[music] Parag Thakore: I would say encourage security buyers and security people to also start thinking about performance characteristics and optimization and whether that infrastructure can deliver that for them or not. And they don't need to be experts, it's a very simple question in terms of, "Hey, can I get this high-performance connectivity from this Cloud security that I'm purchasing or that security vendor that I'm looking for?" So I think ease of operations and that high-performance connectivity is something that security should also look at as a criteria when they look at security platforms.
[music] Producer1: Hello and welcome to Security Visionaries. You just heard from today's guest, Parag Thakore, SVP of Borderless WAN at Netskope. As the evolution of business models continues, CIOs need to start thinking about converging the responsibilities of networking and security teams and simplifying the end user journey. Netskope is doing just that by collaborating with SD-WAN leaders to deliver fast, secure, and cost-effective access for branch and remote users. Before we dive into Parag's interview, here's a brief word from our sponsor.
Producer2: The Security Visionaries Podcast is powered by the team at Netskope. At Netskope, we are redefining Cloud, data and network security with a platform that provides optimized access and zero trust security for people, devices, and data anywhere they go. To learn more about how Netskope helps customers be ready for anything on their SASE journey, visit netskope.com.
Producer1: Without further ado, please enjoy Episode 21 of Security Visionaries with Parag Thakore, SVP of Borderless WAN at Netskope and your host, Mike Anderson.
Mike Anderson: Welcome to today's episode of the Security Visionaries Podcast. I'm your host, Mike Anderson. I'm the Chief Digital & Information Officer here at Netskope. Today I'm excited to be joined by one of my peers here, Parag Thakore. Parag, how are you doing today?
Parag Thakore: I'm doing great. Thank you Mike and thanks for inviting me.
Mike Anderson: Yeah, absolutely. Obviously, you joined us almost a year ago from our acquisition of Infiot and you now serve as our senior vice president of our borderless SD-WAN group. Tell us a little bit about your journey and then your journey into Netskope and a little about your background in the networking and security space.
Parag Thakore: Sure, Mike. So my background actually in networking goes back in the Cisco days where there were service providers that I would deal with who would use MPLS networks. And actually, if you look at the MPLS trend, it started more from voice, VOIP. So when data networks and voice networks were converging together, that's where the MPLS market was created and I was a part of that journey creating the ISR Gen 1, ISR Gen 2, which were like branch office routers. And until 2009-2010, MPLS was exploding, which is where everyone was buying MPLS for many-to-many connectivity needs.
Parag Thakore: And suddenly, at that point there was a inflection point where if you look at Cisco, they were acquiring a lot of voice and video endpoint companies and that demands very high video, very high bandwidth for voice and video to run on that. So if you look at our video call, each video stream would be 10 megs and MPLS link would be one and a half megs and it would cost $400 a month. So that's where we started thinking from more of like, "How do we help customers so that it can be more cost-effective for them to run these networks?" Because you can't upgrade your MPLS bandwidth to that extent because that was gonna be really expensive.
Parag Thakore: So I left Cisco at that point and I became the VP of products and also the founding member of a company called VeloCloud Networks, which is one of the market-leading software-defined WAN companies. The word SD-WAN didn't exist. We created that market. Right now it's a pretty big market, people know about it. So from there, what SD-WAN gave is this whole commodity bandwidth, commodity broadband links, and you could run your networks over it rather than MPLS and it gave you that reliability over Internet links and easily manage your branch offices.
Parag Thakore: What it didn't give you and which is where we started Infiot was more about this many-to-many connectivity because what we saw was the enterprise perimeter was expanding. In fact, I remember a conversation where I was presenting SD-WAN and the customer said, "Man, I didn't understand a single word of SD-WAN." And to look into the problem, we said, "Okay." You go out to their factory floor and they point to this big machine and they say, "That's my new branch and inside the branch I have sensors." Or if you look at all of us working from home today, those are extensions of your branch offices or you look at the multicloud environment. So what we noticed is SD-WAN was not designed for this many-to-many world and that's where we got out after the acquisition. VeloCloud got acquired by VMWare. Right after the acquisition we got out and started Infiot and then from there on, Infiot got acquired by Netskope as of last year.
Mike Anderson: That's great. It's been a... And it's an amazing journey. I heard that a lot of the, what we see as the software-defined WAN companies out there today have roots back to that same Cisco team you were on years ago before even founding VeloCloud. So a lot of good talent in that team for sure.
Mike Anderson: So probing in a little bit more, I know we, when we looked at the market obviously from a Netskope standpoint, we've been looking at SASE and for the longest time we were delivering one side of the equation, which was the Cloud security stack and then obviously, as you were looking at the SD-WAN business or the borderless SD-WAN business, that many-to-many, it made a nice coupling to bring together as companies look at the whole "What does a single vendor SASE market look like as we go forward in the future?"
