1. No category

Integration of Advanced
Malware Protection (AMP) on
Cisco Email and Web Security
Cisco Partner Confidential: Not For Distribution: Under NDA
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
1
Advanced
malware
in the
news
Source: Providence Journal
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
2
There is No Silver Bullet
Attack Continuum
BEFORE
DURING
AFTER
Discover
Enforce
Harden
Detect
Block
Defend
Scope
Contain
Remediate
Gaps in protection as new
attack vectors emerge
Point-in-time defenses
can be evaded
Malware prevention is
not 100%
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
3
A New Approach is Needed
Attack Continuum
BEFORE
DURING
AFTER
Discover
Enforce
Harden
Detect
Block
Defend
Scope
Contain
Remediate
Need continuous protection throughout the attack lifecycle
– before, during and after an attack
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
4
AMP on Cisco Email and Web Security
Comprehensive malware defeating solution
Malware detection and blocking
Continuous analysis
Retrospective alerting
Simple license add-on
•
Cisco Email Security Appliances
•
Cisco Web Security Appliances
•
Cisco Cloud Web Security
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
5
Key Features of AMP on Content Security
File Reputation
File Sandboxing
File Retrospection
Preventative blocking of
suspicious files
Behavioral analysis of
unknown files
Retrospective alerting
after an attack
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
6
Beyond the Event Horizon
Analysis Stops
Point-in-time Detection
Antivirus
Not 100%
Sleep Techniques
Unknown Protocols
Encryption
Blind to scope
of compromise
Polymorphism
Sandboxing
Initial Disposition = Clean
Actual Disposition = Bad = Too Late!!
Retrospective Detection,
Analysis Continues
Turns back time
AMP
Visibility and Control
are Key
Initial Disposition = Clean
© 2013 Cisco and/or its affiliates. All rights reserved.
Actual Disposition = Bad = Blocked
Cisco Confidential
7
Superior Protection and Value for Customers
Advanced
Protection
Unmatched
Visibility & Control
• Blocking of malicious files
where no signatures exist
• Visibility to reputation and
file behavior
• Continuous monitoring of
files that have traversed the
gateway
• Alerting of threats inside the
network
• Protection across the attack
continuum – before, during,
and after
© 2013 Cisco and/or its affiliates. All rights reserved.
• Granular policies based on
file reputation and file
behavior
Flexibility
and Choice
• Additionally licensed feature,
added to existing
deployments
• Simple and cost effective
solution
• Choose the AMP model that
is best for you
Cisco Confidential
8
Proving the Better Together Story
Sourcefire’s deep knowledge
of advanced threats
and analytics expertise
• Threat intelligence and file
reputations from AMP cloud
• File behavioral analysis and
sandboxing
• Retrospective security
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco’s industry leading
Web and Email Security Solutions
• Broadest worldwide traffic
monitoring and threat telemetry
network
• Integrated, multi-layer malware
defense for adaptive detection
and mitigation
Cisco Confidential
9
Continuous Protection Across the Attack Continuum
Attack Continuum
© 2013 Cisco and/or its affiliates. All rights reserved.
BEFORE
DURING
AFTER
Discover
Enforce
Harden
Detect
Block
Defend
Scope
Contain
Remediate
Filtering
Malware Signature
File Retrospection
Usage Controls
File Reputation
Threat Analytics
Reputation
File Behavior
Actionable Reporting
Cisco Confidential
10
What’s in it for you?
Effective entry point with customers
• Target breach and other news coverage highlights need for AMP
• Combined power of Cisco and Sourcefire
• Flexible deployment and easy activation
Huge upsell opportunity
• Attach AMP to broad ESA, WSA, and CWS install base
• 35,000 customers
• 60,000 appliances
• 250M users
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
11
What’s In It for Partners
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
12
What’s in it for Partners
© 2013 Cisco and/or its affiliates. All rights reserved.
•
Be more competitive and profitable with broader portfolio of integrated solutions
•
Capture the huge Installed base - 35,000 customers, 60,000 appliances 250M users
•
Increase revenue with more migration, upsell, and acquisition opportunities
•
Create recurring revenue streams with value added services
•
Act as a trusted Security advisor with integrated solutions and pre validated designs
•
New specialization is easier, faster, and cheaper for partners.
