Netskope wurde im Gartner Magic Quadrant für Security Service Edge 2022 als führendes Unternehmen ausgezeichnet. Report abrufen.

  • Produkte

    Netskope-Produkte basieren auf der Netskope Security Cloud.

  • Plattform

    Unübertroffene Transparenz und Daten- und Bedrohungsschutz in Echtzeit in der weltweit größten privaten Sicherheits-Cloud.

Netskope wurde 2022 zum Marktführer im Gartner Magic Quadrant™ for SSE Report ernannt

Report abrufen Netskope Produktübersicht
Netskope führend bei SSE in Gartner MQ 2022

Netskope bietet einen modernen Cloud-Security-Stack mit vereinheitlichten Funktionen für Daten- und Bedrohungsschutz sowie sicherem privaten Zugriff.

Erkunden Sie unsere Plattform
Städtische Metropole aus der Vogelperspektive

Steigen Sie auf marktführende Cloud-Security Service mit minimaler Latenz und hoher Zuverlässigkeit um.

Mehr Informationen
Beleuchtete Schnellstraße mit Serpentinen durch die Berge

Verhindern Sie Bedrohungen, die häufig anderen Sicherheitslösungen entgehen, mithilfe eines SSE-Frameworks mit single-pass Architektur

Mehr Informationen
Gewitter über einem Großstadtgebiet

Zero-Trust-Lösungen für SSE- und SASE-Deployments

Mehr Informationen
Bootsfahrt auf dem offenen Meer

Netskope ermöglicht einen sicheren, cloudintelligenten und schnellen Weg zur Einführung von Cloud-Diensten, Apps und Public-Cloud-Infrastrukturen.

Mehr Informationen
Windkraftanlagen entlang einer Klippe
  • Customer Success

    Sichern Sie Ihren Weg zur digitalen Transformation und holen Sie das Beste aus Ihren Cloud-, Web- und privaten Anwendungen heraus.

  • Kunden-Support

    Proaktiver Support und Engagement zur Optimierung Ihrer Netskope-Umgebung und zur Beschleunigung Ihres Erfolgs.

  • Schulung und Zertifizierung

    Netskope-Schulungen helfen Ihnen ein Experte für Cloud-Sicherheit zu werden.

Vertrauen Sie darauf, dass Netskope Sie bei dem Schutz vor neuen Bedrohungen, neuer Risiken und technologischer Veränderungen unterstützt. Ebenso bei organisatorischen sowie Compliance Anforderungen.

Mehr Informationen
Lächelnde Frau mit Brille schaut aus dem Fenster

Wir verfügen weltweit über qualifizierte Ingenieure mit unterschiedlichem Hintergrund in den Bereichen Cloud-Sicherheit, Netzwerke, Virtualisierung, Inhaltsbereitstellung und Softwareentwicklung, die bereit sind, Ihnen zeitnahe und qualitativ hochwertige technische Unterstützung zu bieten.

Mehr Informationen
Bärtiger Mann mit Headset arbeitet am Computer

Mit Netskope-Schulungen können Sie Ihre digitale Transformation absichern und das Beste aus Ihrer Cloud, dem Web und Ihren privaten Anwendungen machen.

Mehr Informationen
Gruppe junger Berufstätiger bei der Arbeit
  • Ressourcen

    Erfahren Sie mehr darüber, wie Netskope Ihnen helfen kann, Ihre Reise in die Cloud zu sichern.

  • Blog

    Erfahren Sie, wie Netskope die Sicherheits- und Netzwerktransformation durch Security Service Edge (SSE) ermöglicht.

  • Veranstaltungen& Workshops

    Bleiben Sie den neuesten Sicherheitstrends immer einen Schritt voraus und tauschen Sie sich mit Gleichgesinnten aus

  • Security Defined

    Finden Sie alles was Sie wissen müssen in unserer Cybersicherheits-Enzyklopädie.

Security Visionaries Podcast

Bonus-Episode: Die Bedeutung von Security Service Edge (SSE)

Podcast abspielen
Dunkelhäutiger Mann in einer Webkonferenz

Lesen Sie die neuesten Informationen darüber, wie Netskope die Zero Trust- und SASE-Reise durch Security Service Edge (SSE) -Funktionen ermöglichen kann.