Mike Anderson: So you've been here almost a year now. So talk to me a little bit about your current role at Netskope and what are some of the things that you're really focused on? What are some of the big things you feel like now with this merge of security service edge and SD-WAN, if you think about the SASE architecture, what are the cool things you're working on maybe in that context of that many-to-many you just brought up?
Parag Thakore: Yeah, so I'm the senior vice president for the borderless SD-WAN group, also including SASE where one of our theme is to deliver the same level of consistent performance and secure connectivity everywhere. Whether Parag or Mike as a user is in our office or we are in a cafe or we are in a home office, no matter where we are, now as a single company, we are able to deliver that high-performance and secure connectivity for all these use cases. So really building that platform play wherein ease of use is super critical because you're now dealing with the network team and the security team together and how do you bring these things together so that it's very simple, it's agile, it's cost-effective so it brings your cost down. But more importantly, if you think from a use case perspective, it's all the way from office to the cafe to your home or your multicloud environment and delivering that performance and secure connectivity for all these use cases.
Mike Anderson: That's great. You know I geek out. We've had so many conversations. I geek out on all the technology that you brought to the table to combine with what we have here at Netskope. A lot of our listeners may be going, "Okay, I thought our theme this year was security as a team sport." And I think that you hit the nail in the head when you talked about this really starts to converge the networking and security capabilities in a platform approach. What's your take on the whole notion of security as a team sport?
Parag Thakore: Yeah, I think absolutely. So there's a bit of interesting history there. If you look back in 2010-2013, when we started this SD-WAN journey, at the same time, if you look at it, Netskope and few other vendors were on that Cloud security journey doing the SSE stack. Now back then, one of the notion of SD-WAN in 2010s was, "Okay, I'll give you a direct Internet breakout from every single branch." Now in that process, I was party to that problem, by the way, where I said, "You know what, we will give you good enough security in every single branch." And good enough security is never good enough. We all know that.
Parag Thakore: And with time it has been proven that if you distribute security down to every single branch office, probably it's much more harder to manage because one, it is super distributed and it's very complex from manageability perspective and on the other spectrum, people were backhauling their traffic just for security needs. There were two solutions in the market: Either backhaul and you have performance issues or you bring good enough security down to the branch office, which again has certain challenges for the network vendors. Right now you need to manage distributed security. That's where I think this whole notion of SASE and SSE sweetly splits in because with time it's been proven that Cloud security and SASE in particular is the right way to build your network and security together and these teams have to come along and they have to partner together to build this right framework and architecture.
Mike Anderson: 100%. I've seen this playing out a lot too 'cause you start thinking about, particularly SD-WAN, if you don't have the right partnership between network and security, you could even bypass the security controls that your security team is invested in to complete that whole SASE story. You could have SD-WAN connecting wide open to the Internet and traffic's not even riding over your security service edge, that Cloud edge for security so that it requires close coordination. So what advice would you have for networking teams that you've worked with in the past as they think about security? I know you talked about it becomes heavy at the edge but what advice would you have? Any tips you could offer?
Parag Thakore: Yeah, you need to look at, sit down with your security peers and come down with set of requirements that you want to dive from network security. You have to sit down as a group and decide what you want, what the priorities are and come up with that right architectural framework.
Mike Anderson: 100%. It's funny, I joked, I made a prediction on a previous podcast that we were gonna have a new job title emerge 'cause I've seen 80% of organizations that still reports into the CIO even though they may also obviously, sit on committees on the board. At the same time though, I've seen CIOs converging their infrastructure team and their security team back together, which is funny 'cause it's almost like a re-convergence 'cause that if you look at where the security budget originally came from 20 years ago, security originally sat as part of the networking group. And so the prediction was we're gonna have a title called Chief Information and Security Officer and we're basically, you've got both of those but we'll see if that plays out.
Mike Anderson: You brought up a really good point. As I think about it, oftentimes our teams end up getting organized not necessarily by capabilities but organized by tools that we own versus those capabilities. And obviously, as we know, the only constant in life is change, and so what's happening is that those capabilities are converging and the tools are converging at the same time and we have to make sure that as the capabilities and the tools converge, we also think about how those teams converge to drive more efficiency in the organization. So the operating models have to change inside our companies as well.
Parag Thakore: And I think Mike, that is where you brought up like, "What's the exciting work we are doing?" That exact convergence is what we are working on because network guys care about high-performance connectivity, security guys care about airtight security. How about we give you both? And how about we give you both not just for one use case but we give it to you for all use cases? And you get all these people on the table and say you can get this one single converged architecture, which is Cloud-native, Cloud-ready for your Cloud apps, for your on-prem apps and across the board and do it for both sides.
