Secure SD-WAN vs NFV: Unraveling the Hidden Costs of WAN Edge Technologies

Based on Gartner, enterprise use of WAN bandwidth is growing by as much as 30% yearly. It’s no question that enterprises are continually evaluating their WAN-edge deployment options and searching for alternatives that will these to meet their networking and bandwidth needs without equivalent increases in costs and complexity.

Lately, SD-WAN has generally end up being the best solution for this challenge - despite the fact that (since this is this type of new market) not every SD-WAN solutions are produced equal. In reaction, however, some vendors have began pushing Network Function Virtualization (NFV) services and products to promote instead of SD-WAN. Further contributing to the confusion are elaborate claims of financial savings coupled with clever packaging and bundles that obscure the real costs of the several possibilities.

Now you ask ,, how can you compare these choices to find out which is the best for your business?

This information will help highlight key factors when looking for WAN-edge technologies and solve various options that will help you make a good decisions for the organization.

A Fast Recap: SD-WAN versus NFV.

SD-WAN can run on the top of specific networking hardware, or be the wholly contained virtualized appliance that may enable deployments and extensions of services across both on-premises and cloud. Enterprises deploying SD-WAN take advantage of simpler management, more efficient bandwidth use, improved finish-consumer experience, and elevated security. And most importantly, additionally they realize lower deployment and processes costs.

NFV may also run SD-WAN, but achieves this using standard x86 server platforms running a number of virtual machines. These VMs, consequently, run various software and services to provide networking and infrastructure abilities, for example routing, next-gen firewalls (NGFW), SD-WAN, session border control, and WAN optimization, to mention a couple of.

The comparison appears pretty straight-forward. In writing-NFV seems like a much better deal. Who wouldn’t want so that you can run SD-WAN plus a number of additional services and capacity on low-cost, generic hardware? But, not too fast…this is how things start to falter:

1. Hidden Costs: Besides the hardware running an NFV solution, you can find more subscriptions and VMs for every functional capacity that should be purchased and licensed individually, including SD-WAN, routing, next-gen firewalls (NGFW), session border control, and WAN optimization. This could increase costs several-fold past the initial NFV hardware outlay.

A fast search shows bundled NFV solutions leveraging low-cost hardware that start just $1500. Obviously, SD-WAN for that box is licensed individually, and when you set the appropriate SD-WAN subscription and minimal critical security for example NGFW on the top, the expense not just work well past the initial price of this area-additionally they exceed the cost of other SD-WAN solutions on the market.

2. Integration: It is only as vital to acknowledge that down to integrating the different VMs, services, and solutions that may operate on an NFV platform rests entirely using the purchases, whereas as fully packaged SD-WAN solutions-such individuals from Fortinet-are pre-integrated through the vendor.

NFV was initially created by Providers, who have been searching to maximise their infrastructure investments by standardizing on generic hardware. Their business design already includes the overhead needed to integrate multiple, disparate solutions together, and they're staffed to handle complexities which come out of this approach.

For enterprises, however, this really is typically and not the situation. So additionally to some considerably greater TCO, you can find more deployment, operational, overhead, and support costs lurking nearby that enterprises have to take into account when thinking about NFV-type deployments. And don't forget forget, multiple products from multiple vendors means multiple management consoles for the limited staff to function, monitor, and configure, including attempting to correlate network and security policies together for highly dynamic SD-WAN connections.

Not Every SD-WAN Solutions are Produced Equal

Obviously, the choice isn’t just as easy as selecting between SD-WAN and NFV. SD-WAN itself can be purchased in essentially two versions: “pureplay” SD-WAN versus “secure” SD-WAN.

Pureplay SD-WAN is just that-just SD-WAN. But ironically, it’s really not so simple. Enterprises thinking about a pureplay SD-WAN option will still need buy and deploy security on the top from the SD-WAN solution. This adds costs and complexities like the hidden overhead from the NFV-based options that should be considered.

And, though you may think so, a pureplay SD-WAN solution isn’t always less expensive than one which includes fully integrated security and advanced SD-WAN networking options.  The above mentioned chart implies that the comparison of TCO spans all providers of SD-WAN solutions.

Secure SD-WAN, however, enables organizations to deploy, manage, and orchestrate both security and SD-WAN abilities in one solution-and single console-to assist companies truly implement security-driven networking across their organization.