Den Blog lesen
Sonnenaufgang und bewölkter Himmel

SASE-Week

Netskope hilft Ihnen dabei, Ihre Reise zu beginnen und herauszufinden, wo Sicherheit, Netzwerk und Zero Trust in die SASE-Welt passen.

Mehr Informationen
SASE-Week

Was ist Security Service Edge?

Entdecken Sie die Sicherheitselemente von SASE, die Zukunft des Netzwerks und der Security in der Cloud.

Mehr Informationen
Kreisverkehr mit vier Straßen
  • Unternehmen

    Wir helfen Ihnen, den Herausforderungen der Cloud-, Daten- und Netzwerksicherheit einen Schritt voraus zu sein.

  • Warum Netskope?

    Cloud-Transformation und hybrides Arbeiten haben die Art und Weise verändert, wie Sicherheit umgesetzt werden muss.

  • Unternehmensführung

    Unser Führungsteam ist fest entschlossen, alles zu tun, was nötig ist, damit unsere Kunden erfolgreich sind.

  • Partner

    Unsere Partnerschaften helfen Ihnen, Ihren Weg in die Cloud zu sichern.

Netskope ermöglicht das "neue" Arbeiten

Finde mehr heraus
Kurvige Straße durch ein Waldgebiet

Netskope definiert Cloud-, Daten- und Netzwerksicherheit neu, um Unternehmen dabei zu unterstützen, Zero-Trust-Prinzipien zum Schutz von Daten anzuwenden.

Mehr Informationen
Serpentinenstraße auf einer Klippe

Denker, Architekten, Träumer, Innovatoren. Gemeinsam liefern wir hochmoderne Cloud-Sicherheitslösungen, die unseren Kunden helfen, ihre Daten und Mitarbeiter zu schützen.

Lernen Sie unser Team kennen
Gruppe von Wanderern erklimmt einen verschneiten Berg

Die partnerorientierte Markteinführungsstrategie von Netskope ermöglicht es unseren Partnern, ihr Wachstum und ihre Rentabilität zu maximieren und gleichzeitig die Unternehmenssicherheit an neue Anforderungen anzupassen.

Mehr Informationen
Gruppe junger, lächelnder Berufstätiger mit unterschiedlicher Herkunft
Security Defined Cybersecurity Encyclopedia Was ist ein Cloud Access Security Broker (CASB)?

Cloud Access Security Broker (CASB)

8 min read

Was ist ein CASB?

According to Gartner, a cloud access security broker (CASB) is an on-premises or cloud-based security policy enforcement point that is placed between cloud service consumers and cloud service providers to combine and interject enterprise security policies as cloud-based resources are accessed. Think of the CASB as the sheriff that enforces the laws set by the cloud service administrators.

Organizations are increasingly turning to CASB vendors to address cloud service risks, enforce security policies, and comply with regulations, even when cloud services are beyond their perimeter and out of their direct control.

casb definition

 

What are the Four Pillars of CASBs?

These are the foundational building blocks of any CASB solution. All pillars are required to have an effective program.

1. Sichtbarkeit

Companies need visibility and control across both managed and unmanaged cloud services. Rather than take an “allow” or “block” stance on all cloud services, cloud brokerage should enable IT to say “yes” to useful services while still governing access to activities and data within services. This could mean offering full access to a sanctioned suite like Microsoft 365 to users on corporate devices, but web-only email to users on unmanaged devices. It could also mean enforcing a “no sharing outside of the company” policy across a category of unsanctioned services.

While cloud security is the key focus of a cloud access security broker, another value provided is helping you get your arms around cloud spend. A CASB can help you discover all cloud services in use, report on what your cloud spend is, and find redundancies in functionality and license costs. A CASB can produce valuable business and financial information as well as protection.

2. Compliance

Compliance is a major consideration when organizations decide to move their data and systems to the cloud. These compliance standards are meant to ensure the safety of personal and corporate data, and ignoring these concerns can lead to dangerous and costly breaches.

Cloud access security brokers can help ensure compliance in the cloud whether you are a healthcare organization worried about HIPAA or HITECH compliance, a retail company concerned with PCI compliance, or a financial services organization needing to comply with FFIEC and FINRA. A CASB can help safeguard your company against costly data breaches by maintaining the data regulations set by your industry.

