Cloud Security Architect | Cloud Security | THE CLOUD NETWORK

Tech: Touchstone: Information Security Summit 2012

GES - Architect to the Clouds — Mon, 20 Feb 2012 16:06:03 GMT

Tech: Touchstone: Information Security Summit 2012

London 20^th February 2012 - @PR2WEB -Tech:Touchstone announces its 3^rd Annual Information Security Executive Summit from the 28^th-29^th February at the Richmond Hill Hotel. The 3rd Annual Information Security Executive Summit will cover the critical issues and considerations that Information Technology and Information Security leaders need to be mindful of when planning their IT strategy for 2012 and beyond.

Speakers at the event include: Tony Hird, Chief Technologist at British Airways Plc., Christophe Gabioud, Global Head of IS at UBS Investment Bank, and Michael Paisley, Head of IS, DP & Business Resilience at Santander UK Group. Each speaker will bring their unique take on how their business implements Information Security Strategy and Technology on a daily basis, as well as the major trends to look out for in 2012.

The summit brings together the most decision ready Senior IT Executives, the foremost Analysts and Vendors in the Information Security Technology Community; to network, discuss and learn about the latest developments in Information Security. It has proved crucial for many businesses to assess their current technological standing and build new relationships and alliances in markets which rely more and more heavily on technology for day to day business process.

“We are excited to host such a high level group of thought leaders in the Information Security space representing some the UK’s largest organisations” said Simeon Turner Managing Director of Tech:Touchstone, “The new threats created by increased workforce mobility and the move to cloud infrastructures is forcing constant reassessment of key strategies. We look forward to facilitating an engaging debate!”

The Information Security Executive Summit 2012 will look to build upon previous year’s success of bringing the best in business together to formulate and build new partnerships. Sponsors of the event include: Symantec, Trend Micro, Imperva, McAfee, NetWrix, FoxT and LogRhythm

About Tech:TouchStone

Tech:Touchstone creates business-to-business events, with its latest event being the Information Security Executive Summit on the 28^th-29^th February, for the IT sector where face-to-face communication is paramount to fully understand complex issues, solutions and value propositions.

The company's portfolio of events focuses on areas of strategic industry debate and growth market sectors, with the aim of creating a collaborative learning environment for time-poor IT executives and to facilitate high value, quality interactions between all participants. If you’re interested in attending this event or any other please contact us on 0208 166 4390

-xx-

Back to Main Page

Gary E. Smith - Architect to the Clouds

Symplified Expands Authentication, Mobile and Deployment Options for Cloud IAM Service

GES - Architect to the Clouds — Thu, 15 Dec 2011 22:07:44 GMT

Symplified Expands Authentication, Mobile and Deployment Options for Cloud IAM Service

Latest Release Integrates with Strong Authentication, Kindle Fire Tablet; Introduces Symplified ONE Offering

BOULDER, Colo., Dec. 15, 2011 – @PR2WEB - Symplified®, theCloud Identity Company, today announced the Winter 2011 release of its cloud identity and access management (IAM) service, a new entry-level version called Symplified ONE™ for businesses that only need to integrate with a single cloud application, and support for the new Amazon Kindle Fire tablet. With this release, Symplified now supports strong authentication for high-trust and sensitive applications that require more robust security than username and password logins. The Winter 2011 release offers pluggable authentication support, multiple authentication level policies, ‘step-up authentication’ and mobile strong authentication.

Gartner, Inc. predicts that at year-end 2016, more than 50 percent of Global 1000 companies will have stored customer-sensitive data in the public cloud . Controlling unauthorized access to applications that interact with this confidential information will require stronger protection than simple username and password security.
To address this need, Symplified now supports strong authentication which can be implemented across all web and cloud applications or on an application-by-application basis. Symplified integrates with industry-leading solutions to deliver cloud-based strong authentication that combines something you know (e.g. a username and password) with something you have (e.g. a credential such as a card, token, or mobile phone). The Winter 2011 release also automates certificate generation and expiration notifications which greatly simplifies the process of cryptographic trust management for SAML federation.

"Many organizations see the benefits of cloud computing, but they often wrestle with the questions it raises for security. Access control designed to link enterprises with cloud environments must preserve security without threatening the efficiencies businesses expect to realize from cloud computing," said Scott Crawford, Managing Research Director of Security and Risk, Enterprise Management Associates. "This includes the need for strong authentication that may be required to meet security or compliance requirements for protecting sensitive information. Symplified is recognizing not only these requirements that organizations bring to cloud opportunities, but also the reality of the expanding role of mobile devices in today's enterprise."

Symplified ONE: Seamless IAM for a Single App
For businesses that only need access management and single sign-on (SSO) for one cloud app like Salesforce.com, the company has introduced Symplified ONE. While Symplified's core offering allows seamless access to hundreds of pre-integrated applications through its Trust Fabric™ and connects a wide variety of users that include external partners and customers, Symplified ONE is an entry-level, low-cost and quick-to-deploy solution designed to give employees simple access to a single cloud app. This new offering enables employees to log on to the corporate network and securely access the cloud application without re-entering their username and password.

