NetIQ. Security Intelligence Made Easy

Transcription

1 NetIQ Security Intelligence Made Easy

2 NetIQ Company Overview

3 Attachmate Group, Inc. a brief history 3

4 Attachmate Group, Inc. Company Facts Employees: 3,600 worldwide Annual Revenue: $1.1 billion Leadership: Jeff Hawn, Chairman and CEO, Overall corporate direction and strategy Charles Sansbury, CFO and COO, Worldwide finances and operations Bob Flynn, President and General Manager, Attachmate and Novell Jay Gardner, President and General Manager, NetIQ Nils Brauckmann, President and General Manager, SUSE 4

5 Attachmate Group, Inc. Terminal Emulation Legacy Modernization Managed File Transfer Enterprise Fraud Management Identity, Security and Compliance Management Data Center Management Collaboration File and Networking Services Endpoint Management Enterprise Linux Servers Software Appliances Linux Desktops 5

6 Large enough to deliver, small enough to care. Application Management Systems Management Security Management Identity & Access Management Service Management Security Management Workload Management Large Focused ISV $350 Million Customer Service Strong Vision Technical Expertise 6

7 Scale to Deliver A Culture to Care Established software vendor that has the scale to execute our strategy and the focus to deliver on customer s expectations

8 NetIQ Who is NetIQ? NetIQ is a global software company focused on Identity, Security, Governance, and IT Operations Management solutions. Why is NetIQ the provider of choice? Customers and partners choose NetIQ to achieve business value from their IT systems because NetIQ consistently delivers the expected customer outcome with a focused, customer centered approach. What s special about NetIQ? NetIQ solutions integrate seamlessly with existing infrastructures and employ a holistic, service foundation, which allows IT professionals to intelligently manage their business services. Excellent technology, exceptional customer service, and ease of doing business 8

9 Integrated Capabilities Identity, Security & Governance Identity and Access Governance Automated and secure access fulfillment for the business user and the administrator Access Management Run time access enforcement across all end points Security Management Monitoring, reporting and remediation to resource access throughout the enterprise IT Operations Management Systems and Application Management Manage and optimize IT services and effectively communicate service level compliance with the business Workload Management Simplify the management of workloads across physical, virtual and cloud environments Service Management Monitor and manage the services across physical, virtual and cloud 9

10 Scale to deliver, with a culture to care. COMMITTED TO OUR CUSTOMERS SUCCESS 10

11 NetIQ Identity and Access Management Hadib CHANGRIHA Avant-Ventes IAM

12 Chaque Organisation est Différente L Enterprise Présente des Défis en Trois Dimensions De nombreuses entreprises prévoient de plus en plus d utiliser des environnements en cloud L'utilisation de dispositifs personnels pour le travail va doubler cette année 75% estime que le B2B est stratégique pour leur business Forrester Research, Inc. Navigate The Future Of Identity And Access Management - Eve Maler, March

13 Les Solutions NetIQ Gestion des Identités Gestion des Accès Gestion de la Sécurité Gestion automatisée et sécurisée des Identités Gestion des Accès pour tous les End Points Solutions de supervision, de reporting et de remédiation. Identity Manager 4 Access Governance Suite Directory and Resource Administrator Group Policy Administrator LDAP Proxy Access Manager Secure Login Cloud Access Social Access Privileged User Manager Sentinel 7 Sentinel Log Manager Change Guardian Secure Configuration Manager 13

14 NetIQ Identity Manager 4

15 Gestion du Cycle de Vie Utilisateur 15

16 NetIQ Identity Manager NetIQ Identity Manager 4 automatise en toute sécurité la gestion des identités dans les environnements physiques, virtuels et de cloud et garantit la conformité. Provisionnement / dé-provisionnement automatisé Définition simplifiée des stratégies Reporting Self-Service utilisateur et administration déléguée Gestion mot de passe & synchronisation Workflow / Rôles 16

17 Identity Manager Evolution 17

18 NetIQ Identity Manager 4 Composants

19 Identity Manager 4 Advanced Edition Architecture Logique Mobile Webtop Your Portal/ Web Services/ Custom Business Managers CISO Compliance/ Auditor Employees Customers/ Partners/ Contractors Developers and Consultants Key Functional Capabilities White Pages/ Self-Service/ Pwd Mgmt Business Resource Request Approval Workflow Role-based User Mgmt/ Deleg Admin Advanced Reporting and Metrics Role and Policy Mapping Compliance Content Major Components RBAC Model Real-time Data Integrity Identity Vault Work-flow System RBAC Model Identity Information Warehouse Open APIs Deployment and Mgmt Tools Connectors Applications Directories OS and File Systems Help Desk Telephone and Building Access Databases Credentialing Cloud and SaaS 19

