Enterprise and Cloud Apps

CORAID: Redefining Storage Economics

Confidential Analyst Presentation
-

January 2010

1

F5/
FishNet
/SecureAuth Present:

March/2012

Secure “BYOD” To
Enterprise and Cloud Apps

2

•
All attendee audio lines are muted

•
Questions will be answered at the end of the session

•
Submit brief questions on the Q&A panel

•
Send longer questions or off
-
line topics via email to
webinar@gosecureauth.com

Welcome

to the Webinar

Presented by F5 Networks,
FishNet

Security,
SecureAuth Corp



Gary
Zaleski
,
F5
Networks



Sr. Solutions Architect


Joey
Peloquin
, F5 Networks



WW Security Architects


Gregg Martin,
FishNet

Security



Mobile Practice Leader


Chris Hayes, SecureAuth Corporation





Sr. System Engineer


Garret Grajek, SecureAuth Corporation





Co
-
Founder and CTO

Agenda

•
Intro

•
F5 APM and BYOD Overview

•
SecureAuth Overview

•
Demo

•
Deployment Discussion

•
Q & A



3

CORAID: Redefining Storage Economics

Confidential Analyst Presentation
-

January 2010

4

F5
Overview and BYOD
Discussion


Datacenter

resources

Utilize existing user
directory

Internal LAN

VLAN 1

Internet

Corporate Users


Corporate Branch
Users

Internal LAN

VLAN
2

Remote

Users

Wireless

Users

BIG
-
IP Access Policy Manager

DMZ


Unified access to internal resources


Centralized policy control that converges remote, wireless and guest
networking access


Smart
-
Connect
-

Edge Client improves client productivity and
mobility


Improves VoIP quality for remote soft phones


Optimized web app delivery to remote users

Access

Web Acc

Access

Unified Access to the Data Center

Saas

/
PaaS

iRules

TMOS Architecture

A unified system for application delivery

Microkernel

Users

Applications

Full Proxy

Client

Side

Server
Side

High Performance Hardware

iControl

Rate Shaping

TCP Express

SSL

Caching

XML

Compression

OneConnect

TCP Express

App Security

Authentication

3
rd

Party

Next Generation Universal Access:

SSL VPN

Authentication (SSO)

Mobile and Remote Users Growing Dramatically

CORAID: Redefining Storage Economics

Confidential Analyst Presentation
-

January 2010

8

SecureAuth Overview


9


Web


Apps

F5 APM and SecureAuth Integration

1. F5 Big
-
IP APM

2. F5/ SecureAuth

•

2F Auth for F5 APM

•

2F/SSO to:

Google

•

Google

•

Other SaaS

Internal
Users and
Admins


SIEMS


(Logging)


Data


Store

3.
IdM

4. Logging


External
Users

Other

Cloud Apps

•
Password Reset

•
User
Mgmt

(self)

•
Help Desk
Mgmt

•
Web SSO
(SharePoint &
others)

•
Syslog

•

F5 SSO to
Web

Functionality

F5

Big
-
IP

and APM

SecureAuth

Load Balancing (LTM)

X

Web Proxy Support including SharePoint, Citrix
XenApps
,
XenDesktop
,
VMWare

View

X

Dynamic Access Control Policies

(User, Group,

IP Address, etc.)

X

Internal Application Integration/SSO

X

User

Endpoint

Inspection

X

(SSL Acceleration)

Multi
-
Gigabit

SSL Encryption Throughput

X

Configurable 2
-
Factor (SMS, Telephony, E
-
Mail, KBA,

Pin,
Help Desk, X.509)

X

Bilateral X.509 (Non
-
Phishable

Authentication)

X

Secure

Mobile Authentication

X

Cloud (
SaaS
/
PaaS
) SSO

X

IdM

-

Identity Management
(Active

Directory / LDAP /
SQL )
2F

Password Reset, User Self
Mgmt
, Help Desk)

X

10

11

SecureAuth
–

Intranet Experience

Intranet Users:

•
Connects Salesforce other apps to AD ID

•
User simply logs into desktop

o
Opens browser

o
Obtains SSO into:


Google Apps,
Saleforce
,
Concure
, ADP Employee Ease,
Postini
, etc.

•
No prompts, password for User!


12

SecureAuth / F5
–

Extranet Experience

Extranet Users:

•
Can conduct a secure 2
-
Factor Authentication

•
Public/Private mode

•
Private:

o
Register once and obtain secure crypto
-
credential

o
All subsequent authentications are Username/Password

•
Public:

o
Secure 2
-
Factor

o
(Phone, SMS, E
-
Mail, KBA, PIN…)

13

SecureAuth
–

IdM

Functionality

SecureAuth Enables:

•
User Accounts

o
On
-
board Profile Information

o
Password Reset

o
Profile Management

o
User X.509 Mobile Provisioning


•
Admins

o
Manage user Profile Accounts

o
Revoke User 2
-
Factor Authentication

14

Demo: SecureAuth / F5 Architecture

CORAID: Redefining Storage Economics

Confidential Analyst Presentation
-

January 2010

Integration/Deployment

by



•
Nation’s Largest VAR

•
500+ Employees

•
28 Offices

•
Expert with F5 and SecureAuth

•
Providing:

•
Implementation, Support, Training


16

17

Integration

Smooth
Deployment

24x7
Support

Training

On
-
Going

Tech Support

CORAID: Redefining Storage Economics

Confidential Analyst Presentation
-

January 2010

Q&A

19

Why SecureAuth:

•

Desktop SSO for Internal Users

•

Password Reset

•

User Self
-
Admin

•


Who

Title

E
-
mail

Phone

Gary
Zaleski

F5 Solutions Engineer

G.Zaleski@F5.com


817.637.4396

Joey
Peloquin

F5 Security Architect

joey@f5.com


817.412.0475

Gregg
Martin

FishNet

Mobile Expert

Gregg.martin@fishnetsecurity.com


202
-
631
-
9311

Garret
Grajek

CTO, SecureAuth

ggrajek@gosecureauth.com

949.777.6970

Chris

Hayes

Sr.

Security Engineer,
SecureAuth

chayes@gosecureauth.com

860
-
383
-
5907

Contacts:

F5 Networks,
FishNet

Security
and SecureAuth Corp.

FishNet

Security


http
://www.fishnetsecurity.com
/

F5
Big
-
IP APM:


http
://
www.f5.com/products/big
-
ip/access
-
policy
-
manager.html

SecureAuth Corp:


http://www.gosecureauth.com


CORAID: Redefining Storage Economics

Confidential Analyst Presentation
-

January 2010

Additional Slides

(for Q.A. / Other)

Key Offerings

•
Secure 2
-
Factor

–
X.509
Basd

Authenticaiton

(non
-
phishable
)

–
Also: SMS, Telephony, E
-
mail, KBA, Help Desk

–
All Platforms:

•
Desktop, Mobile, Tables

•
Cloud/
SaaS

Support

–
Direct Authentication to Cloud Apps

–
Salesforce
, Google, ADP,
etc

–
No
Coing

•
Identity Management

–
Password Reset/Password Sync

–
User Self Service

–
Help Desk


21

Functionality

F5

Big
-
IP

and APM

SecureAuth

Load Balancing (LTM)

X

Web Proxy Support including SharePoint, Citrix
XenApps
,
XenDesktop
,
VMWare

View

X

Dynamic Access Control Policies

(User, Group,

IP Address, etc.)

X

Internal Application Integration/SSO

X

User

Endpoint

Inspection

X

(SSL Acceleration)

Multi
-
Gigabit

SSL Encryption Throughput

X

Configurable 2
-
Factor (SMS, Telephony, E
-
Mail, KBA,

Pin,
Help Desk, X.509)

X

Bilateral X.509 (Non
-
Phishable

Authentication)

X

Secure

Mobile Authentication

X

Cloud (
SaaS
/
PaaS
) SSO

X

IdM

-

Identity Management
(Active

Directory / LDAP /
SQL )
2F

Password Reset, User Self
Mgmt
, Help Desk)

X

22

SecureAuth STS

23

1.
Consume Identity


From varied resources, devices


Desktop, Mobile, Web SSO, AD SSO


2.
Map Identity


From varied resources


Map to relevant data store


3.
Authenticate


2
-
Factor Authentication


SMS, Tele, X.509, PIN,


KBA, Help Desk


4.
Assert Identity


X.509


Web Identity


VPN, Web,
SaaS


5.
Log the event

•
Text, Syslog


24




•

In House Applications

•

Network Resources

•

Outsourced Applications

IT Challenges

SecureAuth: Technical Definition

1.
SecureAuth is:


Fully Functional Authentication/
IdM

Appliance


Hardened OS, Embedded Web Server, Pre
-
built Web Pages,
Data Connectors, Packaged Encrypted Modules, Web Service
Client Connectors


2.
Accomplishing


2
-
Factor Authentication


Web 2F/SSO


VPN 2F/Mobile


SaaS

2F/SSO


Full
IdM

functionality




25

26

SecureAuth IEP: 2F SSO (Web, VPN, SaaS)

27

Why SecureAuth:

•

Desktop SSO for Internal Users

•

Password Reset

•

User Self
-
Admin

•


Who

Title

E
-
mail

Phone

Sales

SecureAuth

sales@gosecureauth.com


+1.949.777.6970

Sales

FishNet

Security

sales@fishnetsecurity.com



+1.816.421.6611

Sales

F5 Networks

sales@f5.com


http://www.f5.com/products/h
ow
-
to
-
buy/

Contacts:

F5 Networks,
FishNet

Security
and SecureAuth Corp.

FishNet

Security


http
://www.fishnetsecurity.com
/

F5
Big
-
IP APM:


http
://
www.f5.com/products/big
-
ip/access
-
policy
-
manager.html

SecureAuth Corp:


http://www.gosecureauth.com