3. Sicherheit der Daten

Accuracy comes from using highly sophisticated cloud DLP detection mechanisms like document fingerprinting, combined with reducing detection surface area using context (user, location, activity, etc.). When sensitive content is discovered in or en route to the cloud, the cloud access security broker (CASB) should allow IT the option of shuttling suspected violations efficiently to their on-premises systems for further analysis.

Deeper research on threat observations aids your company in identifying and stopping malicious activity before it escalates, a CASB can act as a gatekeeper and facilitate this. Expert on both IT needs and business practices, CASBs take a skilled approach to sharpen an organization’s security.

4. Schutz vor Bedrohungen (Threat Protection)

Organizations need to ensure their employees aren’t introducing or propagating cloud malware and threats through vectors such as cloud storage services and their associated sync clients and services. This means being able to scan and remediate threats across internal and external networks, in real-time when an employee tries to share or upload an infected file. This also means detecting and preventing unauthorized user access to cloud services and data, which can help to identify compromised accounts.

A CASB can defend an organization against a host of cloud threats and malware. It’s vital for your company to avoid threats that are capable of combining prioritized static and dynamic malware analysis for advanced threat intelligence. Some threats may originate from—or be further propagated by—cloud services, proper threat protection can be your shield.


Ressource: CASB-Vorlage für Angebotsanfragen


 

Was sind die drei wichtigsten Anwendungsfälle für CASBs?

1. Nutzung/Zugriffe regeln

Well-known for efficiency in discovering shadow IT behaviors, CASBs are also savvy across further organization security. A CASB can govern your organization’s cloud usage with granular visibility and control. Rather than take a one-size-fits-all approach by blocking services, CASBs allow you to govern usage based on identity, service, activity, application, and data.

Additionally, you can define policies based on service category or risk and choose from actions such as block, alert, bypass, encrypt, quarantine, and coach for policy enforcement. Finally, you can use these instances to alert your IT team for actions taken against any policy in place for internal monitoring.

2. Daten sichern

Protect and prevent the loss of sensitive data across all of the cloud services in your environment, not just the ones you sanction. Take advantage of advanced, enterprise DLP to discover and protect sensitive data in sanctioned cloud services and en route to or from any cloud service, sanctioned or unsanctioned, whether users are on-premises or remote, on a mobile device or accessing from a web browser, or entering from a mobile app or sync client. Combat loss of data with encryption, tokenization, or upload prevention.

3. Schutz vor Bedrohungen

Guard against cloud-based threats such as malware and ransomware. Start with full visibility of all cloud services, even those using SSL-encrypted connections. Use anomaly detection, and threat intelligence sources such as which of your users has compromised accounts. Then, layer in static and dynamic anti-malware detections, plus machine learning to detect ransomware. Finally, arm the rest of your security infrastructure with your findings through out-of-the-box integrations and workflows. Threats will continue to innovate their approach, so your CASB vendor should too.

 

Die zehn Fragen zur CASB-Produktfähigkeit, die Sie stellen müssen

Your organization is evaluating cloud access security brokers to safely enable sanctioned and unsanctioned cloud services. This list of questions gives you specific, use case-based examples that will help you differentiate the capabilities between the CASB vendors you may be evaluating.

1. Can I control activities in managed and unmanaged cloud applications instead of having to block services altogether?

A: Rather than take a sledgehammer to the service by blocking it, take a scalpel to an activity such as “share”; Do it at a category level – across any cloud storage service, for example. This lets you allow, not block services while mitigating risk.

2. Can I enforce my sensitive data policies in and en route to cloud services? Can I reduce false positives by only looking at cloud transactions that matter?

A: Rather than find and secure content in just your sanctioned service, do it across both sanctioned and unsanctioned services, and for content that’s at rest and en route. Also, minimize false positives and increase accuracy by reducing the surface area through context. Filter out the cloud transactions you care about by removing users, services, categories, locations, and activities from what you inspect and enforce policies.

3. Can I enforce policies based on Microsoft Active Directory groups or organizational units?

A: Rather than upload or enter user data manually, enforce policies that incorporate groups from your enterprise directory such as Microsoft Active Directory.

