45 WEB APPLIKATION Remote Worker On-Premise Web App Active Directory 45

46 AZURE APPLICATION PROXY Connector WebApp Azure AD Application Proxy TCP

47 AZURE APPLICATION PROXY - DEMO Publizierung einer On-Premises Sales Web App Pre Authentifizierung vorausgesetzt Zugriffe werden per Sicherheitsgruppe gesteuert Single Sign On Experience mit anderen Web Apps (z.b. Outlook Online) 47

48 AZURE APPLICATION PROXY Einsatzzwecke Veröffentlichung von Web Applikationen ohne VPN Zugriff (Sharepoint, Exchange OWA, Web API, Remote Desktop Gateway, andere Web Apps) Keine öffentliche statische IP Adressen On-Premises vorhanden Voraussetzungen Azure AD Basic oder Premium Lizenzen Windows Server 2012 R2 oder 2016 On-Premises (Domain Joined) 48

49 CONDITIONAL ACCESS Conditional Access Applications Authorization? Compliant? Domain Joined? MFA? 49

50 CONDITIONAL ACCESS Connector WebApp Azure AD Application Proxy TCP 443 Conditional Access 50

51 CONDITIONAL ACCESS UND AZURE APPLICATION PROXY - DEMO Bereits publizierte Sales App muss zwingend mit einer Zweifaktoren Authentifizierung ausgestattet werden. 51

52 CONDITIONAL ACCESS Einsatzzwecke Granulare Zugriffssteuerung auf App Level Bedingungen voraussetzen Gruppenmitgliedschaften, Geräteplattform, Standort, etc. Steuerelemente definieren Multifaktoren Authentifizierung, kompatible Geräte, Zugriff oder Blockierung Voraussetzungen Azure AD Premium (1 & 2) Lizenzen 52

53 WHAT S YOUR SCENARIO? Protect your users and their accounts Work securely from anywhere, anytime Protect your data on files apps and devices Detect and protect against external threats

54 BESTEN DANK Monty Möckel Andreas Reisinger

Ähnliche Dokumente

Azure Information Protection

Azure Information Protection ! Customized by markwil@microsoft.com Customized by markwil@microsoft.com IDENTITY - DRIVEN SECURITY Enterprise Mobility +Security Extend enterprise-grade security