This can be a critical point, since operations and security have to operate hands-in-hands like a best practice. Furthermore, customers who go for secure SD-WAN solutions also save themselves in the added complexities of deploying, integrating, and managing disparate solutions from multiple vendors. And exterior support is simpler when there's just one vendor to.

A Thing about Speed

Like a final recommendation, performance is yet another critical element of an SD-WAN solution that should be considered. Cost-effective scalability is important when selecting secure SD-WAN solutions. And because of the IT industry’s constantly growing interest in reliable throughput, that demand will simply grow. Enterprises, therefore, should think twice about options that utilize custom ASICs and security processors for example individuals provided by Fortinet.

Custom processors designed particularly to accelerate SD-WAN functionality deliver better cost-to-performance points than solutions built using off-the-shelf processors, delivering a much better networking experience despite all security functions running concurrently. Fortinet’s custom SD-WAN ASICs for hardware appliances, combined with industry’s only SPU (Security Processing Unit) created for virtual appliances, deliver best-in-class security without having to sacrifice network performance.

This is among the a lot of reasons why Fortinet has the capacity to deliver a fantastic cost-to-performance reason for 749 Mbps of throughput just $5/Mbps.

Key Takeaways

To summarize, enterprises need to visit and comprehend the whole picture when looking for SD-WAN options to be able to pick the best solution for his or her organization. Once the challenges of integration and management are coupled with true TCO, it's obvious that NFV choices are truly not prepared for prime time because they harbor significant costs and complexities that lots of customers won’t come with an appetite for. Rather, organizations should think about a safe and secure SD-WAN solution-one which integrates all functionality right into a single solution and management console without all of the added and unnecessary complexity and overhead.

Big Data Made Small

That which was surprising to all of us could be that the 20-years old Polish adware and spyware Prosiak 65 was probably the most prevalent virus trigger detected by our sensors throughout the preceding six-month period. Throughout the presentation, the Fortinet presenter flagged this statistic was anomalous, and indicated towards the audience he had discussed it having a Fortinet Data Researcher to ensure the data.

We view this same adware and spyware jump onto the top five Global Adware and spyware list within our FortiGuard Threat Set of multiple occasions (30th June 2017 and 24th November 2017), why would a defunct virus sample from almost twenty years ago make this type of major appearance within our world-wide stats?

Beware the Walking Dead

Prosiak 65 is really a adware and spyware which was first seen almost twenty years ago. Just like many older adware and spyware, additionally, it remains in circulation. As the overall prevalence of Prosiak 65 has declined across locations, we've and then see repeated activity - together with a spike during 2018 and through the current six several weeks.

There's a couple of explanations why a classic bit of adware and spyware like this can be triggering our systems:

• It might be genuinely still active (by active, we mean being seen by our Audio-video engine, why it's active is really a different question).
• It might share components having a newer strain of adware and spyware that our signatures are triggering
• It might be an incorrect positive

To find out which of those reasons apply, the Fortinet threat research team has investigated this in additional depth, and believes the signature W32/BackDoor.Prosiak.65 is properly identifying the sample found here on VirusTotal. From your in-house testing we've proven that, while early, this adware and spyware can continue to run and infect files on Home windows XP and Home windows 7 systems.

Our analysis from the data has proven that although the recognition spike has elevated levels of volume, it's lower in prevalence. For instance, within our Threat Landscape Report for Q4 2017, Prosiak 65 was seen on under 1% of companies. So when measured during the last thirty days, we view it on under 1,000 devices. However, the entire quantity of detections in that same there was a time around 665,000 hits, with the majority of the causes of individuals detections being in the systems a lot of our largest ISP customers, without any specific concentrate on region or industry. The precise causes of this consistent amount of triggers is unclear at the moment, and we're still investigating the origin.

With more than 5 million devices offered worldwide, a trigger from just 1,000 devices sounds trivial. However, 665,000 hits isn't. The task we face when presenting similarly info is presenting it inside a consistent manner and putting it into context in order to be helpful. We have to make sure we're not governing the data to appear convenient, or aren't bending it towards the message we are attempting to get across, and that's why we make use of a peer-review process to guarantee the precision of knowledge and how it's being presented.

Conclusion

May be the information wrong? We don’t believe so, although we're still investigating. We all do, however, think the ranking is skewed by a lot of triggers from the relatively few devices. We chose to make this very reason for the SEMAFOR conference.

