Name: Using a Security Data Lake to Reduce SIEM Costs
Start: 2023-12-19T01:00:00Z
End: 2023-12-19T01:00:32.000Z
Location: BrightTALK
Rating: 0

Gigamon offers a deep observability pipeline that harnesses actionable network-level intelligence to amplify the power of observability tools. This powerful combination enables IT organizations to assure security and compliance governance, speed root-cause analysis of performance bottlenecks, and lower operational overhead associated with managing hybrid and multi-cloud IT infrastructures.

In this engaging session, our expert speakers, Tim Christie, and Mark Jow, will unveil the revolutionary Gigamon Precryption™ technology.  Discover how Precryption eliminates the biggest blind spot in modern hybrid cloud infrastructure: With Precryption, you'll gain plaintext visibility into all encrypted communications without the need for decryption.

Precryption™ – the New Decryption

It's cloudy out there, what direction are we headed?  

Hybrid Cloud? Multi-Cloud? Cloud Native? Whether you're already there or planning to migrate, it's critical to understand the networking implications that can have a big impact on your happiness. In this webinar, Chris Dittert from Gigamon joins networking expert Aniket Daptari from Nutanix to discuss key architectural considerations and best practices to help minimize the bumps you may encounter in your cloud journey.  

Join to learn more about these issues: 
- Being Cloud smart 
- Three infrastructure mistakes to avoid 
- Seamless workload mobility

Best Practices and Insights to Optimize your Cloud Journey

Threat actors conceal lateral movement and other activity within encrypted communications, making it incredibly difficult to detect. Gigamon Precryption™ technology is a breakthrough approach to eliminating this blind spot in hybrid cloud infrastructure while achieving TLS 1.3 compliance. Precryption offers plaintext visibility into encrypted communications before the payload is encrypted -- no decryption required. Join us to learn how this technology works and hear about four key use cases.  

What you’ll learn: 

- What is Precryption technology is and why is it different? 
- How does Precryption eliminate blind spots and thwart cybercrime? 
- How does Precryption help security teams achieve TLS 1.3 compliance, boost DNS security, and extend Zero Trust Architecture into the hybrid cloud?

See Concealed Threat Activity Before Encryption with Precryption

Regardless of which Zero Trust model you are utilizing, there are some universal solutions that will be common amongst them. Threat actors are observed using the same tactics and techniques over and over again. In this presentation, we will briefly examine two top models and then explore what that means on a practical level. We will broadly look at some traditional network visibility solutions and challenge some of the norms around these systems. Do they really solve the problem in the best way in a world where everything is encrypted and threat actors hide in plain sight? 

Key takeaways:  
- Can classic tools such as logging really solve for the visibility gap? 
- How to deal with the encryption/decryption paradox? 
- What method can solve for lateral visibility?

Zero Trust in An Encrypted World

Security is more complicated than ever. Most organizations still have traditional networks, traditional datacenter assets, and employees inside the network. All those resources must be protected by iterating and innovating on the tried-and-true methods. Watch this webinar to learn how Gigamon uses innovative solutions to lock down the layers of your environment. 

- Is layered security meaningful in a hybrid world? 
- Is a single security model possible? 
- How is Gigamon evolving our own IT against this background?

Securing Your Borders: Evolving Each Layer of Your Security Program

Building defenses, protecting our walls and guarding the castle. They all sounded a lot easier when the castle walls were solid, clear and defined. These days, it can feel a bit more like you are jousting in fog to protect borders you can’t see or define. Not only are bad actors evolving, but the cloud environments you are asked to protect and secure are rapidly multiplying and becoming more complex. It is time to get out of the fog and stop jousting with air! In this webinar, you will learn how to enable a modern security portfolio through identify tools, strategies and solutions to build the protective defense layers your organization needs to secure its’ vital cloud environments.

Modern Security Portfolio – Toolsets Organizations Need Now

Network observability is a hot topic for many reasons: today’s distributed nature of work, hybrid cloud environments (including containers), and the evolving connectivity infrastructure, to name a few. Join industry experts Will Townsend from Moor Insights & Strategy and Michael Dickman from Gigamon as they discuss what network observability is all about, why it's crucial in today's cloud-centric landscape, and developments that could impact you in 2024.

Moor Insights & Strategy: Network Observability in the Cloud: - Why it Matters

As networks grow, so does the resource demands on network monitoring and security tools. Gigamon has an extensive array of tool optimization technologies, designed to extend the life of tools, saving both tool costs and carbon footprint. We’ll talk about the Gigamon tech enabling these savings. Plus, we’ll show you how to estimate your own savings, as well as demonstrate our free Discovery & Optimization Kit, which you can use to directly measure the efficiency savings in your own environment.