Unlike competing small business SSO offerings, Symplified ONE integrates with a company's existing Active Directory without forcing a replication of sensitive credentials outside the firewall. It also does not require the cloud app to support SAML which enables Symplified ONE to work with virtually all apps used by employees. To provide anywhere, any device SSO, Symplified ONE supports access from all leading smartphones and tablets, not just personal computers. Symplified ONE does not require the deployment of any software on desktops or any end-user configuration.

"The cloud is becoming an extension of the enterprise, which means companies expect applications in this environment to support the same levels of security and manageability that are possible inside the firewall," said Eric Olden, CEO of Symplified. "Our new release addresses these requirements by adding strong authentication and the broadest mobile device support in the industry. Symplified ONE makes it easy for companies that only require access management and single sign-on capabilities for one cloud app to get up and running quickly and inexpensively. It is based on an elastic foundation that can scale to dozens of apps as companies adopt new ones. Our vision is to provide seamless access for all."

As the Consumerization of IT Heats Up, Symplified Supports Kindle Fire in the Enterprise
The Kindle Fire is expected to be one of the hottest mobile devices this holiday season, and some analysts predict it could account for more than half of Android-based tablet sales in 2012. As more and more business professionals bring their own personal mobile devices to the workplace, Symplified continues to protect sensitive company information with the industry's first and only mobile IAM portals for cloud apps. In addition to its existing support for iOS and other Android devices, Symplified now supports the new Kindle Fire tablet which runs the Amazon Silk browser. To securely access cloud apps through the unique Symplified mobile SSO portal, users simply enter a URL on their Kindle Fire which generates a tablet-optimized login screen. Once authenticated, they are presented with a personalized portal for one-click SSO to all the cloud and on-premises apps they are authorized to use.

Pricing and Availability
The Symplified Winter 2011 release is available now. Symplified ONE is currently available for qualified organizations. Symplified ONE is priced at $1 per user per month starting at $100 for the first 100 users. Support for Amazon's Kindle Fire tablet is available in January 2012.

About Symplified | The Cloud Identity Company
Symplified provides seamless identity and access management across cloud, web and mobile apps used by employees, partners and customers. The company protects more than 3.8 million identities for customers in the healthcare, financial services, manufacturing, and telecommunications industries. Its Symplified service unifies access management, federated single sign-on, auditing and user management across any access device. Symplified can be delivered using an on-premises managed appliance or via the Symplified Trust Cloud™ which is hosted on the global, massively scalable Amazon Web Services platform. The company has been recognized by the Wall Street Journal, CRN, Network World, the RSA conference, and others for its innovations. Symplified's management team created web access management market originator Securant and the ClearTrust product, which was acquired by RSA Security. The company has received financing from leading venture capital firms Granite Ventures and Allegis Capital. Symplified is headquartered in Boulder, Colo., with offices in Mountain View, Calif.

Visit us on the web at www.symplified.com.

-xx-

Back to Main Page

Gary E. Smith - Architect to the Clouds

Vordel and Cigital partner to Secure the Connection from Mobile Apps into the Enterprise

GES - Architect to the Clouds — Fri, 09 Dec 2011 05:27:47 GMT

.

Vordel and Cigital partner to Secure the Connection from Mobile Apps into the Enterprise
Partnership enables enterprises to securely deploy mobile applications

Boston, MA and Dulles, VA- December 08, 2011 - @PR2WEB -Vordel, a provider of gateways for SOA and Cloud Computing today announced that it has formed a strategic relationship with Cigital , the world's largest consulting firm specializing in software security consulting. Together, Vordel and Cigital will deliver solutions and advice to organizations seeking to deploy business services on mobile platforms. The partnership addresses the security deficit for mobile apps, where many organizations still lack the basic security and integration skills necessary to successfully expose internal applications to mobile devices. The Vordel and Cigital alliance will enable end user organizations to implement best practice security for mobile application integration, in addition to satisfying regulatory compliance and governance policies.

In a recent survey conducted by Vordel of Enterprise Architects at Fortune 5000 firms and Government Agencies, 48% of respondents noted security as a top concern for connecting from mobile and Cloud-based applications into the organization. A further 26% of respondents raised integration complexities between mobile and enterprise applications as a key challenge. Vordel Application Gateway addresses these twin concerns by protecting the confidentiality of internal enterprise application information accessible via mobile apps, while mediating the varying data and interface formats between mobile to enterprise applications programming.

"Driven by the commercial success of smartphones and tablets, CIOs and IT managers are under constant pressure to deliver mobile solutions for their internal employees and customers alike." said Vic Morris, CEO of Vordel. "Securely delivering enterprise services via mobile apps is not a trivial task, because mobile security is not as well established as, for example, service oriented architecture (SOA) security. Vordel Application Gateway solves these problems and together with our partner Cigital, we are helping many companies throughout North America overcome these challenges."

"In spite of the attention paid to mobile development in the last two years, many organizations still lack the awareness and skillsets to address the challenges of integrating and securing mobile applications," said Stuart Dross, VP, Sales and Marketing of Cigital. "We are pleased to announce our teaming agreement and partnership with Vordel. Together we can advise and promote solutions that can resolve the key concerns of our clients."