Mike Anderson: 100%. I think a lot of times too we get into, you talked about originally you had to educate the market on what SD-WAN was, right? And I know we've gone through that as well 'cause Security Service Edge is a new term in the last two years that the market's had to absorb as well. It always goes back to if I'm a business leader or a CIO, I need to be able to have secure Internet connectivity in the most efficient cost-effective way possible, right? And that is really what SD-WAN brings me and now I can add in the most cost-efficient and secure way possible to get traffic from any device to any device. So I think that becomes a very good message that can be taken out of the market as we think about what does SASE deliver and also SASE in the context, obviously, of what we do here at Netskope.
Mike Anderson: When you look at those functions and responsibilities, obviously, as we see convergence, you start to have Wi-Fi in these devices, you start to have, what would be considered traditional LAN capabilities. How do you think companies should think about that from an operating model standpoint? How should that play in?
Parag Thakore: Yeah, I think you need flexibility from an operating model perspective. The old school models from a business model perspective doesn't fly. You see people wanna deliver services at subscription. People, do they have flexibility on per user pricing? Some people do a bandwidth-based pricing. So I think it is all converging, it's all coming together, but that flexibility and agility is critical from that perspective.
Mike Anderson: We talked about the advice you'd give to people on the networking team. What advice would you give to CIOs and then the, obviously, the security leaders that report to them, the CISOs or even CISOs that report outside the CIO. What advice would you give to them around how they can help as they think about these evolving operating models and changing and converging of capabilities?
Parag Thakore: Yeah, if you look at it like you're chatting with some of the well-known analysts and from a CIO perspective, they need to make SASE a priority. And as they make SASE a priority, it forces down things down underneath because if you're looking for a better simplified network and if you're looking for something that is secure and gives you that high-performance connectivity, SASE has to be one of the top priorities, which it is by the way, when in fact, one of the analysts did a recent survey where SASE was top three technologies across the board, across CIOs and we're talking about not just network security, we're talking about across the board.
Parag Thakore: So we are seeing that and as CIOs make that SASE priority, they make sure that "Hey... Yeah, we could be dual vendor" because not everything is gonna change overnight. So it's gonna be crawl, walk, run phase where initially you are going to have dual vendor strategy and as you simplify things and go into that single vendor side of things, things will start to converge. So how do you reorganize your teams, how do you assign budgets to the right teams so that that decision becomes more simplified? So have that owner and to your point, have that one person own the decision and there is this new title that is emerging. I think that is critical because when that happens, there is somebody who is accountable for that project and he needs to make sure that both sides are driven equally to make that project successful.
Mike Anderson: 100%. And I think one of the things that always comes up, it's like a lot of people when we pivoted to this work-from-home model, a lot of people that had SD-WAN projects, there was a number of people that deprioritized them. There were some that prioritized them higher. I always told people like, "Look, when you go back into your office, if you don't have SD-WAN, all that video traffic that's running on Teams today is now gonna be hair pinned over your network and those circuits are gonna get overloaded." And I guarantee you, the first day someone goes back in the office, you're gonna hear people complaining about "Why is my Microsoft Teams or my Zoom call worse in the office than it is at home?" And it's definitely changed.
Mike Anderson: If we think about the pandemic, we had this, it accelerated people moving to more digital capabilities where those were things they built themselves in public Cloud or they went to SaaS applications. We saw this explosion in digital media, digital engagement, video rich capabilities, and then we also saw obviously hybrid work, which I believe the latest stat we've seen is roughly about 70% of companies expect to maintain a hybrid work policy going forward for how they drive work. How has that changed your view? Maybe how did that influence as you were building Infiot and then now what you're doing at Netskope, how did that impact how SD-WAN had been originally thought of? What problems does it help me solve now in this new hybrid world and these new workloads and things running in public Cloud and the video piece, all those things that we just described?
Parag Thakore: Yeah. So Mike, if you look at it, there are two fundamental challenges. One is what I call as a architectural challenge and the second is what I call as a functionality level challenge. If you take the first one, which is an architectural challenge, you are spot on. What I tell people is you cannot patch your way to a better network or better security. It was like a hodgepodge. When COVID happened, people started working from home, the IT team was scrambling, they did what they could do and put things together. Just throw more resources, throw more servers, you just throw things at the problem. But was that the right way to design that to begin with?
