fermer
fermer
Le réseau de demain
Le réseau de demain
Planifiez votre chemin vers un réseau plus rapide, plus sûr et plus résilient, conçu pour les applications et les utilisateurs que vous prenez en charge.
          Essayez Netskope
          Get Hands-on With the Netskope Platform
          Here's your chance to experience the Netskope One single-cloud platform first-hand. Sign up for self-paced, hands-on labs, join us for monthly live product demos, take a free test drive of Netskope Private Access, or join us for a live, instructor-led workshops.
            Un leader sur SSE. Désormais leader en matière de SASE à fournisseur unique.
            Un leader sur SSE. Désormais leader en matière de SASE à fournisseur unique.
            Netskope fait ses débuts en tant que leader dans le Magic Quadrant™ de Gartner® pour le SASE à fournisseur unique.
              Sécuriser l’IA générative pour les nuls
              Sécuriser l’IA générative pour les nuls
              Learn how your organization can balance the innovative potential of generative AI with robust data security practices.
                Modern data loss prevention (DLP) for Dummies eBook
                La prévention moderne des pertes de données (DLP) pour les Nuls
                Get tips and tricks for transitioning to a cloud-delivered DLP.
                  Réseau SD-WAN moderne avec SASE pour les nuls
                  Modern SD-WAN for SASE Dummies
                  Cessez de rattraper votre retard en matière d'architecture de réseau
                    Identification des risques
                    Advanced Analytics transforms the way security operations teams apply data-driven insights to implement better policies. With Advanced Analytics, you can identify trends, zero in on areas of concern and use the data to take action.
                        Les 6 cas d'utilisation les plus convaincants pour le remplacement complet des anciens VPN
                        Les 6 cas d'utilisation les plus convaincants pour le remplacement complet des anciens VPN
                        Netskope One Private Access is the only solution that allows you to retire your VPN for good.
                          Colgate-Palmolive protège sa "propriété intellectuelle" "grâce à une protection des données intelligente et adaptable
                          Colgate-Palmolive protège sa "propriété intellectuelle" "grâce à une protection des données intelligente et adaptable
                            Netskope GovCloud
                            Netskope obtient l'autorisation FedRAMP High Authorization
                            Choisissez Netskope GovCloud pour accélérer la transformation de votre agence.
                              Let's Do Great Things Together
                              La stratégie de commercialisation de Netskope privilégie ses partenaires, ce qui leur permet de maximiser leur croissance et leur rentabilité, tout en transformant la sécurité des entreprises.
                                Solutions Netskope
                                Netskope Cloud Exchange
                                Netskope Cloud Exchange (CE) provides customers with powerful integration tools to leverage investments across their security posture.
                                  Support technique de Netskope
                                  Support technique de Netskope
                                  Nos ingénieurs d'assistance qualifiés sont répartis dans le monde entier et possèdent des expériences diverses dans les domaines de la sécurité du cloud, des réseaux, de la virtualisation, de la diffusion de contenu et du développement de logiciels, afin de garantir une assistance technique rapide et de qualité
                                    Vidéo Netskope
                                    Formation Netskope
                                    Grâce à Netskope, devenez un expert de la sécurité du cloud. Nous sommes là pour vous aider à achever votre transformation digitale en toute sécurité, pour que vous puissiez profiter pleinement de vos applications cloud, Web et privées.

                                      How Do Web Security Vendors Claim, “Any App” Support?

                                      Sep 09 2019

                                      For administrators of web security solutions, they know that claims of ‘any and all’ coverage is fraught with suspicion knowing there are always exceptions and the “devil is in the details”.  In our previous blog, we addressed using a cloud API for managed apps and a proxy for app API traffic in secure web gateways for both managed and unmanaged apps, ending on the note vendors are likely to make the claim of ‘any app’ support for their solutions. The reality is apps are taking over URL filtering, and custom app API web traffic requires visibility and monitoring for granular policy controls in web security solutions.

                                      Most organizations use over 1,200 apps on average, where more than 95% are unmanaged and in use by business units and users without IT administration rights.  So, what are the ways a security vendor can claim they support ‘any app’ in their secure web gateway (SWG), cloud access security broker (CASB), or next-generation firewall (NGFW) solution?    

                                      First, is making the blatant claim in your presentation title, as done by one vendor at RSA in San Francisco and then beginning the presentation noting it is a lie and over exaggerates the solution’s capabilities.  Minus one point for making the claim, however, plus one point for being honest it is not true.  

                                      Second, is providing basic ‘allow or deny’ app controls, which are coarse-grained and draconian at best.  What if an employee has company and personal accounts for an unmanaged file sharing app noted in our earlier blog?  Confidential data or malware can transfer between the two instances and simply ‘allow or deny’ control is not enough. Policy controls need to consider what user, device, app, instance, app risk, activity, and content at a minimum. To prevent cloud phishing, rogue account instances spoofing as company approved need to be blocked.

                                      Third, is making the ‘any app’ marketing claim on vendor websites, event banners, and in sales collateral materials for prospects.  The reality for these vendors is you have a tool that can learn any custom app API to create a template, however, there is no maintained library in the 1000s of these app API templates.  So, the marketing claim is true, the solution just requires some assembly, monitoring, and regular maintenance by each customer. This sounds like adopting a new puppy dog and your current lack of adequate staffing, skill sets, and limited time does not allow it.  But wait, what if we got lots of people involved using the tool, and that leads to the next concept. 

                                      Fourth, is launching an open community where customers can create their own custom app API templates and share them with other customers using the same vendor web security solution.  This is the ‘internet as a sweat shop’ business model where you get other people to complete your work in the guise of being open and a good net citizen. Hey, it worked great for YouTube, why not security?  The problem lies in maintaining the custom app API templates on a regular basis as app vendors update and change API formats, normally unannounced and during business hours (aka Murphy’s Law). Communities are great for static information contributions, however, not so good for dynamic app API formats.

                                      Fifth, is addressing the problem with the required technology and resources for your customers.  You are probably saying to yourself, “now that’s an innovative concept”. Run app discovery processes on a continuous basis to learn and prioritize apps for API templates.  Today, Netskope covers approximately 36,000 apps in its Cloud Confidence IndexTM risk profiles.  Next, develop an advanced custom app API proxy backed by a library of over a thousand app templates using both machine learning and humans to detect API updates and changes to publish timely updates for customers.  Lastly, enable multiple deployment options for inline proxy app controls, including GRE and IPsec tunnels, forward proxy, reverse proxy, SSO/IAM integration, and traffic steering clients.  

                                      Again, recognize over 95% of apps are unmanaged with no IT administration rights or a cloud API for CASB API integration.  Inline proxy controls within web gateways need to monitor unmanaged app API traffic just as effectively as URLs for web sites and this will be the topic of our next web security blog.

                                      author image
                                      Tom Clare
                                      Tom Clare is a Product Marketing Director, his focus at Netskope centers on product strategy with marketing experience in web/cloud proxies, data protection, and more.
                                      Tom Clare is a Product Marketing Director, his focus at Netskope centers on product strategy with marketing experience in web/cloud proxies, data protection, and more.

                                      Restez informé !

                                      Abonnez-vous pour recevoir les dernières nouvelles du blog de Netskope