Recommandé
Contenu connexe
Similaire à Office 365 : Sécuritaire?
Similaire à Office 365 : Sécuritaire? (20)
Plus de ColloqueRISQ
Plus de ColloqueRISQ (20)
Office 365 : Sécuritaire?
- 1. © Copyright Fortinet Inc. All rights reserved. Office 365: Sécuritaire? Mathieu Nantel, Fortinet
- 2. 2 Exchange: le modèle d’antan Mon organisation Sécurité courriel Serveur(s) Exchange Pas mon organisation Pas propre Pas fin ArrangeToiAvecTesTroublesNet (l’InterNet)
- 3. 3 Office 365: la révolution Pas mon organisation Pas propre Pas fin ArrangeToiAvecTesTroublesNet (l’InterNet) JeVaisGérerTesTroubles (le Cloud) Mon organisation Sécurité courriel Serveur(s) Exchange
- 4. 4 Office 365: la promesse Pas mon organisation Pas propre Pas fin Office 365 Mon organisation Sécurité courriel Exchange Online
- 5. 5 Office 365: “chérie, faut se parler” (la réalité) Pas mon organisation Pas propre Pas fin Office 365 Mon organisation Sécurité courriel Exchange Online 2$/usager Pas propre Exchange Online du voisin ATP Vient d’un autre client: pas besoin d’autant de sécurité Acheter Pas de faux positifs!!!
- 6. 6 C’est juste le email: quel est le problème?
- 7. 7 Office 365: Options de sécurité
- 8. 8 Office 365: Sécurité à quel prix? x 30000 élèves =72,000$/mois? Les rabais gouvernementaux sont bons, mais il y a des limites…
- 9. 9 Content Disarm (Office 365: Safe Files, Dynamic Delivery) MESURES ATP Remove macros Neutralize URLs Remove embedded content En simple: Retirer le contenu dynamique et les URLs présents dans les fichiers.
- 10. 10 En simple: Modifier les URLs afin qu’ils circulent par la solution de sécurité courriel lorsque l’usage clique dessus. Click Protection (Office 365: Safe Links) Mantis: 268216 Func Spec: 1755 Mesures ATP
- 11. 11 Impersonation Analysis (Office 365: Anti-Phishing) MESURES ATP Mantis: Func Spec: 6993 * Will be added in 6.0.x En simple: Détecter les tentatives d’hameconage avancées dirigées vers les employés
- 12. 12 La sécurité Office 365 versus FortiMail? On a comparé! Microsoft Office 365 Inspecté un total de 900000 courriels en 30 jours. 12% des courriels identifiés comme propre par O365 détectée comme SPAM 30 messages contenant un malware 195 items détecté comme suspect par sandboxing Identification de 10 expéditeurs internes de mailing list (risques de blacklisting IP)
- 13. 13 Pourquoi la sécurité est moins bonne? Pour éviter les faux positifs! Microsoft cherche généralement à éviter les faux positifs Fait confiance aux autres clients Office365… Les mécaniques mises en place pour la sécurité sont généralement celles qui sont perçues comme « fail-proof » au chapitre des faux positifs. … Même au coût de faux négatifs en extra!
- 14. 14 L’alternative: utiliser une solution de sécurité dédiée!
- 15. 15 FortiMail & Office 365 External Mail FortiMail FortiGuard/ Cyber Threat Alliance Office365 Outlook Client 1 2
- 16. 16 FortiMail & Office365 External Mail FortiMail FortiGuard/ Cyber Threat Alliance Office365 Outlook Client 1 2
- 17. 17 FortiMail, FortiSandbox & Office365 Mail External Mail FortiMail FortiSandbox FortiGuard/ Cyber Threat Alliance 2a2b Office365 Outlook Client 1
- 18. 18 External Mail FortiMail FortiSandbox FortiGuard/ Cyber Threat Alliance 2a2b Office365 Outlook Client 1 FortiMail, FortiSandbox & Office365 Mail
- 19. 19 External Mail FortiMail FortiSandbox FortiGate FortiGuard/ Cyber Threat Alliance 2a2b Office365 Outlook Client 1 2 FortiMail, FortiSandbox,FortiGate & Office365 Mail
- 20. 20 External Mail FortiMail FortiSandbox FortiGate FortiGuard/ Cyber Threat Alliance 2a2b Office365 Outlook Client 1 FortiMail, FortiSandbox,FortiGate & Office365 Mail
- 21. 21 External Mail Office365 Outlook Client FortiMailFortiGate FortiAuthenticator FortiClient 21 FortiSandbox FortiGuard/ Cyber Threat Alliance 3a 3b FortiMail, FortiSandbox,FortiGate, FortiAuthenticator & Office365 Mail
- 22. 22 External Mail Office365 Outlook Client FortiClient 1 FortiSandbox FortiGuard/ Cyber Threat Alliance 3a3b FortiMailFortiGate FortiAuthenticator 2 FortiMail, FortiSandbox,FortiGate, FortiAuthenticator & Office365 Mail
- 23. 23 External Mail Office365 Outlook Client FortiMailFortiGate FortiAuthenticator FortiClient FortiSIEM FortiSandbox FortiGuard/ Cyber Threat Alliance FortiMail, FortiSandbox,FortiGate, FortiAuthenticator, FortiSIEM & Office365 Mail
- 24. 24 FortiMail: super efficacité sur le marché! Valider par plusieurs Independent Testing » ICSA – Advanced Threat Defense » NSS – Breach Prevention Systems » Gartner – SEG Market Report » VBSPAM – 52 consecutive wins, 21 VBSPAM+ Certification » FIPS 140-2 » NDcPP VBSPAM Test Results
Notes de l'éditeur
- For the second year in a row, Email is reported to be the #1 attack vector successfully employed by Cybercriminals. In April of 2018, Verizon reported that 49% of (non-POS) malware was in installed via malicious email- number 1 among techniques. Part of the challenge is that attacks constantly change, with out FortiGuard Labs reporting more than 15,000 unique malware variants seen in 1Q18- an average of 170 each and every day. And email attacks are not just successful, they are rewarding for Cybercriminals. In it’s 2017 Internet Crime report, published in May of 2018, the FBI indicates that it received more than 15,000 complaints of business email compromise for an adjusted loss of $675m last year. As Gartner notes, advanced threats easily bypass the traditional secure email gateway and must be addressed.