Parag Thakore: And if you look back, I think what you mentioned is absolutely right wherein you go to a branch office and you get SD-WAN and when you go home, SD-WAN vendors were selling appliances for home users, at the same time there was ZTNA client, at the same time there was an SSE client, at the same time you had multiple agents sitting on your laptop doing things and you have a box at your home to give you that high-performance connectivity. So if you think from a multi-product perspective, these are too many products. So from Netskope perspective, what we have done something which is really good from a platform perspective, firstly, it's one software, one platform, one policy, one architecture, wherein the person could be at home sitting on a laptop with an endpoint agent, there is one agent that runs on your laptop, which gives you both endpoint SD-WAN and it gives you this SSE functionality and ZTNA functionality all coming in from a single agent.
Parag Thakore: So that way you don't have this multiple point products, you don't have to carry hardware with you wherever you go. You can get this SD-WAN functionality running on your laptop as a full-blown software. Plus you have the same experience in the branch office because as the same user goes into a branch office, you don't want, again, a fragmented experience. So if you look at this example that you just brought up, wherein a Zoom user, you can say, "Hey, this is a high-priority application in branch." But the minute you go home and you are using your traditional VPN client, you cannot say Zoom or Office 365 or RingCentral is high priority. So how do you converge these architectures so that again, for home user, it is the best solution that you have from a software agent perspective, and then when you go into a branch, you still have a branch device do the things for you?
Parag Thakore: And the same thing applies, by the way, in multicloud, we saw a slew of vendors appear just for multicloud connectivity, for app-to-app connectivity, and then there are other vendors who were just doing wireless WAN. So how do you build this one software, one policy, one architecture so that that software can be running in your branch office from very small to multi gig as an endpoint on your laptop or it could be a wireless WAN for your cellular or it could be in your multicloud environment? And that's key. And then on top of it, you layer all of these connectivity services with security. So that's key for success from a SASE perspective.
Mike Anderson: Parag, those are great insights. When we think about architecture, one of the things we think about, especially in security is complexity is the enemy of security. And so when we have different architectures for every way someone works, it not only creates complexity for our teams, complexity in our tech stack, but it creates more troubleshooting problems for our users that are working from home. And so, definitely, the ability to simplify the architecture and as my favorite quote "Simplicity is the ultimate sophistication" it allows them to get that scale and it allows people to work the same way regardless wherever they work and it takes a lot of the... Eases the complexity for my teams that have to support those users that are really just trying to get their work done from wherever they're working from.
Mike Anderson: One of the really interesting use cases and I know you've got some other use cases you could share but one of the ones that resonated to me because we feel it here at Netskope is we have support agents working from home, and some of those support agents may be living by themselves, they may be living with roommates, they may be living with family members, they may have kids in the house that are streaming or working from home as well, and so as we think about that, we wanna make sure that when our support agents are supporting our customers, we wanna make sure they have a quality voice experience when they're providing support. We don't wanna have disruption in that. And so talk to me a little bit about that use case and how we address that problem and how SASE in general, in this new context we look at, helps solve that problem.
Parag Thakore: Yeah. Mike, you remind me of a interesting story that I had with a customer where back in my previous life, I sold 25,000 hardware units to end customer for working from home to deliver high-performance connectivity for these contact center agents. And what we realized, after a year into the roll-out, I reached out to the customer and said, "Hey, how's the roll-out going?" And so said, "Terrible." I said, "Why?" He said that, "Every time a contact center agent leaves, these agents leave, we have to chase them down to return the units. We give them a $400 Dell laptop with Windows Microsoft operating system running on it and I have a $2000 SD-WAN device running where just to give them that performance and connectivity."
Parag Thakore: And that's where the light bulb triggered, how about I give you that same agent which gives you not just performance but also security for those agents? People want to monitor is the agent working full-time or is he watching Netflix? How productive are these agents working from home, how is the optimization or how is that voice and video, which what you brought up. And how is maybe even some sort of securities functions, control channel for these voice and video, and we have security for that.
Parag Thakore: So it's that high-performance secure connectivity for agents or it could be for employees as well and we see a big market around it. We are probably the only ones at Netskope who has this industry's first, what I call as SASE client, and reason I call it as industry's first SASE client is if you look at it, there are vendors who do SD-WAN appliances like I spoke, there are vendors who do SSE and SSE clients. When you look at SASE, the definition is built from SD-WAN and SSE, but nobody has SD-WAN and SSE 100% software running on the laptop. So from that perspective, we are the only ones and industry's first in fact, to have this SASE client running on your laptop, and it gives you that high-performance connectivity and security no matter where you go, including branch offices, as you come into a branch office, we realize that there are multiple users in a branch office, so you do need a device and we ship you a device for your branch office needs, for your multi-gig needs.