•
Specialized partners equals more sales.
•
Enhance profitability with Cisco programs and incentives
•
Keep sales moving while securing new opportunities.
•
Two new security campaigns create demand — today.
Cisco Confidential
13
Security Promotions | Available in all regions
© 2013 Cisco and/or its affiliates. All rights reserved.
•
•
•
Up to 60% savings
Switching, Wireless, Cisco Prime Infrastructure, and Cisco Identity Services Engine (ISE)
Until July 26, 2014
•
•
•
Up to 15% trade-in credit
Migrate to Cisco ASA 5500-X appliances with TMP
Until April 30, 2014
•
•
•
90-day free try and buy options
Cisco Email or Web Security solution
Ongoing
•
•
•
Up to 60% off
When purchasing ISE and WLAN at the same time
Until July 26, 2014
http://www.cisco.com/web/partners/incentives_and_promotions/index.html
Cisco Confidential
14
Make Security Services an Integral
Part of Your Services Business Strategy
Quickly Expand into
New Practices
Optimize Your
Existing Practice
• Gain Expertise to Deliver New Professional
Security Services
• Drive Incremental Services Revenue
• Increase Margins Using Automation
• Provide Extra Coverage and Support
During Security Technology Transitions
• Increase Service Value and Customer
Loyalty
PROFESSIONAL
SERVICES
© 2013 Cisco and/or its affiliates. All rights reserved.
• Help Your Customers Evolve and Develop a
Security Strategy
• Align your customers security strategy with
their business objectives
• Leverage Cisco Assets to Build a Managed
Services Practice
SUPPORT
SERVICES
MANAGED
SERVICES
Cisco Confidential
15
Next Steps…
•
Ready
Set
Go
Familiarize with
New Cisco Security Portfolio
Start Customer
Conversations
Close
the Deal
Educate Yourself
•
• Use Security Marketing Campaigns and
Partner Resources
• Next Generation Threat Defense (Avail
end of Feb)
• Launch Page: www.cisco.com/go/rsa-partner-launch
•
•
•
Identify Key Prospects
• Safeguarding Your Organization
Position Value-Added Security Services
Leverage Tools & Offers
• UA Breakaway
• TMP
• Cisco BYOD Smart Solution
© 2013 Cisco and/or its affiliates. All rights reserved.
Start Conversations
•
Assess & Discover
•
•
•
•
•
Capture the Opportunity - Sell Cisco
• Combine Bundles, Promotions, Services
& Capital
•
Attach Technical Services
•
Close the Deal
• Register the Deal for Credits
Security Assessments
Services for Migration
Cisco Security Services
Cisco Validated Designs
Cisco Confidential
16
Partner Resources
RSA Partner Launch Resources
Promotions and Incentives
Related Security Links
Executive Briefing Center (EBC) Presentation
Unified Access Breakaway Promotion
Cisco ASA 5500 to Cisco ASA 5500-X
Next-Generation Firewall Migration
Try and Buy Program for Email and Web
Security
Cisco BYOD (Bring Your Own Device)
Smart Solution Promotion
Cisco Smart Acceleration Uncovered
Rebate Promotion
SMARTnet 3 for 2 Promotion
Partner-Fast Track
Disti –Fast Track
Free Content Security Appliance Promo
Partner Architecture Home Page
Security Partner Launch At-A-Glance
Partner Links
Cisco Partner Brand Exchange
Cisco Partner Central
Cisco Partner Marketing Central
Sell Services
Cisco Capital
Cisco Competitive Edge Portal
Cisco Partner Education Connection
Cisco Security Partner Community
Partner Incentives and Promotions
Sourcefire Acquisition Resources
Steps to Success
Security Campaigns
Use Case Tool and Resources
Sales and Marketing Resources
Services
Cisco Branded Security Services
Collaborative Security Services
Global Proposal Services
Technical Services
Smart Care
Partner Support Service
SMARTnet
Smart Net Total Care
Next Generation Threat Defense
Email and Web Security
Secure Data Center
Cisco Partner Marketing Central
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
17
Thank You
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
18