Akamai Guardicore Segmentation

Most organizations have a select set of applications that are the lifeblood of their business, from customer-facing web applications to databases containing valuable or sensitive information. Security incidents affecting these types of critical assets can have a significant impact on a company’s business and reputation. Akamai helps security teams give critical applications the security focus they require by providing a visual map of how they work, making it easy to ringfence them with precise segmentation policies, and protectively detecting targeted attacks.

• Visualize critical applications in detail — Understand how critical applications work and communicate, so you can protect them effectively.
• Create granular ringfencing policies — Tightly control how applications function and isolate them to the greatest extent possible.
• Detect and respond to attacks quickly — Employ multiple complementary techniques to detect and mitigate attacks against critical assets.

Akamai Guardicore Segmentation gives you precise visibility and control over third-party access to your IT environments. Akamai’s rich application visualization capabilities, which incorporate contextual labels from orchestration tools and other data sources, make it easy to understand the function of specific applications. Armed with these insights, security teams can implement granular policies that limit application access to specific Active Directory users and groups. This allows organizations to support third-party access needs while limiting security exposure.

• View applications by function — See applications and their communication in context on a customizable visual map.
• Control third-party user access — Narrowly limit users’ access to only those applications that they have a clear business need to use.
• Detect possible user account abuse — Receive timely alerts and supporting information when unsanctioned account usage attempts occur.

Many compliance mandates require organizations to segment sensitive or critical data from the rest of their IT infrastructure. Software-based segmentation makes this process easier, but many solutions do not provide comprehensive visibility into the network, making it more challenging and time-consuming to complete these segmentation projects and validate compliance. Akamai helps businesses accelerate and validate data compliance initiatives by providing a single source of truth for what’s communicating within your network and enabling consistent policy enforcement across IT infrastructures. This simplifies identifying assets in scope, segmenting those assets from the rest of your IT environment, and validating your compliance with real-time and historical views.

Benefits:

• Visualize IT assets in detail — See what’s communicating in your network and easily create labels for all assets subject to compliance mandates.
• Quickly create segmentation policies — Enforce policy in just a few clicks to segment all in-scope assets, accelerating compliance initiatives.
• Validate compliance — Leverage real-time and historical views of your network to validate compliance during audits.

• Fully integrated microsegmentation solution for AWS allows users to see native-cloud information and AWS-specific data on the dashboard.
• Granular visibility at process level adds visibility to your instances down to the process level.
• Take your microsegmentation beyond AWS with simple microsegmentation policies that span regions and VPCs, containers, VMs, and on-premises.

• Gain visibility and discover every pod and container communication flow.
• Apply segmentation policies based on native pod labels that ensure security controls scale and migrate with containers.
• Protect containerized applications in PCI-sensitive workloads and demonstrate compliance.

Today’s rapidly expanding clouds and data centers have become prime targets for infiltration and attacks with alarming frequency. Security teams are hard-pressed to keep pace with the staggering rate of breaches. Akamai Guardicore Segmentation is the only microsegmentation solution that provides a single, scalable platform with real-time threat detection and response capabilities, featuring the following key attributes:

• Multiple detection methods
• Made for the cloud
• Integrated response
• Detailed forensics

• Multiple threat detection methods address all types of threats.
• Investigate threats with automatic analysis and high-fidelity incident data.
• Respond to attacks with mitigation recommendations, while platform integrations accelerate incident response.

Securing IoT and OT devices has traditionally been a challenge for most organizations. With Akamai Guardicore Segmentation, organizations are now able to reduce their attack surface and enforce Zero Trust policies on devices that can’t run host-based security software. Major features include:

• Continuous device discovery 
• Integrated device fingerprinting
• Deep visibility
• Agentless Zero Trust segmentation
• Roaming device awareness

• Discover, visualize, and map all IoT and OT systems alongside your IT infrastructure in a single view.
• Identify and segment high-value systems to protect them from the spread of breaches. No third-party security tool is needed. 
• Assign every device its own fingerprint to ensure that appropriate security policies are applied.
• Prevent and contain ransomware and other malware attacks by applying least-privilege segmentation policies to the network before an attack occurs.

Ransomware, like most malware, relies on lateral movement throughout the network to succeed. Many solutions that claim to protect against ransomware focus their efforts on the perimeter, which is fine until a breach inevitably occurs. Without a proper segmentation solution in place, the scope of the breach can be tremendous. Akamai helps businesses remediate and protect against the effects of ransomware by visualizing all assets that are communicating in your environment, quickly implementing policy to limit communications with the infected assets, and securing ransomware recovery efforts.

Benefits:

• Instant visibility — Immediately visualize your assets and their communications to investigate the breach and validate containment.
• Fast time-to-policy — Enforce policy in just a few clicks to contain the spread of ransomware and limit the blast radius of a breach.
• Prevent lateral movement during recovery — Easily block all incoming connections during recovery to prevent reinfection.