閉める
閉める
明日に向けたネットワーク
明日に向けたネットワーク
サポートするアプリケーションとユーザー向けに設計された、より高速で、より安全で、回復力のあるネットワークへの道を計画します。
          Netskopeを体験しませんか?
          Get Hands-on With the Netskope Platform
          Here's your chance to experience the Netskope One single-cloud platform first-hand. Sign up for self-paced, hands-on labs, join us for monthly live product demos, take a free test drive of Netskope Private Access, or join us for a live, instructor-led workshops.
            SSEのリーダー。 現在、シングルベンダーSASEのリーダーです。
            SSEのリーダー。 現在、シングルベンダーSASEのリーダーです。
            Netskope、2024年Gartner®社のシングルベンダーSASEのマジック・クアドラントでリーダーの1社の位置付けと評価された理由をご確認ください。
              ダミーのためのジェネレーティブAIの保護
              ダミーのためのジェネレーティブAIの保護
              Learn how your organization can balance the innovative potential of generative AI with robust data security practices.
                Modern data loss prevention (DLP) for Dummies eBook
                最新の情報漏えい対策(DLP)for Dummies
                Get tips and tricks for transitioning to a cloud-delivered DLP.
                  SASEダミーのための最新のSD-WAN ブック
                  Modern SD-WAN for SASE Dummies
                  遊ぶのをやめる ネットワークアーキテクチャに追いつく
                    リスクがどこにあるかを理解する
                    Advanced Analytics transforms the way security operations teams apply data-driven insights to implement better policies. With Advanced Analytics, you can identify trends, zero in on areas of concern and use the data to take action.
                        レガシーVPNを完全に置き換えるための6つの最も説得力のあるユースケース
                        レガシーVPNを完全に置き換えるための6つの最も説得力のあるユースケース
                        Netskope One Private Access is the only solution that allows you to retire your VPN for good.
                          Colgate-Palmoliveは、スマートで適応性のあるデータ保護により「知的財産」を保護します
                          Colgate-Palmoliveは、スマートで適応性のあるデータ保護により「知的財産」を保護します
                            Netskope GovCloud
                            NetskopeがFedRAMPの高認証を達成
                            政府機関の変革を加速するには、Netskope GovCloud を選択してください。
                              Let's Do Great Things Together
                              Netskopeのパートナー中心の市場開拓戦略により、パートナーは企業のセキュリティを変革しながら、成長と収益性を最大化できます。
                                Netskopeソリューション
                                Netskope Cloud Exchange
                                Netskope Cloud Exchange (CE) provides customers with powerful integration tools to leverage investments across their security posture.
                                  Netskopeテクニカルサポート
                                  Netskopeテクニカルサポート
                                  クラウドセキュリティ、ネットワーキング、仮想化、コンテンツ配信、ソフトウェア開発など、多様なバックグラウンドを持つ全世界にいる有資格のサポートエンジニアが、タイムリーで質の高い技術支援を行っています。
                                    Netskopeの動画
                                    Netskopeトレーニング
                                    Netskopeのトレーニングは、クラウドセキュリティのエキスパートになるためのステップアップに活用できます。Netskopeは、お客様のデジタルトランスフォーメーションの取り組みにおける安全確保、そしてクラウド、Web、プライベートアプリケーションを最大限に活用するためのお手伝いをいたします。

                                      Next Gen SWG Use Case #5 – Advanced Data Protection

                                      Apr 22 2020

                                      This is a series of articles focused on Next Gen SWG use cases. This is the fifth in a series of six use cases.

                                      In my recent blog about advanced threat protection, I covered how the threat landscape has evolved and how the SWG (secure web gateway) needs to also evolve to be effective in defending against new and emerging threats. The next use case is centered around advanced data protection. While there are distinct capabilities tied to data protection vs. threat protection, they both ultimately aim to achieve the same goal and that is to protect your data. Data protection requirements have also evolved and SWGs also need to evolve their data protection capabilities to be effective in today’s digitally transforming world.

