Name: Using a Security Data Lake to Reduce SIEM Costs
Start: 2023-12-19T01:00:00Z
End: 2023-12-19T01:00:32.000Z
Location: BrightTALK
Rating: 0

Gigamon offers a deep observability pipeline that harnesses actionable network-level intelligence to amplify the power of observability tools. This powerful combination enables IT organizations to assure security and compliance governance, speed root-cause analysis of performance bottlenecks, and lower operational overhead associated with managing hybrid and multi-cloud IT infrastructures.

Critical infrastructure houses our nation’s most crucial assets, making it a prime target for adversaries. To address this threat, robust cybersecurity measures are necessary. In this panel, we’ll hear how Congress has worked together to pass legislation and policy that bolster our nation’s cybersecurity efforts and safeguard crucial assets. The discussion will shed light on recent incidents involving critical infrastructure, including the recent AT&T outage, and will also highlight the work that remains.

Presenters:
[Moderator] Karen Evans, Managing Director, Cyber Readiness Institute
Slate H. Herman, Counsel, Communications and Technology, Energy and Commerce Committee (Majority)
Johanna Thomas, Counsel, Communications and Technology Subcommittee, House Energy and Commerce Committee

Safeguarding Critical Infrastructure

No agency wants to rip and replace existing solutions that support Zero Trust goals. Integration of existing and complementary capabilities is key to the creation of a unified Zero Trust solution that spans on-premises and cloud infrastructure, applications, and services across the five Zero Trust pillars and three cross-cutting capabilities. In this panel discussion, industry experts will outline how they come together to help agencies fully leverage existing solutions to achieve an ‘assume breach’ mindset, enterprise-wide visibility, and a comprehensive Zero Trust reference architecture.

Presenters:
[Moderator] Travis Rosiek, Public Sector Chief Technology Officer, Rubrik
Kam Amir, Director of Technical Alliances, Cribl
Rizwan Jan, Vice President, Chief Information Officer, Center for Naval Analyses
Tim Jones, Regional Vice President of Systems Engineering, Federal, Forescout Technologies, Inc.
Jason White, Senior Solutions Architect and Technical Strategist, Public Sector, Trellix

Build a Unified, Comprehensive Zero Trust Solution

For our inaugural Product Clinic, John Gonzales, Technical Success Manager, delivers a deep-dive technical demo on how to deploy GigaVUE Fabric Manager from the AWS Marketplace.

Product Clinic: How to Deploy Fabric Manager from the AWS Marketplace Clinic

Use of encryption for network traffic continues to rise, for both good and bad. Today over 85% of malware relies on encryption to hide in plain sight. The need to decrypt and inspect traffic is easy to see and is recommended by The NSA. Deploying actual decryption in a cost-effective and scalable way while meeting privacy and compliance requirements might not have been easy. However, it doesn’t need to be difficult or expensive. 

Gigamon TLS/SSL Decryption offers a centralized, high-performance solution that improves existing security tools by decrypting traffic once and inspecting it many times. Decrypting traffic exiting the network enables command and control detection, preventing data exfiltration and strengthening the company’s compliance stance. By being able to selectively choose what traffic to decrypt and what not to, it becomes possible to engage the right tools to enhance the security posture effectively.  

This webinar is designed to equip security and network architects with knowledge of current decryption trends, known challenges, and recommended solutions by demonstrating real-world use cases.

Practical Advice for Inline and Out-of-Band Decryption

Microsegmentation, like EDR, NDR, and a myriad of other tools, is an important part of an organization’s defense-in-depth strategy. But, like any one of those tools, microsegmentation is not an answer in itself. Join Gigamon Security CTO, Ian Farquhar, and Technology Partner Senior Director, Martyn Crew, as we discuss how to get the most out of your existing or planned microsegmentation investment.  

In this webinar, Ian and Martyn will discuss: 
- The pros and cons of microsegmentation 
- Where microsegmentation fits within a defense-in-depth security strategy 
- How Gigamon can increase the technical effectiveness and ROI of your microsegmentation investment

Getting the Most from your Investment in Microsegmentation

The complexity of hybrid application environments obscures root cause identification hinders proactive incident resolution, and negatively impacts user experience. Organizations need a unified observability solution that delivers full-stack visibility, leverages AI for predictive and prescriptive insights, establishes user-centric Service Level Objectives (SLOs), and generates timely, actionable alerts to maintain optimal service delivery.

Achieving a Holistic View of What Is Happening in Your Hybrid Infrastructure

A practical guide to generating insights from network traffic for operations and security  

In today’s hybrid and multi-cloud world how do organizations keep up with the volume and complexity of the data being generated and leverage it to deliver business outcomes? AIOps can help, but it’s thirsty for high-quality, complete data. Much of the telemetry is there, but it’s often siloed and diverse, cluttered with irrelevant information, and lacks critical context for security and performance use cases. How can you cut through the noise and feed your AIOps engine only the necessary data it needs to make smart, quick decisions?    

In this webinar, Carlos Casanova, Principal Analyst, Forrester, and Bassam Khan, Vice President of Product and Technical Marketing Engineering, Gigamon, will discuss how organizations can strengthen their AIOps efforts by leveraging network communications, the one normalized telemetry across any hybrid-cloud infrastructure. They will illustrate ways to deliver insights derived from network traffic for enhancing security, improving application performance, faster troubleshooting, and optimizing AIOps costs.