4. Can I detect cloud activity anomalies like excessive downloads or shares across any service, or if users are sending renamed files or extensions?

A: Rather than detecting anomalies only in sanctioned services or at a coarse-grained level such as access, detect anomalies based on activities across any service, sanctioned or unsanctioned.

5. Can I monitor and report on activity in regulated services, like finance and accounting ones, for compliance purposes?

A: Rather than keep regulated services on-premises, migrate them to the cloud while also complying with regulations such as Sarbanes-Oxley. Report on access and data modifications within cloud-based systems of record.

6. Can I enforce policies remotely, including on mobile and in sync clients?

A: Rather than exclude on-premises monitoring and control from your cloud security model, enforce your policies wherever your users are and whatever their device.

7. Can I mitigate risk against users with compromised accounts?

A: Identify and protect against users accessing your services with compromised account credentials.

8. Can I find and remediate threats and malware in my cloud services?

A: Identify and protect against threats and malware in or en route to or from any cloud service.

9. Do you enhance the value of my existing investments by enabling me to integrate with on-premises solutions such as DLP, SIEM, malware sandbox, and EDR?

A: Rather than deploy cloud security in a silo, make your existing investments more valuable by adding a cloud access security broker.

10. Do you facilitate the deployment options that meet my requirements, including keeping all of my data on-premises? Are you a future-proof investment?

A: Rather than be forced into a CASB vendor’s deployment model, choose the deployment that best fits your requirements, now and in the future.

 

The Role of CASBs in a SASE Dominated Future

With the recent and massive shifts over to the cloud, CASB technology is morphing into something bigger than itself. Combined with other technologies such as data loss prevention (DLP) and Next Generation Secure Web Gateways, CASB is molding into just one piece of what is known as Secure Access Service Edge (SASE) architecture.

SASE combines multiple security and networking technologies to provide comprehensive web and cloud security without the hiccups of traditional perimeter security, such as latency and lack of context into data usage.

What this means is that a singular focus on CASB is no longer an option for companies. It’ll require a combined approach of multiple tools in which CASBs are just a small sliver of this security strategy.


Weißbuch: SASE and the Seven Forces Shaping Security Transformation
Blog: Wohin entwickeln sich CASB und Secure Web Gateways (Proxys)


 

Was ist Security Service Edge (SSE)?

Security Service Edge (SSE) is the convergence of multiple cloud-based security services as part of a Secure Access Service Edge (SASE) architecture. As a component of this architecture, CASB provides granular control of web and application traffic, as well as data and devices in real-time. This control is facilitated by the visibility and insights provided by other SSE capabilities and components, such as secure web gateways (SWG) and user/entity behavior analytics (UEBA).

Netskope ist führend im IDC MarketScape für Cloud Security Gateways 2021

Netskope ist im IDC MarketScape for Cloud Security Gateways sowohl bei „Strategien“ als auch bei „Fähigkeiten“ als Leader positioniert

 

Der Ansatz von Netskope für Cloud Security Gateways (auch bekannt als CASB — Cloud Access Security Broker) wurde von Kunden und Top-Technologieanalysten auf der ganzen Welt durchweg gelobt. Als grundlegender Cloud-Sicherheitsdienst ist CASB entscheidend für die SASE-Architektur und Security Service Edge (SSE), die in den kommenden Jahren aus einer modernen Sicherheitsarchitektur nicht mehr wegzudenken sind.

 

Erfahren Sie noch heute mehr über unsere Platzierung und die grundlegenden Vorteile der Netskope CASB-Lösung.

IDC Marketscape for Cloud Security Gateways - diagram

Ressourcen

Netskope Security Cloud Platform — Datenblatt

Netskope Security Cloud-Plattform

Netskope Risk Insights

Netskope Risk Insights

Netskope Data Loss Prevention (DLP)

Netskope Data Loss Prevention (DLP)

Abonnieren Sie den Newsletter für die neuesten Erkenntnisse zum Thema Cloud-Sicherheit

Mit dem Absenden dieses Formulars stimmen Sie unseren Nutzungsbedingungen zu und erkennen unsere Datenschutzerklärung an.