Mike Anderson: It's a great one, and the last thing you wanna do is have more assets you have to go recover back from your employees. I've seen a lot of even IT leaders basically saying, "I'm gonna buy a laptop for an employee," and then once its three-year useful life is up, they can keep that laptop, we'll give them a stipend and we'll go buy a new laptop and we'll do the same thing over again. And so it's interesting, so the last thing we'll do is just have more capital assets that we have to maintain or recover 'cause if they leave before that three years is up, they wanna recover the asset, obviously, and re-deploy it to another user in the organization.
Mike Anderson: When I think about the unified agent, some of the things that's been exciting is we've always looked at our security service edge as bringing contextual awareness to all the different transactions and decisions that I make for a user coming from our traditional, this SSE client. Now as you look at the SD-WAN and bring that together to bring a true SASE client, I know you've been doing some exciting work on taking that context down to the SD-WAN capabilities as well. Can you talk a little bit about that and how does that help the hybrid workforce?
Parag Thakore: Sure Mike. If you look at it, you cannot prioritize or secure what you cannot detect. That's the bottom line. And what we have seen in the past is if you look at SD-WAN vendors and when SD-WAN started back in 2013, there were less and less Cloud workloads back in 2010. The Cloud was still emerging. And if you look at most SD-WAN vendors today, they'll talk to you about, "Hey, we support a few thousand applications at best, 2000-3000 applications."
Parag Thakore: At Netskope we have a world-class Cloud discovery engine from an SSE perspective, as an example, and we support over 60,000 applications from a security perspective. Now we bring that same context down to the SD-WAN, we have that same zero trust engine that was built for SSE, we brought that down to SD-WAN, and it's not just about applications but it's also applications and application risks, user-user risks, device and device risk. So these are different elements which is much broader than what SD-WAN was designed for originally. And with that, what happens is now, if you look at it, you get much broader contextual awareness no matter where the user is, even if the user is in a branch, can I create in a large branch more of an identity-oriented policy? Can I look at the identity risk? Can I look at the device risk and quarantine the device?
Parag Thakore: People who are doing segmentation in SD-WAN base based on VLANs and IPs, and I say, "Hey, yeah, but we have hyper context segmentation." Wherein you don't have to do it based on VLANs and IPs, you don't even know what IoT devices are there in your branch environment, and we can scan all those devices and quarantine those devices as an example, or we can prioritize over 60,000 apps and Cloud apps, which no other vendor can do out there. So net-net of it for me is all the work that we are doing is around, "Hey, you really can't secure or prioritize what you can't discover and that includes users, applications, devices, and much broader than what SD-WAN was originally designed for."
Mike Anderson: Yeah, and I know you and I've talked about this, it's the adding also that capability in the future to do that prioritization also based on sanctioned or unsanctioned applications 'cause that way I check the one box and it forces collaboration amongst teams because people say, "Hey, for some reason every SaaS application seems to be running slow." Well, maybe you're not using sanctioned ones or we need to be partnering more on those. So it kind of forces some conversation because people naturally may have a worst experience with applications that are just brought in from the outside versus things where they've been vetted by security programs and IT leaders to make sure they're safe and secure. And so I think that brings some interesting opportunities as well.
Mike Anderson: So Parag, I wanna pivot and ask you another question. So when you think about SD-WAN, we talked about what's important for network teams, but what's important for security teams is they've to look at there's technology stacks and consolidation opportunities because consolidation has always been an opportunity for IT. How does this present an opportunity for some consolidation, which is now key for them as well?
Parag Thakore: Yeah, I think the security team to me, and I think it comes from security team and also for CIOs, they must bring Cloud network and security together. That's the bottom line. So Cloud has to come in, the network has to come in and security has to come in. So now when security team looks at it, how easy is it to integrate and operate the entire network? That's where it's a teamwork between the network and security teams because you cannot pick a security infrastructure in silos without thinking of how the network will tie into it because both go hand-in-hand together because end of the day, you don't want your network peers to have a real complex deployment from a integration perspective.
Parag Thakore: So I think that simplicity is what the security team should be thinking of, like at Netskope we tell security teams and network teams. We have this world-class new age infrastructure. That's a great example. We are in over 67 regions, probably very low latencies worldwide from a end user to our POP perspective. That's a great example wherein this whole Cloud on RAM both for security and for optimization reasons, whether it's you're optimizing voice or video or you're trying to secure your web and SaaS applications, you need to think about it all. And does that infrastructure give you both of the things that you need from that network and security perspective?