Will it need further analysis? Without a doubt any anomalous information such as this is scrutinized by our data scientists and FortiGuard Threat Research team therefore we can find out more.

Do we have to take a look at the way we present our data? Potentially, however, we don't want to exclude information to really make it easier and fit a story.

Extending Security into the Next-Gen Branch Network

As organizations turn to enable their remote branches and locations with all the power and potential of digital transformation, they're finding that they must re-think all of their WAN strategy. For a lot of, the initial step is to replace aging WAN connections with SD-WAN to be able to provide robust applications, for example unified communications, better enable interconnectivity between different branch offices, and extend security towards the fringe of the branch.

However, this still leaves the branch office itself-usually without onsite IT staff-requiring to reach speed with all of those other network. However, today’s next-gen branch offices not just require same functionality, additionally they are afflicted by exactly the same risks as all of those other distributed network. Direct internet access and SaaS applications, for instance, considerably expand the possibility attack top of the branch, along with the growing proliferation of IoT and BYOD devices, creating multiple network edges past the WAN edge.

This explosion of edges, which all should be guaranteed, causes many organizations to find it difficult to implement sufficient security in their distributed enterprises, including in the new branch. The complexness of managing these edges - including frequently complicated and overlapping point products and appliances - adds yet another challenge. Consequently, organizations adopting SD-WAN have found that they must look for a vendor that may more tightly integrate their SD-WAN security and management functionality to their branch systems.

The Brand New Fortinet Secure SD-Branch

To combat this concern, Fortinet is delivering the industry’s first complete Secure SD-Branch solution, enabling customer to converge security and network access and extend the Fortinet Security Fabric towards the branch. This latest SD-Branch solution is composed of the next elements:

• FortiGate Next-Generation Firewall for robust security, connectivity, and management over the branch atmosphere. The FortiGate NGFW includes the industry’s first purpose-built SD-WAN processor, coupled with advanced network traffic management functionality for example application steering to make sure high application performance on any WAN link. The FortiGate solution now includes advanced sensor functionality for elevated device visibility and traffic anomaly recognition with the requirement for additional hardware.
• FortiSwitch and FortiAP provide consolidation of branch services with the convergence of security and network access with FortiLink. FortiSwitch and FortiAP integrate with FortiGate to increase SD-WAN’s benefits in to the network access layer. This permits network managers to produce and enforce exactly the same network security policies over the enterprise, including to the network branch.
• FortiNAC Network Access Control provides visibility in to the branch infrastructure by rapidly identifying, profiling, and classifying all devices seeking accessibility branch LAN, including IoT and BYOD. After that it provides device security through dynamic micro-segmentation, and automatic response by constantly monitoring the network.

Securing the WAN Edge

This integrated solution set safeguards the WAN edge in 2 key areas:

• Network Edge protection: FortiGate’s next-generation firewall security is extended with the access layer using FortiSwitch and FortiAP. Additionally to enterprise-class security, additionally, it provides an essential consolidation of services with the convergence of security and network access, making a perfect architecture solution for Secure SD-Branch deployments. Additionally, new Wireless 6 FortiAP Access Points offer greater capacity and throughput to maintain expanding bandwidth needs, with new multi-gigabit FortiSwitch switches support individuals greater Wireless 6 speeds whilst offering greater power (PoE) to operate the most power-hungry IoT devices.
• Device Edge protection: The FortiNAC network access controller provides automatic discovery, classification, and to safeguard IoT devices because they go into the network. The brand new FortiNAC release 8.6 also increases anomaly recognition via traffic checking by leveraging FortiGate like a traffic sensor, without any additional hardware needed in the branch.

Fortinet Secure SD-WAN Again, Receives NSS Labs’ “Recommended” Rating

For enterprises with large figures of branch offices, managing digital transformation for any complex WAN atmosphere could be especially challenging. The requirement for reliable connectivity across and between branch offices, the explosion of IoT and BYOD devices in the branch, critical latency-sensitive business applications like unified communications, and SaaS applications like Office365 and SalesForce have pressed traditional WAN connections towards the breaking point.

Consequently, today’s enterprise organizations are searching to simplify their WAN edge operations and lower overhead, whilst enabling faster cloud adoption. The answer that's causeing this to be possible is SD-WAN. Consequently, greater than 50% or organizations are searching to pilot or adopt SD-WAN in 2019. But because of the growing quantity of vendors within the space, more than 60 different solutions are presently available on the market, choosing the best means to fix lower WAN Costs, establish and keep reliable Quality of expertise, while reducing complexity is challenging.