Cigital has worked with Vordel and its products for many years at a variety of customers and industry verticals ranging from discrete manufacturing and financial services to healthcare. The Vordel Gateway is a high quality product, which fits into Cigital's commitment of delivering optimal security solutions and practices to its customers.

Vordel Application Gateway connects off-premise mobile applications with on-premise applications addressing transport and message level security, identity federation, service level monitoring and enforcement. Furthermore the Gateway offers extensive protocol translation and message transformation capabilities to provide a flexible integration interface for new and legacy applications. The mediation policies run external to the application at wire speed, thus not requiring any intrusive changes to existing application interface. For further information click here.

About Cigital
Cigital, Inc. is the leading software security consulting firm in the world. Established in 1992, Cigital plans and implements initiatives that help organizations ensure their applications are secure and reliable while also improving how they build and deploy software. Our recognized experts apply a combination of proven methodologies, tools, and best practices to meet each client's unique requirements. Cigital is headquartered outside Washington, D.C. with regional offices in the U.S., Europe, and India. For more information visit: http://www.cigital.com.

About Vordel
Vordel delivers fast, safe, connectivity for SOA and Cloud Services. Vordel Gateway provides integration, security, governance, and acceleration for enterprise applications and Cloud based services. Vordel Gateway enables Fortune 5000 enterprises and government agencies to extend their enterprise applications and SOA infrastructure beyond the perimeter to enable Cloud based services and mobile computing. Vordel makes it possible to deliver and consume "Applications Anywhere" with IT's existing applications and infrastructure, without costly upgrades and rewrites.

Media Contacts:

Anne Marie McCallion, ReturnPR
annemarie@returnpr.com
+ 353 86 834 9329

Terri Randolph, Cigital
trandolph@cigital.com
703-404-5757

Hugh Carroll, Vordel
press-info@vordel.com
+353 1 234 2500

-xx-

Back to Main Page

Gary E. Smith - Architect to the Clouds

TELUS Selects Juniper Networks for Its Mobile Security Management

GES - Architect to the Clouds — Mon, 28 Nov 2011 23:47:00 GMT

TELUS Selects Juniper Networks for Its Mobile Security Management

Secure Mobility Offering Addresses Enterprise and Small Businesses Demand for Anytime, Anywhere Access From Employees' Personal Devices

SUNNYVALE, CA and VANCOUVER, BC—(@PR2WEB - November 28, 2011) -
Highlighted Links
Juniper Website
Juniper Networks (NYSE: JNPR), the industry leader in network innovation, and TELUS, a leading national telecommunications company in Canada, announced today that TELUS has selected Juniper Networks® Junos® Pulse Mobile Security Suite, which delivers a comprehensive mobile device security and management offering.
The rate at which employees are bringing their own personal devices to the workplace and demanding access to corporate networks is accelerating. Through these offerings from Juniper, TELUS is providing enterprises and small businesses robust security services to manage and address the 'Bring Your Own Device' initiative, helping them attain a high level of employee flexibility and productivity while maintaining their data and network security.
News Highlights

With the Junos Pulse Mobile Security Suite, customers are provided a comprehensive mobile device security and management offering supporting Apple iPhones and iPads, Google Android, RIM Blackberry and broad range of other mobile devices assisting customers in securely managing their data-hungry devices.
Enterprise IT departments will benefit from key capabilities including remote configuration, provisioning and enforcement of access and security policies, on-device security enforcement, application inventory and management, advanced heuristic-based antimalware, device and data loss and theft protection (via remote device locate, track, wipe and lock).
Junos Pulse Mobile Security Suite protects employee devices as well as the corporate network resources and applications they access.

Quotes
TELUS
"With threats to mobile devices and enterprises at an all-time high -- and hackers turning their attention from the desktop or laptop to the smartphone and tablet -- our customers are looking for an easy to deploy, mobile security offering, and Juniper's mobile security suite fits that bill perfectly. In addition to mobile security, loss and theft protection, and back-up features, our customers are demanding technology services that support, manage and secure a wide range of mobile devices to access their corporate networks."
-Yogen Appalraju, vice-president, TELUS Security Solutions
Juniper Networks
"As companies change corporate policies and allow employees to bring their own devices into the enterprise networks, they must also change and enhance their security infrastructure. Through Junos Pulse integrated offering with TELUS, end users benefit from simplified access to security solutions, and businesses can protect and preserve the security and integrity of their data, network and resources."
-Sanjay Beri, vice president and general manager, Junos Pulse Business Unit, Juniper Networks
Additional Resources:

Tweet: @TELUS Selects @JuniperNetworks for Mobile Security Management
Read more about Juniper Security on our blog Network and Security Now Blog
Learn more about Junos Pulse Mobile Security Suite
Follow Juniper Security on Twitter: https://twitter.com/JuniperSecurity
Juniper Networks on Facebook: http://www.facebook.com/JuniperNetworks