Parag Thakore: So I would say encourage security buyers and security people to also start thinking about performance characteristics and optimization and whether that infrastructure can deliver that for them or not. And they don't need to be experts at some very simple question in terms of, "Hey, can I get this high-performance connectivity from this Cloud security that I'm purchasing or that security vendor that I'm looking for?" So I think ease of operations and that high-performance connectivity is something that security should also look at as a criteria when they look at security platforms.
Mike Anderson: Esse é um ótimo conselho, porque quando você pensa sobre essa consolidação, você mencionou isso antes, o modelo tradicional para implantação de segurança e rede em endpoints era outro agente e outro agente e outro agente, e isso se torna esse cansaço do agente para a TI equipes porque toda vez que eles atualizam seu MacBook OS ou toda vez que desejam implantar uma nova versão do Windows ou corrigir uma máquina, eles precisam testar todos esses aplicativos diferentes em seus dispositivos e, portanto, essa convergência é importante porque a consolidação sempre existiu para os tradicionais As equipes de TI estão sempre buscando a consolidação. A segurança tem adicionado ferramentas, mas agora eles também estão buscando a consolidação. Portanto, isso fornece uma ótima maneira de realmente impulsionar a verdadeira consolidação em segurança e rede e livrar-se da fadiga do agente no endpoint.
Mike Anderson: Então, quero passar para outra pergunta. Uma das coisas sobre as quais falamos frequentemente do ponto de vista da Netskope é em torno deste conceito de criação de melhores cidadãos digitais. Então, queremos que as pessoas não cliquem em coisas nas quais não deveriam clicar, que não tragam novos aplicativos que não sejam aprovados, que não tenham sido avaliados quanto à segurança, que façam parceria com sua TI e segurança equipes em iniciativas de transformação digital. Como você vê agora essa convergência daquele SASE e SD-WAN unificados e trazendo esses princípios até o ponto final, como você acha que isso ajudará a promover melhor essa cidadania digital e como?
Parag Thakore: Então isso é absolutamente crítico, Mike, porque se você acha que é aí que a maior parte do SSE, como o que você mencionou, é para usuários remotos que trabalham em locais remotos e você poderia fazer isso. E agora, quando a mesma pessoa está entrando em um escritório, você quer que a mesma segurança digital chegue com aquela coisa, que essa cidadania seja honrada dentro de uma filial. Então eu acho que é aí que toda a noção dessa segurança de confiança zero baseada no contexto também entra em ação, em que você quer saber quem é o usuário, você quer saber a identidade do usuário, não apenas quando o usuário está remoto, mas também quando o O usuário está no local para que você possa promover essa cidadania digital e, quando o usuário entra em uma filial, estou entrando com um dispositivo gerenciado ou não gerenciado ou tenho esses pontos finais de IoT arriscados que deveria estar fazendo? quarentena para?
Parag Thakore: Então eu acho que é para onde a solução SD-WAN da próxima geração está indo, realmente ter essa solução WAN definida por software de confiança zero e sensível ao contexto e derrubá-la e derrubá-la da perspectiva de desempenho e segurança, como ambos juntos eu acho que é isso que vai promover isso ainda mais.
Mike Anderson: Esse é definitivamente um ótimo conselho e estou ansioso por isso. Estou entusiasmado em implantá-lo internamente também porque quero que todos os nossos 2.500 funcionários da Netskope sejam grandes cidadãos digitais. Você falou sobre SD-WAN da próxima geração, quero nos levar ao próximo segmento do nosso podcast de hoje, que é o que chamamos de volta ao futuro, traga sua bola de cristal. E você acha que os líderes de segurança e TI, CIOs e CISOs esperavam ter investido mais cedo nesta próxima geração de SD-WAN, como você chama de SASE unificado, e por que você acha que esse é o caso?
Parag Thakore: Absolutamente. Se você pensar na simplicidade operacional, simplificando sua rede, não ter esses produtos de múltiplos pontos e ter que mantê-la em fases contínuas, é um saco. Quando conversamos com o CIO, eles nos falam sobre: "Ei, eu tenho essas múltiplas pilhas de segurança e também essas múltiplas pilhas de rede, apenas para conectividade aplicativo a aplicativo em multicloud ou apenas para conectividade remota ou apenas para alta -conectividade de desempenho e estou enviando um aparelho para você." Se você recuar e observar onde estão as soluções hoje, mesmo agora, verá que está completamente fragmentado.