The need for Third-Party Testing - Are Customers Obtaining the Return on investment Guaranteed by SD-WAN?

Probably the most great ways to start to examine the noise of vendors would be to turn to third-party testing. For instance, most vendors declare that SD-WAN will reduce cost by 40%. But is the fact that really true? And how can you discover?

Rather the important your personal internal bake-offs, third-party testing can offer real life understanding of critical issues for example performance, easy deployment, and true total price of possession-all issues which will make or break an SD-WAN deployment. To that particular finish, the FortiGate Secure SD-WAN solution has gotten its second consecutive “Recommended” rating and also the showcased cheapest TCO - validating the SD-WAN commitment of Return on investment - within the latest third-party test conducted by NSS Labs.

Additionally, the FortiGate SD-WAN solution’s high Virtual private network performance of 893 Mbps, coupled with true Virtual private network overlay functionality that may support interconnectivity between the largest WAN environments, optimizes applications within the multi-cloud world to supply the perfect consumer experience.

Simplifying and Enhancing WAN Edge Operations

The standard enterprise branch uses number of point products to allow worker productivity. For instance, routers that attempt to combine multiple services right into a single device may seem like advisable, however they require multiple management consoles, together with a clumsy CLI interface which will make them so complex - and costly - ­to deploy and trobleshoot and fix. Other SD-WAN solutions require significant overhead to to be able to deploy, support, and keep essential functionality and advanced WAN management abilities for example connectivity, security, and traffic management. Consequently, it may typically take week or several weeks to deploy a brand new branch and significant sources to trobleshoot and fix any network issues.

FortiGate enables true WAN Edge transformation by consolidating key abilities for example SD-WAN functionality, WAN optimization, NGFW, and advanced routing - built purposely-built ASICs made to accelerate critical functions with no overhead of traditional off-the-shelf CPUs. Consequently, within this latest NSS Labs public test, the FortiGate Secure SD-WAN showcased the cheapest TCO of participants, including zero touch provisioning within a few minutes for efficient operations.

Delivering Reliable and Resilient Quality of expertise

As applications change from the datacenter towards the cloud, and traditional MPLS connectivity has been replaced or augmented by internet broadband, the outcome around the traditional branch WAN continues to be profound. Organizations are adopting cloud applications in a considerably faster pace, and running them across hybrid public cloud environments for example AWS, GCP, and Azure.

Traditional WAN systems created for another era are merely not prepared for the broad quantity of services on offer in the WAN edge, nor for that explosive development of WAN traffic that multi-cloud adoption brings. This explosive development of traffic and services in the WAN edge has led to poor application experience, highlighting the requirement for greater bandwidth needs and support for operational complexity.

Fortinet SD-WAN innovations provide the reliable quality of expertise organizations require for his or her business-critical applications. Using its application-focused WAN path controller and multi-path intelligence, the Fortinet SD-WAN solution once more showcased reliable application performance for unified communication and multi-cloud applications in NSS Labs SD-WAN Group Test 2. extreme test conditions.

High availability is yet another critical requirement of enterprise organizations deploying SD-WAN to make sure a reliable and consistent network experience and reliable business continuity. Within this latest NSS Labs test, for instance, Fortinet delivered the greatest quality of expertise in three of the 10 tests for video having a score of four.53, while being exposed to WAN link failure conditions.

Additionally, Fortinet’s WAN Removal functionality provides path awareness intelligence and link removal to delivers reliable application performance through its automated fail-over and fail-back mechanism. This improves cloud application performance by prioritizing business critical applications and enabling branches and branch devices to directly and safely communicate to the web.

The requirement for Integrated Security in the WAN Edge

More and more, organizations are searching to allow direct access to the internet in the branch to find the best possible application experience. But consequently, the attack surface in the WAN edge keeps growing as increasing numbers of local breakouts at distributed locations are introduced. Not to mention, securing these direct internet pathways is crucial for maintaining consistent security posture at WAN Edge. However, area of the challenge is the fact that perimeter security deployed in the datacenter, that has in the past provided WAN protection, just can't take care of the WAN edge transformation. So, while direct access to the internet helps make the existence from the finish-user better, improving the application experience, it doesn’t always result in the existence from the network/security teams simpler-particularly if a completely different group of solutions have to be deployed for SD-WAN and security.