About TELUS
TELUS (TSX: T) (TSX: T.A) (NYSE: TU) is a leading national telecommunications company in Canada, with $10.3 billion of annual revenue and 12.6 million customer connections including 7.2 million wireless subscribers, 3.6 million wireline network access lines, 1.3 million Internet subscribers and more than 450,000 TELUS TV customers. Led since 2000 by President and CEO, Darren Entwistle, TELUS provides a wide range of communications products and services including data, Internet protocol (IP), voice, entertainment and video.
In support of our philosophy to give where we live, TELUS, our team members and retirees will, by year-end 2011, have contributed $245 million to charitable and not-for-profit organizations and volunteered 4.1 million hours of service to local communities since 2000. Eleven TELUS Community Boards across Canada lead TELUS' local philanthropic initiatives. TELUS was honoured to be named the most outstanding philanthropic corporation globally for 2010 by the Association of Fundraising Professionals, becoming the first Canadian company to receive this prestigious international recognition.
For more information about TELUS, please visit telus.com.
About Juniper Networks
Juniper Networks is in the business of network innovation. From devices to data centers, from consumers to cloud providers, Juniper Networks delivers the software, silicon and systems that transform the experience and economics of networking. Additional information can be found at Juniper Networks (www.juniper.net).
Juniper Networks and Junos are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks and Junos logos are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners.

-xx-

Back to Main Page

Gary E. Smith - Architect to the Clouds

DSM selects TITUS to Prevent Data Leaks; Making it Easier to Identify Sensitive Data

GES - Architect to the Clouds — Thu, 03 Nov 2011 01:09:45 GMT

DSM selects TITUS to Prevent Data Leaks; Making it Easier to Identify Sensitive Data

TITUS Classification chosen by life sciences company to raise awareness and educate employees to better protect corporate information

AL Utrecht, the Netherlands (Infosecurity.nl 2011 – Booth A104) – November 2, 2011 – @PR2WEB - TITUS, a leading provider of security and compliance solutions for email and documents, today announced it has been selected by DSM for classification and protection of their corporate documents. DSM, a global science-based company active in health, nutrition and materials, will be using TITUS Classification for Microsoft Office to provide classification at the user-level to educate, raise awareness and prevent data breaches among their employees.

“With over 22,000 employees in various locations around the world, we needed a tool that would help employees securely interact with corporate data,” explained Luc Dupuits, Chief Information Security Officer at DSM. “TITUS Classification solutions educate and raise security awareness among our users, helping them to better understand the value of data.”

Data leaks can have a significant impact on business. With TITUS Classification for Microsoft Office, every Microsoft Word, Excel, and PowerPoint document is classified, labelled and protectively marked before it is saved or printed. Users are prompted to identify the sensitivity of data within their familiar Microsoft Office environments, allowing TITUS to apply a visual label to the document in the header and footer so others in the organization can clearly see the information is sensitive. Additionally, TITUS will embed metadata which existing DLP solutions can read and use to make informed policy decisions, such as whether to encrypt or to keep information internal.

Involving the User: Educate, Raise Awareness and Prevent Data Loss

TITUS user driven security solutions are a critical component of an effective data loss prevention strategy, and the ideal complement to any enterprise DLP solution. A user driven security solution provides several critical components for an effective data loss prevention strategy, including:

· actively educating users on organizational security policy

· raising user awareness of sensitive or confidential information

· providing greater control over managing the movement of sensitive documents

“We see examples in the news every day of organizations feeling the effects of their corporate information being inadvertently leaked,” said Tim Upton, President and CEO of TITUS. “Organizations such as DSM understand that they can do something to prevent these leaks, and are taking the step of proactively deploying a solution such as ours to educate users and protect information. They are involving their users as a key part of their overall data loss prevention strategy. ”

About TITUS

TITUS is the leading provider of security and compliance software that helps organizations share information securely while meeting policy and compliance requirements. Our solutions enable military, government, and large enterprises to raise awareness and meet regulatory compliance by visually alerting end users to the sensitivity of information. Products include TITUS Classification, the leading message, document and file classification and labeling solutions; TITUS Aware, products that enhance Data Loss Prevention by detecting sensitive information at the desktop; and the TITUS family of classification and security solutions for Microsoft SharePoint. TITUS solutions are deployed to over 1.5 million users within our over 300 military, government and enterprise customers worldwide, including Dow Corning, United States Air Force, NATO, G4S, Paternoster, Pratt and Whitney, Australian Department of Defence, and the U.S. Department of Veterans Affairs. For more information, visit www.titus.com or the TITUS Data Security and Compliance blog.

DSM – Bright Science. Brighter Living.™

Royal DSM N.V. is a global science-based company active in health, nutrition and materials. By connecting its unique competences in Life Sciences and Materials Sciences, DSM is driving economic prosperity, environmental progress and social advances to create sustainable value for all stakeholders. DSM delivers innovative solutions that nourish, protect and improve performance in global markets such as food and dietary supplements, personal care, feed, pharmaceuticals, medical devices, automotive, paints, electrical and electronics, life protection, alternative energy and bio-based materials. DSM’s 22,000 employees deliver annual net sales of about € 9 billion. The company is listed on NYSE Euronext. More information can be found at www.dsm.com.