Parag Thakore: Então, reunir essas coisas, ter arquiteturas nativas da nuvem, não ter o que chamo de SD-WAN Gen 1 são soluções gordas, SD-WAN gorda. E você realmente quer migrar para uma solução SD-WAN fina, seja um agente ou um software em sua filial, é esse efeito que eu chamo se você quiser migrar a rede para a nuvem, um bom exemplo é que a segurança já mudou para a nuvem e você deseja mover a computação para mais perto do usuário. Então, esses aplicativos leves que você deseja implantar, eu quero implantar um aplicativo XYZ, quase como uma loja de aplicativos no seu iPhone, é isso que está se aproximando do usuário, mas todas essas funções de rede pesadas estão se movendo cada vez mais na nuvem. Então é esse fenômeno de se livrar da SD-WAN gorda, como ter essa ramificação fina, soluções SD-WAN finas, acho que se eu fosse apostar, acho que é para onde o mundo está se movendo e essa solução de ramificação fina, onde a rede está em a nuvem e a computação se aglomeram cada vez mais perto de onde está a fonte de dados.
Mike Anderson: Acho que é uma ótima previsão. Um dos que tem sido extremamente relevante agora é a IA generativa e todos estão olhando para isso e como isso funciona aqui. Eu tenho essas ideias no futuro, como se você perguntasse: "Por que minha rede não está funcionando?" E vai me dizer: "Essas são as coisas que você precisa fazer para solucionar problemas na sua rede". Não preciso mais ligar para o suporte técnico. O que você vê será a grande coisa que as pessoas vão além do que acabamos de falar, como isso afeta e o que as pessoas gostariam de ter feito em relação à IA generativa e como isso afeta toda a pilha de segurança da rede?
Parag Thakore: Sim, se você olhar para as operações orientadas por IA, que é para onde o mundo também está se movendo, onde quero saber quando um usuário reclama, podemos dizer ao usuário antecipadamente que você tem muitos aplicativos abertos em seu laptop e é realmente não é a rede, mas o seu dispositivo, isso é um problema porque a CPU do seu dispositivo está muito alta ou se é um problema com o Wi-Fi da sua casa ou se o problema é realmente com o dispositivo ou com a sua WAN, e agora, combinando a rede e a segurança juntas, onde está exatamente esse problema? Portanto, ter esse único fornecedor fazendo tudo por você ajuda você nessa estrutura e feedback, porque tendo o lado da rede e da segurança, sabemos onde estão os problemas, onde estão os pontos problemáticos. Então, acho que é aí que você deseja simplificar as coisas para os usuários finais, porque no final das contas, o usuário final é seu cliente e você quer garantir que a vida seja o mais simples possível para esses usuários do ponto de vista da conectividade.
Mike Anderson: Não, 100%. Bem, este foi um ótimo episódio. Uma das coisas que sempre fazemos no final de cada um dos nossos shows é ir para o que chamamos de segmento de sucesso rápido. Então, quero fazer algumas perguntas rápidas para que possamos conhecê-lo um pouco melhor, porque eu realmente gostei do tempo aqui e nossos ouvintes também. Então, primeira pergunta para você: qual foi o melhor conselho de liderança que você já recebeu?
Parag Thakore: Eu diria que é da minha mãe. Então minha mãe é a líder para mim e ela era uma líder serva, e ela, de fato, vendeu sua casa apenas para me conseguir uma passagem de avião aqui para os EUA, para que eu pudesse estudar aqui, então vimos todo tipo de coisas. Então ela tem sido uma líder servidora e para mim trata-se de atribuir tarefas e arregaçar as mangas e ajudar a equipe onde você está atribuindo a tarefa à equipe, mas você também está realmente trabalhando para eles, eles não estão trabalhando para você, e então você arregaça as mangas e faz o trabalho e isso para mim é fundamental. E a outra é aprender rápido e falhar rápido. É absolutamente normal cometer erros, mas você precisa ser honesto, humilde e transparente para admitir seus erros e também perdoar os erros. Então eu acho que para mim todas as decisões que tomei na minha vida pessoal ou na minha vida profissional foram cercadas por ser mais em torno dessa liderança servil.
Mike Anderson: Isso é ótimo. Parece que sua mãe fez um ótimo trabalho lá e uma das melhores líderes para quem já trabalhei me perguntou em nossas reuniões individuais, ela diria como posso ajudar e com o que devo me preocupar? Quais foram duas ótimas perguntas. Adorei o conselho que você recebeu lá, é realmente aquela mentalidade de liderança servil. Então, na próxima pergunta, estamos nos baseando em conselhos de liderança, então se você pudesse comer uma coisa, só poderia comer uma coisa pelo resto da vida, o que seria?
Parag Thakore: Cara, acho que vai ser comida de rua em Bombaim. Então eu volto para Mumbai e estou em alguma rua comendo peixe ou conversando, mas definitivamente é comida de rua em Mumbai.