This really is forcing enterprises to re-think their WAN security strategy to check out methods to deploy and keep a regular security posture in the WAN edge. Fortinet, a worldwide leader in security, not just provides comprehensive and fully integrated NGFW protection in their SD-WAN solution, however that NGFW is the only person to possess also received a “Recommended” rating from NSS Labs during the last 5 consecutive years. Within the recent NSS Labs test, the FortiGate NGFW offer high SSL Inspection,-without impacting performance, making certain that additionally to world-class WAN performance and functionality, customer also receive high security effectiveness.

Securing the IoT Edge

The Task of IoT Security

Regrettably, regardless of their prevalence, many of these devices remain inherently insecure - they're not able to be also updated or patched. Addressing the task of securing the IoT and it is devices needs a comprehensive strategy which includes:

Device Assessment: Every IoT device ought to be evaluated because of its natural security prior to it being purchased and appropriate countermeasures be set up. Systems managers also needs to be aware of type and cost from the data it'll generate, and just what other devices it can talk to.

Secure Communications: Make sure that sensitive IoT visitors are encrypted as near for an IoT device as you possibly can.

Traffic Inspection: All IoT traffic, including encrypted traffic, must be evaluated. NGFWs need so that you can provide those visitors inspection services at network speeds.

Network Access Control: IoT devices have to be precisely identified as soon as they connect to the network. NAC can identify and classify devices, assess them for risks, tag all of them with appropriate policies, after which keep a listing of connected devices.

Intent-Based Segmentation: Probably the most effective techniques for securing IoT would be to segment that at the purpose of access.

Conclusion

Once these components have established yourself, securing the IoT edge needs a flexible and integrated security fabric that may integrate the safety factors that span your networked ecosystem right into a single, interconnected, and responsive system. This permits effective monitoring and also the quick recognition and reaction to unauthorized behavior.

This kind of approach expands and ensures resilience, safeguards and isolates distributed IoT sources, and enables the synchronization and correlation of intelligence for effective, consistent, and automatic threat response for just about any IoT device deployed anywhere over the network.

How to Enjoy a Cyber-Safe Summer

This summer time, together with safeguards like travel cover, sun block, bug spray, and keeping the wallet inside your front pocket, you have to also take cyber-safeguards. That’s because cybercriminals would like your money nearly as much as any pickpocket. And when they're not able to steal your hard earned money, they'll steal other information then sell it around the dark web.

To make certain you're as safe online when you are around the beach, listed here are a couple of practical ideas to help you stay safe online this summer time:

1. Keep In Touch Without Losing Your Shirt

While you travel you'll most likely wish to sign in to public Wi-Fi access points. While a number of these are perfectly safe, crooks searching to steal your computer data will frequently publish fake Wireless access points to allow them to intercept data between both you and your shopping online site, bank, home alarm system or wherever else you browse to. This is particularly common at airports and occasional shops - places where you've got a minute to sit down lower and sign in.

This could also happen without you being conscious of it. New smart devices instantly look for known connection points, much like your home Wi-Fi.

“Sophisticated attacks simply ask your device what SSID they're searching for, so when your phone informs them it's searching for your house router, it replies with, “You’re fortunate! I’m your house router.” As well as your phone, not as smart because it thinks it's, goes ahead and connects.”

Listed here are a 2 steps you can take to safeguard yourself from fake Wireless connections:.

Simply ask the office for the their Wi-Fi SSID before you decide to connect.

Install Virtual private network software in your device so that you can make secure, encrypted connections.

2. Weak Passwords

We tend to utilize a large amount of websites that need a login, so remembering a distinctive password for every site might be impossible. It’s why people have a tendency to make use of the same password for everything. However, if a person seems to steal passwords for just one account, they are in possession of passwords for everything

Listed here are a couple of things you can do:

• Make use of a password vault that stores the password for every of the accounts. Then, all you need to remember may be the single password for your application.
• Produce a tier of applications Body looking for social networking, another for in which you repay what you owe, and the other for the bank.
• Set a indication in your calendar to alter individuals passwords every couple of days.
• Whenever possible, use two-factor authentication.

3. Don’t Click That Link

Never open an e-mail or click an attachment from someone you do not know, particularly when it offers a tempting subject line, like a cash reward or perhaps a bill for something didn’t purchase.