- For the second year in a row, Email is reported to be the #1 attack vector successfully employed by Cybercriminals. In April of 2018, Verizon reported that 49% of (non-POS) malware was in installed via malicious email- number 1 among techniques. Part of the challenge is that attacks constantly change, with out FortiGuard Labs reporting more than 15,000 unique malware variants seen in 1Q18- an average of 170 each and every day. And email attacks are not just successful, they are rewarding for Cybercriminals. In it’s 2017 Internet Crime report, published in May of 2018, the FBI indicates that it received more than 15,000 complaints of business email compromise for an adjusted loss of $675m last year. As Gartner notes, advanced threats easily bypass the traditional secure email gateway and must be addressed.
- For the second year in a row, Email is reported to be the #1 attack vector successfully employed by Cybercriminals. In April of 2018, Verizon reported that 49% of (non-POS) malware was in installed via malicious email- number 1 among techniques. Part of the challenge is that attacks constantly change, with out FortiGuard Labs reporting more than 15,000 unique malware variants seen in 1Q18- an average of 170 each and every day. And email attacks are not just successful, they are rewarding for Cybercriminals. In it’s 2017 Internet Crime report, published in May of 2018, the FBI indicates that it received more than 15,000 complaints of business email compromise for an adjusted loss of $675m last year. As Gartner notes, advanced threats easily bypass the traditional secure email gateway and must be addressed.
- For the second year in a row, Email is reported to be the #1 attack vector successfully employed by Cybercriminals. In April of 2018, Verizon reported that 49% of (non-POS) malware was in installed via malicious email- number 1 among techniques. Part of the challenge is that attacks constantly change, with out FortiGuard Labs reporting more than 15,000 unique malware variants seen in 1Q18- an average of 170 each and every day. And email attacks are not just successful, they are rewarding for Cybercriminals. In it’s 2017 Internet Crime report, published in May of 2018, the FBI indicates that it received more than 15,000 complaints of business email compromise for an adjusted loss of $675m last year. As Gartner notes, advanced threats easily bypass the traditional secure email gateway and must be addressed.
- Fortinet’s FortiMail is a consolidated email security platform that helps organizations prevent email-borne threats and data loss, in a single high performance physical or virtual appliance. Organizations benefit from: Top rated threat protection. FortiMail has already earned more than 30 consecutive top VBSpam ratings,demonstrating consistently high effectiveness and accuracy. It’s antimalware technology also routinely earns high marks in Virus Bulletin’s Reactive and Proactive Testing- far above the engines often OEM’d by top competitors. They also receive integrated data protection. These include pre-defined dictionaries and identifiers to detect sensitive information, Identity—based Encryption and even email archiving…all in the same appliance and for the same license charge. Enterprise class email handling such as address rewriting, rate throttling and more are available, as is the ability to integrates seamlessly into service provider environments. This consolidated capability is only possible thanks to the high performance architecture and appliances, with high end models capable of delivering up to 28 million messages per hour. While the high efffectiveness is a result of a leading global threat research team and broad range of technologies all developed in-house.
- Fortinet’s FortiMail is a consolidated email security platform that helps organizations prevent email-borne threats and data loss, in a single high performance physical or virtual appliance. Organizations benefit from: Top rated threat protection. FortiMail has already earned more than 30 consecutive top VBSpam ratings,demonstrating consistently high effectiveness and accuracy. It’s antimalware technology also routinely earns high marks in Virus Bulletin’s Reactive and Proactive Testing- far above the engines often OEM’d by top competitors. They also receive integrated data protection. These include pre-defined dictionaries and identifiers to detect sensitive information, Identity—based Encryption and even email archiving…all in the same appliance and for the same license charge. Enterprise class email handling such as address rewriting, rate throttling and more are available, as is the ability to integrates seamlessly into service provider environments. This consolidated capability is only possible thanks to the high performance architecture and appliances, with high end models capable of delivering up to 28 million messages per hour. While the high efffectiveness is a result of a leading global threat research team and broad range of technologies all developed in-house.
- To reduce administration, FortiMail offers the expected administrative and end user controls like a central quarantine, self-service user digest and automatic tagging an delivery to dedicated folders for categories like newsletters or junkmail.