-xx-

Back to Main Page

Gary E. Smith - Architect to the Clouds

Vordel 6.2 sets Industry Benchmark for Ease of Use and Deployment of Complex SOA and Cloud Policies

GES - Architect to the Clouds — Fri, 21 Oct 2011 00:41:36 GMT

Vordel 6.2 sets Industry Benchmark for Ease of Use and Deployment of Complex SOA and Cloud Policies

Vordel offers unrivalled combination of power, flexibility and ease-of-use for policy developers

Boston, MA - October 19, 2011 – @PR2WEB - Vordel, a provider of fast, safe, connectivity for SOA and Cloud services, today unveiled version 6.2 of its market leading Vordel Application Gateway. With this latest version, Vordel once again raises the industry benchmark for product usability enabling the creation of simple to very complex policies to control and monitor Cloud and SOA services. Key enhancements to the policy development environment in version 6.2 offer the end-user even greater flexibility and scalability when designing and implementing policies. This benefits the organization by reducing deployment lifecycles and simplifies the on-going policy maintenance and extension process.

As businesses integrate their SOA, Cloud-based and mobile applications, policies have inevitably become increasingly complex. Vordel Policy Studio simplifies this process, offering a powerful and intuitive graphical policy development environment that ships with Vordel Application Gateway. Vordel Policy Studio enables simple configuration, customization and extension of the Vordel Application Gateway allowing it to meet even the most complex requirements. This is an improvement on the option of using wizards to simplify initial policy development as policy visualization is a superior choice for on-going policy maintenance. As a result, Vordel Policy Studio has set the industry benchmark for best-of-breed design. Additionally, it enables developers to create and manage simple to very complex policies leading to increased productivity and development efficiencies.

"As the SOA and Cloud Gateway market evolves, the use cases and requirements become ever more complex for IT departments. In a nutshell, Vordel does the heavy lifting for the IT department. Customers can now use the Gateway to improve the overall efficiency of their SOA and Cloud Service development processes by reducing their policy design and maintenance times," said Isabelle Mauny, Head of Product Management with Vordel.

Mauny continued, "The Application Gateway ships with over 120 pre-built policies and filters that perform specific integration, transformation, logical, or security tasks. These policies cover the most common usages scenarios, third party technologies and open standards encountered by development teams."

Vordel 6.2 Highlights Include:

Streamlined policy management

Gateway configuration all easily managed in one place
View fine-grained request and response performance
Easy-to-use Web-based user interface
Search and categorization of filters

Policy Versioning

Policy versioning across environments and users.
Synchronized versioning across configurations

Powerful Global Policies

Time-saving global policies
Application across multiple gateways

Updated Traffic Monitoring

Powerful new "performance" tab for Traffic Monitoring
Tracking performance of individual services

For more on the Vordel Application Gateway 6.2 release, download data sheet here. Vordel Application Gateway 6.2 is available today and all enquiries should be directed to sales@vordel.com or call US 1866 460 0987 or ROW+ 44 203 427 5082

About Vordel
Vordel delivers fast, safe, connectivity for SOA and Cloud Services. Vordel Gateway provides integration, security, governance, and acceleration for enterprise applications and Cloud based services. Vordel Gateway enables Fortune 5000 enterprises and government agencies to extend their enterprise applications and SOA infrastructure beyond the perimeter to enable Cloud based services and mobile computing. Vordel makes it possible to deliver and consume "Applications Anywhere" with IT's existing applications and infrastructure, without costly upgrades and rewrites. To learn more and obtain a free evaluation of Vordel's products follow us on twitter and our blogs.

-xx-

Back to Main Page

Gary E. Smith - Architect to the Clouds

TechTarget Cloud University Now Open - Lesson 1: Cloud Security In Context

GES - Architect to the Clouds — Sat, 17 Sep 2011 13:03:19 GMT

TechTarget Cloud University Now Open - Lesson 1: Cloud Security In Context

TechTarget invites you to enroll in TechTarget’s all-new Cloud University – a unique online education program designed to target the core constituents of your organization affected by cloud computing.

Each lesson – which is "taught" by a key industry expert knowledgeable in your specific role – builds on the previous one, and provides you with the knowledge needed to make informed decisions on your path to cloud computing.

This classroom, Cloud Security In Context – taught by Dick Mackey, Vice President at System Experts Corporation, an independent consultancy in the security and compliance market, is designed to bring you up to speed with the key concepts of cloud security. When completed, you’ll have the knowledge to advise your company on how to move to the cloud in a secure way that makes sense for your business.

COURSE DESCRIPTION (Each Lesson Approximately 5 Minutes In Length)

Lesson 1: Cloud Security in Context

In this lesson, Dick Mackey discusses the issues that enterprise IT shops must consider when determining whether they will deploy internal services to the cloud or consume services that exist in the cloud.

Lesson 2: Cloud Interoperability and Standards

In this lesson, Mackey introduces cloud interoperability and management concepts and explains how the current state of cloud computing limits choices and movement of services from cloud provider to cloud provider.

Lesson 3: Compliance in the Cloud

In this lesson, Mackey discusses how cloud computing affects compliance with various regulations and contracts. You’ll get an overview of particular regulatory requirements – including PCI, HIPAA, PCI DSS and others – and their demands on cloud consumers and providers, as well as an introduction to issues such as encryption, data segregation, monitoring, auditing and testing.