Also, have a minute also to take a look at individuals emails from people you're friends with. Compromised email options are regularly accustomed to send adware and spyware to folks within their address book because recipients are far more prone to open individuals emails and attachments. Therefore if an e-mail message appears strange or from character, check before opening it.

“For websites, will the website have an attractive appearance? Would be the links accurate and fast? Exist plenty of popups? Can there be bad grammar, unclear descriptions or incorrectly spelled words? Should you hover your mouse more than a link, you will be able to begin to see the real URL. Will it replace letters with figures, for example amaz0n.com, or perhaps is it abnormally lengthy? If that's the case, don’t click it. It’s a phishing attack, and all sorts of you will get is really a stolen identity. All of these are bad signs.”

4. Monitor Your Social Networking

Avoid announcing your trip on places to waste time. While it may be fun to inform everybody your work, additionally, it lets folks know you're gone, which could place your home in danger.

Likewise, don’t publish private information about you and your family that may be utilized by an assailant to produce a legitimate-searching email with malicious content.

Conclusion

All of us reside in a world where bad things can occur, therefore we lock our cars, deadbolt our doorways, look for both before crossing the road, and steer clear of dark alleyways. You have to get the same cautions whenever you navigate your digital atmosphere - except that you're never 100% safe online. Risk has the territory. However if you simply exercise a little bit of caution, digital world all of us reside in may become a great deal safer. And thus can your summer time.

Cybercriminals Opt for Open Source Tools

Free tools help security professionals evaluate exploits, test defenses, and leverage use real-world examples in training scenarios and conferences. Additionally they enable researchers to watch adware and spyware and attacker behaviors with time, supplying understanding of identifying adware and spyware developers in addition to into predicting generation x of adware and spyware or attack strategy.

Regrettably, cybercriminals have the same websites that researchers do, and in addition they more and more turning their focus on free adware and spyware tools for criminal activities.

Using Free Tools to produce Adware and spyware

Based on Fortinet’s Anthony Giandomenco, cybercriminal developers are impelled through the same Return on investment economic models his or her targets, so “why build a panic attack on your own when another person has done a lot of hard meet your needs?”

Actually, free security and adware and spyware tools can become new attacks with little effort. Ironically, following the developers from the Mirai IoT botnet released its source code, numerous sites published it on the internet. Now, greater than 2 yrs since its release, new variants continue being taken within the wild.

Professional Cybercriminals and Script Kiddies All Benefit

“More experienced attackers can and do combine free code by having an evasion tool such as the Veil-Framework-also is free-to repackage the code to try and bypass anti-adware and spyware. Obviously, the attacker’s capability to easily access this malicious code can provide them a jump on modifying and testing new versions with a lot more abilities.”

- “Open Source Tools Provide Low-cost Development Choices for Cyber-criminals”, May 2, 2019, Infosecurity Magazine

Regrettably, while weaponizing a few of these openware tools needs a amount of developer sophistication, most of the freely available adware and spyware tools could be repurposed very easily.

“If a new wants to get involved with cybercrime and, for instance, hold computers hostage for any ransom, it's not too hard to allow them to exploit certainly one of a large number of proof-of-concept ransomwares by looking into making a couple of simple updates, for example altering the wallet address to transmit payments to, and they're prepared to start attacking.”

- “Open Source Tools Provide Low-cost Development Choices for Cyber-criminals”, May 2, 2019, Infosecurity Magazine

How you can Beat Free Adware and spyware

Since these free tools are frequently caused by advanced research by top security professionals, they offer cybercriminals with a new comer to target unique targets, which makes it not as likely their victims may have sufficient safety measures in position. What this means is they are able to rapidly penetrate the attack surface, establish and obscure a beachhead without recognition, after which move over the network with little resistence.

To satisfy this concern, organizations have to implement specific countermeasures. Included in this are:

• Segmentation to avoid lateral movement over the network
• Behavior analytics to identify minor alterations in traffic
• Automation to boost threat recognition and response
• Real-time threat intelligence to create critical real-time decisions
• Automation and machine understanding how to dominate time-consuming and menial tasks
• Advanced Threat Protection, for example sandboxing, to identify unknown threats
• Fully integrated security solutions that may share and react to threat intelligence like a unified system, it doesn't matter how broadly they've been distributed

By deploying a built-in security fabric that spans today’s extended systems, IT security teams can stand above the cyber threat curve to higher identify and react to threats happening anywhere over the entire attack surface.