Maximizing Tools Efficiency, Minimizing Carbon Footprint

“How can we get clear-text visibility into a modern encrypted 5G core?” is one of the questions we hear most often from our mobile operator customers. Learn how Gigamon addresses this critical visibility issue and how we support the world’s largest mobile operators when they make the choice to go with a converged core, serving both 4G and 5G traffic.

Gain Visibility into Encrypted Core and 4G+5G Converged Core

With today’s evolving hybrid cloud, you can’t afford to compromise when it comes to application performance and security monitoring. Gigamon Application Filtering Intelligence (AFI) reduces tool burden by selectively sending application traffic to tools. Application Metadata Intelligence (AMI) goes one step further to extract application attributes from traffic and then efficiently deliver them to SIEMs, APMs, and observability tools. In this session, Gigamon technical leaders will demonstrate how to use App Intel to isolate performance bottlenecks and solve tough security cases.

Application Intelligence Best Practices: Leveraging Layer 4-7 Capabilities

As networks become more complex, ensuring availability, reliability, performance, and security becomes increasingly difficult. While Gigamon provides powerful troubleshooting capabilities, preventing the occurrence of problems in the first place is a key part of any resilience strategy. Over the years, Gigamon has developed tools and approaches to ensure the optimal health of your network. Learn how to use our no-cost GigaScan and HealthCheck services to assess the health of your network and avoid costly downtime.

How to Get Ahead of Network Issues

Log-based tools make it nearly impossible for CloudOps and DevOps teams to quickly pinpoint customer experience and performance issues. While logs are important for understanding what’s happened on the network, they can’t provide the real-time North-South and East-West visibility that’s needed for effective monitoring and troubleshooting. See how the Gigamon Deep Observability Pipeline delivers network-derived intelligence to MELT (Metrics, Events, Logs, and Traces)-based observability and SIEM tools like Dynatrace and Splunk.

Delivering a Superior Application User Experience

Has a vendor ever told you “Buy us and your Zero Trust journey is complete?” They either don’t understand Zero Trust or think you don’t. In this session, Gigamon Security CTO Ian Farquhar will discuss what it really takes to operationalize Zero Trust. Hear about minimizing implicit trust, implementing constant risk and posture assessments, and how to orchestrate security responses driven by risk determination. Ian will also discuss how to introduce these concepts to improve overall security posture.

Operationalizing Zero Trust: What It Really Takes

Gigamon Deep Observability ensures your tools and Zero Trust policy engine have access to all network-based communications in your organization. For any effective Zero Trust implementation, full network visibility and elimination of blind spots is implicitly assumed.

Operationalizing Zero Trust with Deep Observability

As organizations progress along their Zero Trust journey, many start to pursue approaches which pivot around particular capabilities: endpoint, identity, firewalls.  Often these orgs are paying back some technical debt in doing so, and the vendors who benefit are cheering on this investment.  But is this a truly sensible approach?  Is this Zero Trust truth, or Zero Trust fiction?  How can we plan our Zero Trust journey to reap the benefits Zero Trust can give?

Zero Trust Security: Truth vs. Fiction

Gigamon’s guest, Forrester security analyst, Tope Olufon, discusses the threat landscape and how we can deal with it in very practical terms, using deep observability techniques, visibility into encrypted traffic, and focusing on the network layer.

Forrester – The Power of Visibility in Addressing Today’s Threat Landscape

Join Gigamon’s Ian Farquhar and John Kindervag, the “Creator of Zero Trust” to discuss the lost tenet of Zero Trust; access, inspection and analysis of all network traffic. In 2012 John called it “data access network”, or DAN, today it’s network visibility and elimination of blind spots and why EDRs are not enough, Logs are fragile and are not enough, Span ports are “so last century”, and Blind spots must be eradicated.

The Key Role of Network Visibility for Zero Trust

TechFix: Unleash Maximum Efficiency with Network Optimization

SIEMs are one of the most important but also one of the most expensive security tools employed today. However, with the advent of high-performance cloud-based databases and low-cost storage, organizations — including Gigamon — are using these technologies to develop SIEM capabilities at a fraction of the cost of traditional SIEMs. In this session, we will highlight the potential financial and operational benefits of this approach and examine key issues when designing and deploying a security data lake.

Using a Security Data Lake to Reduce SIEM Costs

SEIM

Data Lake

Network Security

IT Cost Management

Cloud Cost Management

Cloud Migration

Security Risk Management

Cloud Architecture

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Using a Security Data Lake to Reduce SIEM Costs

Presented by

About this talk

More from this channel