Lesson 4: Legal and Contractual Issues in the Cloud

In the final lesson, Mackey discusses the types of terms that consumers of cloud services need to include in contracts with providers. Discover why issues such as data protection and disposal, incident response and coordination, availability requirements, and transparency of operations must be considered.

Best of all, when you’ve completed the course, see what you’ve learned by testing your knowledge with our Final Quiz!

Find out for yourself what Cloud University offers and enroll in this class today!

-xx-

Back to Main Page

Gary E. Smith - Architect to the Clouds

BIG-IP Edge Gateway Earns 2011 Readers’ Choice Award from Information Security Magazine and SearchSecurity.com

GES - Architect to the Clouds — Tue, 13 Sep 2011 23:27:52 GMT

BIG-IP Edge Gateway Earns 2011 Readers’ Choice Award from Information Security Magazine and SearchSecurity.com

F5’s unified access and acceleration solution tops Best Secure Remote Access Products category

SEATTLE, SEPTEMBER 13, 2011 @PR2WEB – F5 Networks, Inc. (NASDAQ: FFIV), the global leader in Application Delivery Networking, today announced that the F5^® BIG-IP^® Edge Gateway^™ solution has been recognized as part of the TechTarget^® Information Security^™ magazine and SearchSecurity.com^™ 2011 Readers’ Choice Awards, highlighting the industry’s best security products. F5 was named a Gold Winner in the Best Secure Remote Access Products category, finishing above offerings from Juniper and SonicWALL.

“Recognition from industry experts and professionals provides further evidence of the compelling value proposition offered by F5’s security and access solutions,” said Mark Vondemkamp, Director of Product Management, Security at F5. “As enterprises seek to support a broader range of smartphones and tablets, they’re looking for scalable solutions like BIG-IP Edge Gateway that can integrate a number of application services to provide seamless access and an optimized user experience.”

An article announcing award winners on SearchSecurity.com noted that, “Readers gave BIG-IP Edge Gateway high marks for end-user transparency and ease of use. Authentication support was also rated highly by users of the product, in addition to BIG-IP Edge Gateway’s outstanding gateway functions and ease of management and support.”

Details

The 2011 Readers’ Choice Awards program was structured around extensive, in-depth discussions and interviews between TechTarget editors, security technology experts, and the TechTarget User Advisory board—made up of chief security officers from major U.S. corporations—to define the appropriate categories and criteria that encompass critical security technologies and functionality.

Following this determination, TechTarget then asked more than 1,500 readers—largely composed of information security executives and managers—to assess and rate products they deploy within their organizations from a listing of more than 360 products. Based on their cumulative responses, the judging panel selected Gold, Silver, and Bronze award winners in each of the 14 security product categories.

BIG-IP Edge Gateway combines remote access VPN, site-to-site VPN, SoftWOC, web acceleration, and WAN optimization services on a single, easy to manage device. The solution secures and accelerates application delivery to remote office and mobile users. BIG-IP Edge Gateway can scale to support more than 1,000 logins per second and up to 60,000 concurrent user sessions, with greater than 10 Gbps of SSL VPN throughput.

For more information on F5’s win in TechTarget’s Information Security magazine and SearchSecurity.com 2011 Readers’ Choice Awards, please visit:

http://searchsecurity.techtarget.com/magazineContent/Best-secure-remote-access-products-2011

Additional Resources

· BIG-IP Edge Gateway Product Information

· BIG-IP Edge Gateway Voted Best Secure Remote Access Product – F5 DevCentral Blog Post

About F5 Networks

F5 Networks, Inc., the global leader in Application Delivery Networking (ADN), helps the world’s largest enterprises and service providers realize the full value of virtualization, cloud computing, and on-demand IT. F5^® solutions help integrate disparate technologies to provide greater control of the infrastructure, improve application delivery and data management, and give users seamless, secure, and accelerated access to applications from their corporate desktops and smart devices. An open architectural framework enables F5 customers to apply business policies at “strategic points of control” across the IT infrastructure and into the public cloud. F5 products give customers the agility they need to align IT with changing business conditions, deploy scalable solutions on demand, and manage mobile access to data and services. Enterprises, service and cloud providers, and leading online companies worldwide rely on F5 to optimize their IT investments and drive business forward. For more information, go to www.f5.com.

You can also follow @f5networks on Twitter or visit us on Facebook for more information about F5, its partners, and technology. For a complete listing of F5 community sites, please visit www.f5.com/news-press-events/web-media/community.html.

F5, BIG-IP, Edge Gateway, and DevCentral are trademarks or service marks of F5 Networks, Inc., in the U.S. and other countries. TechTarget and the TechTarget logo are registered trademarks of TechTarget, Inc., and Information Security and SearchSecurity.com are trademarks of TechTarget, Inc. All other product and company names herein may be trademarks of their respective owners.

This press release may contain forward looking statements relating to future events or future financial performance that involve risks and uncertainties. Such statements can be identified by terminology such as "may," "will," "should," "expects," "plans," "anticipates," "believes," "estimates," "predicts," "potential," or "continue," or the negative of such terms or comparable terms. These statements are only predictions and actual results could differ materially from those anticipated in these statements based upon a number of factors including those identified in the company's filings with the SEC.