20 Déploiement Simplifié Designer: Un outil de configuration graphique avec fonction de glisser-déposer permettant de réduire le codage. Gestion intégrée des règles de configuration au travers de l interface Designer Vue simplifiée par le biais de domaine groupé Analyzer: Outil d'analyse de données pour simplifier la connexion des applications au système d'identité. Analyse des données d identités et nettoyage Contribue à assurer la cohérence des données 20

21 NetIQ Identity Manager 4 Roadmap

22 NetIQ IDM Approbation Approver Login Mobile Client End users submitting requests Existing IDM User Application New IDM Landing Page (Aquamarine) IDM 4.02 Advanced Edition 22

23 Visualisation des Tâches et Approbation Vue des tâches Vue détaillée des tâches Recherche liste des tâches 23

24 Aquamarine Nouvelle interface utilisateur Login End User IDM User Application Nouveau tableau de bord de travail pour l utilisateur final IDM 4.02 Advanced Edition 24

25 Aquamarine Landing Page 25

26 26

27 NetIQ Access Manager 3.2

28 NetIQ Access Manager NetIQ Access Manager simplifie l'authentification, gère les stratégies de contrôle d'accès et permet la protection des ressources. Authentification unique pour les applications de l entreprise Modèle d'identités centralisées ou fédérées Administration centralisée Plusieurs méthodes d'authentification 28

29 Problématique Client Intranet Employé Firewall Web Servers et Applications SECURITY NT IIS Problèmes classiques d une infrastructure web sécurisée: Accès Direct aux Web Servers (possibilité de hacking) Identités multiples (pas de single sign on) Internet Client SECURITY Solaris/ Netscape Installation de SSL sur chaque web server Nécessité de changer les liens de HTTP en HTTPS Beaucoup de technologies web différentes Extranet SECURITY Linux/ Apache Partenaire 29

30 La solution NetIQ One Net Employé Client Partenaire Firewall Web Servers et Applications NAM SECURITY INFRASTRUCTURE Annuaire NT IIS Solaris/ Netscape Linux/ Apache Bénéfices de NetIQ Access Manager: Unique Point d Authentification Offre le Web Single Sign On (headers et Form Fill) Envoi de contenu personnalisé aux applications Réécriture des données HTML (masquage du DNS interne) Chiffrement dynamique du contenu lors du passage par le proxy Pas de modification de contenu HTML Pas de changement du process d authentification dans les applications Sécurise tous les serveurs HTTP Empêche l accès direct aux serveurs Web 30

31 NetIQ Access Manager Web Single Sign-on Identity Federation Integrated Web & Enterprise Access Control NetIQ Access Manager SSL-VPN & Remote User Security Simplified Deployment & Administration Identity-enabled Access Management 31

32 NetIQ Sentinel 7

33 NetIQ Sentinel 7 Sentinel 7 est une solution qui intègre à la fois les fonctions de gestion des logs et de SIEM (gestion des événements et des informations de sécurité) Fonctions de Log Management et SIEM intégrées Surveiller, détecter et remédier automatiquement aux menaces Analyses post-mortem Archivage Reporting, tableaux de bord 33

34 Log Management vs. SIEM Le Log Management fait référence au Security Information Management ou SIM Security Information Event Management ou SIEM est axé sur la surveillance en temps réel, alerter, répondre aux incidents SIEM Event correlation Robust alerts Incident response Dashboards Data enrichment Filtering Data collection Ad-hoc query alerts Reports Log Management Compression Forensics Data integrity Unknown log support Data retention Raw log forwarding 34

35 NetIQ Sentinel 7 Event correlation Robust alerts Incident response Dashboards Data enrichment Filtering Data collection Ad-hoc query alerts Reports SIEM Compression Forensics Data integrity Unknown log support Data retention Raw log forwarding NetIQ Corporation. All rights reserved.

36 Identity Integration 36

37 Sentinel Identity Integration 37

38

39 This document could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein. These changes may be incorporated in new editions of this document. NetIQ Corporation may make improvements in or changes to the software described in this document at any time. Copyright ActiveAudit, ActiveView, Aegis, AppManager, Change Administrator, Change Guardian, Compliance Suite, the cube logo design, Directory and Resource Administrator, Directory Security Administrator, Domain Migration Administrator, Exchange Administrator, File Security Administrator, Group Policy Administrator, Group Policy Guardian, Group Policy Suite, IntelliPolicy, Knowledge Scripts, NetConnect, NetIQ, the NetIQ logo, PSAudit, PSDetect, PSPasswordManager, PSSecure, Secure Configuration Manager, Security Administration Suite, Security Manager, Server Consolidator, VigilEnt, and Vivinet are trademarks or registered trademarks of NetIQ Corporation or its subsidiaries in the United States and other countries.