Mike Anderson: Isso é ótimo. Tive a oportunidade de passar um tempinho em Mumbai na minha última viagem à Índia. Mas não tive a chance de experimentar a comida de rua, então você tem que me orientar sobre as opções certas. A seguir, qual é a sua música favorita e o que ela nos diz sobre você?
Parag Thakore: Ok, acho que será “Não se preocupe, seja feliz”. Obviamente, esse é nosso Bob Marley favorito. Então eu acho que a música fala por si, onde é apenas relaxar, relaxar na vida. Haverá problemas, você viu altos e baixos e basta dar um passo para trás e se divertir.
Mike Anderson: Esse é um ótimo conselho. Acho que foi um conselho tão bom de Bob Marley que Bobby McFerrin também criou sua própria versão com “Não se preocupe, seja feliz” nos anos 80. Parag, foi um prazer ter você no episódio de hoje do Security Visionaries Podcast. Há algum comentário final que você gostaria de deixar ao nosso público, alguma lição que você gostaria que eles tirassem da nossa conversa?
Parag Thakore: Acho que a conclusão número um, discutida e discutida muito sobre isso, é que você deve unir sua rede e segurança na nuvem. O SASE está acontecendo, o SASE está convergindo e é muito importante ter um diálogo com seus arquitetos de rede, com sua equipe de segurança, fazer isso acontecer e até criar aquela nova função que converge essas coisas. Mas a nuvem, a rede e a segurança estão se unindo, isso está acontecendo mais rápido do que parece e está acontecendo agora, então invista seu tempo nisso e procure essa experiência de alta qualidade ao definir requisitos para usuários finais, filiais, multicloud, veja como posso simplifique minha rede e segurança enquanto você faz isso.
Mike Anderson: Bem, esse é definitivamente um ótimo conselho. Mais uma vez, eu realmente aprecio seu tempo neste episódio.
Parag Thakore: Obrigado. Obrigado, Mike.
Mike Anderson: Sei que gostei da conversa de hoje com Parag enquanto ele nos mostrava o SASE e o Borderless SD-WAN e sua jornada. Três conclusões importantes que tirei de nossa conversa. A primeira é que olhamos para o SASE, as pessoas deveriam realmente acelerar seu trabalho nesta área porque realmente há uma oportunidade de impulsionar a simplificação dentro de suas organizações para se livrar do cansaço dos agentes, para realmente convergir em todos os recursos de segurança e rede. E isso traz a segunda parte que aprendi com isso: realmente garantir que reunimos nossas equipes e as ajudamos a trabalhar juntas de uma maneira melhor. E pode ser uma equipe multifuncional ou todos trabalhando sob o mesmo líder, mas é importante que essas equipes trabalhem juntas nessa convergência e certifique-se de revisar seus modelos operacionais ao mesmo tempo para procurar outros maneiras de ser eficiente e, novamente, liberar talentos, liberar pessoas para se concentrarem na construção de novos recursos para sua organização.
Parag Thakore: E por último, mas não menos importante, quando analiso isso, se investirmos em SASE e fizermos isso da maneira certa, isso nos permitirá oferecer melhores cidadãos digitais e criará um mundo melhor, mais consistente e experiência segura dos funcionários para nossos funcionários, estejam eles trabalhando em casa, em uma cafeteria ou em uma filial.
Parag Thakore: Espero que você tenha gostado do podcast de hoje. Eu sei que sim. Muitas informações excelentes e tenho certeza que teremos Parag novamente em um episódio futuro. E quero agradecer a todos os nossos ouvintes por assistirem a este episódio do nosso Podcast de Visionários de Segurança e, por favor, sintonizem nossos episódios futuros, temos toda a nossa biblioteca de todos os nossos episódios disponíveis em Netskope.com e em todas as diferentes plataformas de podcast populares . Sou seu anfitrião, Mike Anderson, CIO e chefe do escritório digital da Netskope. Tenha um ótimo dia.
[música] Producer2: O Podcast Security Visionaries é desenvolvido pela equipe da Netskope. Rápida e fácil de usar, a plataforma Netskope fornece acesso otimizado e segurança de confiança zero para pessoas, dispositivos e dados onde quer que estejam, ajudando os clientes a reduzir riscos, acelerar o desempenho e obter visibilidade incomparável de qualquer atividade de nuvem, web ou aplicativos privados. Para saber mais sobre como a Netskope ajuda os clientes a estarem prontos para qualquer coisa em sua jornada SASE, visite netskope.com.
Produtor1: Obrigado por ouvir Visionários de Segurança. Reserve um momento para avaliar e comentar o programa e compartilhe-o com alguém que você conhece e que possa gostar dele. Fique ligado nos episódios que serão lançados a cada duas semanas e nos vemos no próximo.
Por que Netskope 
){kind=icon}