-xx-

Back to Main Page

Gary E. Smith - Architect to the Clouds

Dome9 Unveils Industry’s First-Ever Cloud Server Security Management Service for Automated and Elastic Security

GES - Architect to the Clouds — Tue, 13 Sep 2011 00:12:02 GMT

Dome9 Unveils Industry’s First-Ever Cloud Server Security Management Service for Automated and Elastic Security

Dome9 Launches First Commercially Available SaaS Solution for Enterprises, SMBs and Cloud Hosting Providers to Deliver Cloud Server Security Management

SAN FRANCISCO – TechCrunch Disrupt 2011 – Sept. 12, 2011- @PR2WEB – Dome9 Security^™, the leading provider of cloud security management for public and private clouds, as well as for dedicated and virtual private servers (VPS), today at TechCrunch Disrupt 2011 announced the general availability of its new first-of-its-kind, multi-platform security management service that automates cloud server security for both enterprises and cloud hosting providers.

Previously available under beta, Dome9’s new commercially available service introduces two new service plans and many new capabilities to deliver simple and scalable security management for private and public clouds across all server operating systems and service providers. Dome9 uniquely automates and centralizes cloud server security across hosting and cloud providers – leveraging the security built into every cloud server operating system or virtualization technology – with dynamic policy controls to automate security. Dome9 is unveiling its SaaS offering and publicly demonstrating it for the first time this week at TechCrunch Disrupt 2011 in San Francisco at its exhibit in the Israeli Pavilion.

Dome9 Security also today announced its formal partnership with GoGrid. For more information, see http://www.dome9.com/press-center/gogrid-and-dome9-security-partner-for-cloud-security-management .

“Whether virtualizing their data centers or moving to private and public cloud computing architectures, enterprises should look to automate and reduce the complexity of their security infrastructure, either from solutions they deploy or require to be provided by their cloud services providers,” said Neil MacDonald, VP and Gartner Fellow. “Next-generation security solutions need to be elastic and scalable, just like the cloud, and able to deploy consistent policies across physical and virtualized servers, as well across on-premises based workloads and the public cloud.”

Today’s cloud security is ill-equipped to efficiently scale and provide coverage for elastic cloud servers. Traditional, on-premise security fails to cover the cloud, forcing administrators to keep access open on their cloud servers so they can connect to and manage their machines. Security provided by cloud providers is often limited, complex and manually operated, and isolated to each provider’s cloud. The result is that most of today’s cloud servers are left vulnerable to attack because their security has been too costly and cumbersome to manage.

“Security in the cloud must be as elastic as the infrastructure it protects,” said Zohar Alon, Dome9 co-founder and CEO. “Without efficient and effective management, security controls are often misapplied, leading to vulnerable infrastructure. Dome9 is providing the first-ever multi-cloud security management platform that centralizes and automates cloud server security on a higher plane than the infrastructure.”

Unlike dedicated software or hardware-based firewalls and security tools that can cost thousands of dollars every month and require tremendous resource to manage, the new Dome9 service leverages security already built into every hosted and cloud server, costs just $20 per server per month, is deployed in less than a minute, and offers unprecedented ease of use. Dome9 provides one-click, secure-access to customers’ cloud servers through its key innovation, an industry first, called Secure Access Lease^™ technology.

Secure Access Leases provide dynamically generated, time-based secure access to cloud servers that automates security policy to make servers virtually invisible to hackers. With Secure Access Leasing, all administrative access on a cloud server is closed by default, and opened only when, for whom, and for as long as it is needed. Dome9’s Secure Access Lease technology automatically enables and disables cloud server access for a specific user and time period. This automation eliminates the manual overhead of managing access, and closes the security gap that results from administrators forgetting to log back in and disable access.

“We have hundreds of servers, and 70 percent are virtualized in our private internal cloud,” said Larry Whiteside, CISO of the Visiting Nurse Service of New York. “With Dome9, I can now have a singular management console that gives us the cloud security capability that we need. Time-based access versus me having to leave access open all the time is a good example. If access is open for just a small window, I reduce my risk. Dome9 will give us consolidated management of our infrastructure, no matter what server environment we are in, which is very attractive.”

Because Dome9 is multi-platform, it centralizes security management across multiple cloud service providers (e.g., AWS EC2, RackSpace, Terremark, GoGrid, etc.) enabling customers to apply a consistent security architecture to multiple clouds. In addition, Dome9’s security policy is portable, so as cloud servers are migrated or replicated within or across service providers, security is persistent.

“Security of cloud servers is a top priority at GoGrid, and Dome9’s Partner Server Image offers a unique approach in automating and controlling secure access to the GoGrid cloud,” said Jeffrey Samuels, GoGrid Chief Marketing Officer. “We work with many partners to enhance our customers’ experiences, and Dome9 is an exciting new service that we’re pleased to announce.”

In addition to unveiling commercially available packages, Dome9 is also premiering several new capabilities, including:

Multi-tier Administration – Dome9 now offers several tiers of administration with configurable levels of control for delegated administrators. With multi-tier administration, super-users can have full control over all cloud servers, while delegated administrators may be granted partial or limited access to a predefined set of machines.

