Hybrid cloud scenarios may now use Akamai Guardicore Segmentation, a segmentation technology from Akamai Technologies, to enhance the cloud security posture. The extension of Akamai Guardicore Segmentation to hybrid cloud systems may help reduce attack surfaces while containing attacks directed towards cloud-native applications.
According to a recent survey performed by ClearPath Strategies on behalf of Akamai, thirty-three percent of IT decision-makers planned to boost their usage of distributed cloud services to enhance security and reliability. Better security solutions would be necessary to safeguard workloads in the cloud, as shown by the claims made by almost half (48%) of IT decision-makers that security technologies were either lacking or inadequate for a dispersed cloud environment.
Through a single interface, network security professionals can “easily” manage segmentation throughout their public cloud environments by using Akamai Guardicore Segmentation, enjoying the advantages of quicker policy deployment times, single network governance across data centers, and decreased administration complexity.
Using cloud-based Akamai Guardicore Segmentation would enable enterprises to handle challenges with governance between DevOps and SecOps teams, the need for various rules across cloud providers, and a lack of insight into application activity.
Akamai Guardicore Segmentation will be initially available for Microsoft Azure deployments via Azure Marketplace, followed by Akamai Connected Cloud beginning later this year.
Cloud Network Security Governance
To sum up, benefits of Akamai Guardicore Segmentation in the cloud would include the following:
- Comprehensive agentless cloud-native visibility and enforcement – helps administrators to understand application dependencies and integrates DevOps and SecOps teams in cloud network security governance by letting them view cloud workloads using an interactive map of real-time network flows.
- Hybrid enforcement engine leveraging multiple enforcement points – enables an organization to dynamically determine which agent-based and agentless enforcement points are employed across the data center, all while merely defining the purpose of network policy. This is done using the Akamai Guardicore Segmentation policy engine.
- Integrated reputation analysis and threat intelligence firewall – In the case of a breach, capabilities are made to shorten the time it takes to notice and respond to an incident.
- Scalable and secured solution – guarantees that the architecture of a solution grows automatically inside a cloud environment and that data does not leave it.
“Public and multi-cloud environments are crucial to most organizations’ business operations, but they lack the native visibility and security controls required to effectively lock down a cloud. For clouds to be secure, security practitioners must be able to see which applications, workloads, and traffic flows are moving within the environment,” said Pavel Gurvich, Senior Vice President, General Manager, Enterprise Security at Akamai. “Applying a microsegmentation policy in the cloud can give security practitioners comprehensive visibility and control across all cloud environments, from a single interface with one set of controls, without the need for agents. We can protect business-critical applications – whether they are on-premises, in the cloud, or on legacy servers – while reducing the number of security solutions that need to be managed.”