                                      Let’s take a look at five advanced data protection requirements that a Next Gen SWG should support.

                                      1. Improve visibility and stop sensitive data moving between managed and unmanaged cloud apps

                                      Netskope Threat Labs recently reported that the majority of data policy violations occur in cloud storage, collaboration, and webmail apps. This makes sense given that these apps are known to be data-heavy given that they are used to collaborate. What is interesting is that 20% of users move data laterally, including between managed and unmanaged cloud services and between company and personal instances. 

                                      This is a challenge because traditional SWGs do not have the capability to differentiate between corporate-managed, partner, or unmanaged instances of cloud apps, so the result is they have to allow list them so employees can continue to collaborate, uninterrupted. This provides red carpet entry for both external bad actors and malicious insiders to use this gaping hole to steal data. 

                                      A Next Gen SWG needs to be instance-aware to differentiate between corporate-managed, partner, and unmanaged instances of cloud apps. It also needs to be able to apply granular policies to block sensitive data going to unmanaged instances, while allowing the data to go to the managed versions. This is critical for safely enabling collaboration without disrupting the employee’s ability to collaborate.

                                      2. Stop data leaking in web forums, blog comments, and social media with inline inspection

                                      The web is more dynamic than ever with more and more data being uploaded and posted versus just accessed as static pages for viewing. Whether it is health records, financial data, intellectual property, or trade secrets, today’s modern web makes it easy to post and share data for public consumption.

                                      A Next Gen SWG needs to be able to perform inline inspection and blocking of not only files being uploaded, but also content that is being posted in forums, blog comments, and social media.

                                      3. Improve DLP inline inspection efficacy with deep context

                                      Simply inspecting all web traffic and looking for DLP violations can result in an overwhelmingly high amount of false positives. High false positives are the leading cause of alert fatigue and ultimately, a failure of the DLP initiative.  

                                      A Next Gen SWG should incorporate smart inspection with the ability to bring in the surrounding context about the target user, device, location, web category, cloud app, cloud app risk score, cloud app instance, activity, and data. The result is improved efficacy with fewer false positives.

                                      4. Further improve DLP inline inspection efficacy with fingerprinting and Exact Match 

                                      Content formats like medical records, coupon codes, and forms that contain sensitive data are difficult to inspect and can result in both false negatives and false positives when using basic DLP systems.  

                                      A Next Gen SWG should support advanced DLP capabilities like Exact Match, where you can compare the inspection target with a provided reference, as well as fingerprinting with similarity matching, where you can fingerprint content such as blank form data and generate a match when data from the form is filled in and posted to the cloud and web.

                                      5. Perform one-pass inline DLP inspection across cloud and web

                                      A number of SWG vendors have evolved their DLP capabilities by acquiring and bolting on different technologies to cover both cloud and web. The result is multiple DLP engines and multiple consoles resulting in a lot of complexity and inefficiencies.

                                      A Next Gen SWG should be built from the start with the ability to perform one-pass DLP inspection across cloud and web. One DLP engine, one console, and the same compliance templates applied across cloud and web.

                                      Data protection requirements have evolved far beyond what legacy SWG and legacy cloud-delivered SWG products can provide. You can learn more about this Next Gen SWG use case and watch a demo here. Don’t forget to also consider the other use cases and associated requirements covered in this blog series. Stay tuned for my final blog post in this series, which is covering users going direct-to-net.

                                      author image
                                      Bob Gilbert
                                      As Vice President of Strategy and Chief Evangelist at Netskope, Bob is dedicated to helping clients transform their security and networking infrastructure.
                                      As Vice President of Strategy and Chief Evangelist at Netskope, Bob is dedicated to helping clients transform their security and networking infrastructure.

                                      Stay informed!

                                      Subscribe for the latest from the Netskope Blog