Expanded Windows and Linux Support – The Dome9 agent now supports CentOS 6.0 and Ubuntu, covering all major versions of Linux and Windows operating systems, including CentOS/RHEL 5.x and 6.0, Debian 6, and Windows 2008 R2, 2008, 2003 R2 and 2003.

Account Activity Auditing – Dome9 auditing provides full, account-level visibility and logging of user activity. Advanced filters let administrators drill down to see when users have logged on to Dome9 Central, changed security policies, sent secure access invitations, and accessed cloud machines.

Cloud-Friendly Billing – Customers using Dome9 commercially can now enjoy metered, pay-as-you-go billing, so they pay only for what they use. This lets customers pay for the protection they use with a security and billing model that is as elastic as their cloud infrastructure.

“Every cloud server comes with a built-in firewall, and Dome9 turns these firewalls into your front line of defense,” said Alon. “In addition to making our service available on our website, we’re partnering with hosting and cloud providers to deliver Dome9 as a value-added security option to their hosting services that users need and require, increasing ARPU and lowering support costs, while at the same time increasing the overall security of their service provider network itself.”

The heart of the system, Dome9 Central, orchestrates access to the cloud infrastructure, allowing full control and protection of the environment. Dome9’s simple-to-use interface with built-in best-practices enforcement ensures users build the right security policy for their servers. Using Dome9 Central’s secure web service, cloud access can be granted from anywhere and changes are deployed instantly. The lightweight, yet powerful, Dome9 Agent works for virtual machines in private or public clouds, and for dedicated servers, supporting Linux and Windows servers running all virtualization technologies (including VMware, Citrix Xen, KVM, Parallels and Microsoft’s Hyper-V). Dome9 Connect, its API-based integration module for cloud providers, can be used to manage Amazon’s Web Services EC2 & VPC Security Groups, without deploying complex daemons, but by using their API keys.

Pricing and Availability

Available today, Dome9 is a monthly subscription service with pricing starting at $20 per server per month, based on the number of servers and admins. A free, 14-day full-featured trial is available. Also available is a free personal use plan, which includes support for one server with one administrator.

About Dome9 Security

Dome9 is the leader in cloud security management-as-a-service. Available for the enterprise and hosting providers, Dome9 provides dynamic security policy control for Clouds, Virtual Private Servers (VPS), dedicated servers, and Amazon’s EC2 Security Groups, across all major operating systems and service providers. Its key innovation is the ability to provide secure access leasing – dynamically generated, time-based secure access to cloud servers, which enables customers to close all server administrative ports by default. Dome9 is headquartered in Tel Aviv, Israel, and is venture backed by Opus Capital Ventures. For more information, please visit: http://www.dome9.com/.

###

Dome9, Dome9 Central, Dome9 Connect and Dome9 Agent are registered trademarks of Dome9 Security. All other trademarks are registered to their respective companies. Copyright© Dome9 2011.

-xx-

Back to Main Page

Gary E. Smith - Architect to the Clouds

Cloud Security Architect | Cloud Security | THE CLOUD NETWORK

Tech: Touchstone: Information Security Summit 2012

Tech: Touchstone: Information Security Summit 2012

Symplified Expands Authentication, Mobile and Deployment Options for Cloud IAM Service

Symplified Expands Authentication, Mobile and Deployment Options for Cloud IAM Service

Vordel and Cigital partner to Secure the Connection from Mobile Apps into the Enterprise

.

Vordel and Cigital partner to Secure the Connection from Mobile Apps into the Enterprise Partnership enables enterprises to securely deploy mobile applications

TELUS Selects Juniper Networks for Its Mobile Security Management

TELUS Selects Juniper Networks for Its Mobile Security Management

Secure Mobility Offering Addresses Enterprise and Small Businesses Demand for Anytime, Anywhere Access From Employees' Personal Devices

DSM selects TITUS to Prevent Data Leaks; Making it Easier to Identify Sensitive Data

DSM selects TITUS to Prevent Data Leaks; Making it Easier to Identify Sensitive Data

Vordel 6.2 sets Industry Benchmark for Ease of Use and Deployment of Complex SOA and Cloud Policies

Vordel offers unrivalled combination of power, flexibility and ease-of-use for policy developers

Vordel 6.2 Highlights Include:

TechTarget Cloud University Now Open - Lesson 1: Cloud Security In Context

BIG-IP Edge Gateway Earns 2011 Readers’ Choice Award from Information Security Magazine and SearchSecurity.com

F5’s unified access and acceleration solution tops Best Secure Remote Access Products category

Additional Resources

About F5 Networks

You can also follow @f5networks on Twitter or visit us on Facebook for more information about F5, its partners, and technology. For a complete listing of F5 community sites, please visit www.f5.com/news-press-events/web-media/community.html.

Dome9 Unveils Industry’s First-Ever Cloud Server Security Management Service for Automated and Elastic Security

Dome9 Unveils Industry’s First-Ever Cloud Server Security Management Service for Automated and Elastic Security

Dome9 Launches First Commercially Available SaaS Solution for Enterprises, SMBs and Cloud Hosting Providers to Deliver Cloud Server Security Management

Vordel and Cigital partner to Secure the Connection from Mobile Apps into the Enterprise
Partnership enables enterprises to securely deploy mobile applications