Analyst Research on Supercharging Observability and AIOps with Network Telemetry

“Gaining complete visibility into the network is like lighting up the whole street. When it comes to implementing Zero Trust, this is the best place to start”. 
-- John Kindervag, Creator of Zero Trust 
 
As organizations come to terms with the complexity of designing and implementing Zero Trust policies, procedures and the technologies required to support them, they realize the importance of having visibility into everything that’s happening on the network. This need for visibility is also recognized in the latest iterations of the CISA and DoD Zero Trust models. Gigamon is the visibility foundation for many of today’s most demanding Zero Trust implementations. Join Michael Dickman, Chief Product Officer at Gigamon, to discuss key, real-world Zero Trust issues including: 

What are the key visibility attributes needed for Zero Trust success? 

Do logs provide the visibility you need? 

How do you verify and establish trust in your Zero Trust implementation?

Network Visibility is the Foundation of Zero Trust

Feeding traffic from AWS to security and performance monitoring tools can become very expensive as environments scale and deploy NDR/XDR sensors. Organizations can be overwhelmed by the surprisingly high costs of AWS, especially when load balancers are needed to support large amounts of volume.

Design a Cost-Efficient AWS Visibility Architecture

As agencies forge ahead in their cloud security and resilience journeys, they must consider what gaps have been filled and what remain to cover. Many turn to frameworks such as the five pillars of Zero Trust in CISA’s Zero Trust Maturity Model. In this panel, agency leaders will share how they incorporate these pillars – identity, devices, network, data, and applications and workloads – into their everyday cloud security frameworks, and where they see the most important remaining gaps and risks across hybrid infrastructure.

Presenters:
[Moderator] Michael Dickman, Chief Product Officer, Gigamon
Beth Cappello, Deputy Chief Information Officer, Department of Homeland Security
Guy Cavallo, Chief Information Officer, Office of Personnel Management
Peder Jungck, Vice President and General Manager, BAE

Zero Trust in Multi-cloud Environments

Critical infrastructure and industrial organizations depend on operational technology (OT) to execute, monitor, and control physical processes. In today’s threat environment, IT is needed to configure and manage OT devices and collect data about OT operations to ensure enterprise-wide cybersecurity. As organizations work to implement Zero Trust, the necessary intersection of IT and OT introduces complexity and opportunity. This cross-industry panel will discuss the organizational and technical changes required to implement Zero Trust across IT and OT and their challenges and successes along the way.

Presenters:
[Moderator] John Quezada, Senior Solutions Engineer and SE Manager, Public Sector Civilian, Gigamon
Heather Dyer, Vice President, Chief Information Security Officer, United States Postal Service
Dr. Mark Stanley, Cybersecurity Advisor Architect and Zero Trust Lead, National Aeronautics and Space Administration
Juan Torres, Associate Laboratory Director, Energy Systems Integration, National Renewable Energy Laboratory
Zach Tudor, Associate Laboratory Director, National and Homeland Security, Idaho National Laboratory

At the Intersection of IT and OT, Bridging the Zero Trust Gap

Agencies must manage significant technical and organizational risks as they pursue zero trust, including legacy system integration, technical blind spots, and stagnant budgets and staffing levels. In this panel discussion, industry thought leaders will offer practical advice to help agencies with limited resources maximize impact and minimize risk as they move to a Zero Trust architecture.

Practical and Achievable: Real-World Advice on Zero Trust

Cybersecurity is a critical priority at the Department of Justice (DOJ), where we are committed to both enhancing cybersecurity and fighting cybercrime. The agency is in the midst of a three-year IT strategic plan that includes its journey to zero trust, and in this keynote address, DOJ Chief Information Officer and Deputy Assistant Attorney General Melinda Rogers will highlight DOJ’s progress toward zero trust thus far. She’ll discuss the importance of industry partnerships and offer insights into next steps for zero trust adoption and how to strengthen cyber resilience to secure government into the future.

Policy, Perspective, and Progress Toward Zero Trust

Observability provides enormous business value, but organizations that implement it often suffer from data collection sprawl, and incomplete network application visibility. This discussion will focus on how Gigamon improves the value of SIEM and Observability tools by adding Network Intelligence and more to the toolset.

What Gigamon Brings to Observability

In light of the critical CVE-2024-3400 vulnerability disclosed by Palo Alto Networks, it’s clear that traditional security tools need to be leveraged more effectively to detect and mitigate sophisticated threats. This webinar will guide attendees on how to enhance the utility of existing security infrastructures, like NDR, SIEM, Elastic, or even observability tools, to achieve deeper network visibility and security intelligence, ensuring robust defense mechanisms against both known and emerging threats.   This is a show-and-tell session where you will see advanced practices for:  - Enhanced East-West Traffic Monitoring: Strategies to ensure comprehensive inspection of lateral communication within networks using your current security tools.  - Decryption and Compliance: Balancing the decryption of network traffic for security purposes while maintaining strict compliance and privacy standards.  - Intelligence Extraction from Network Traffic: Techniques to harness rich metadata from network packets in your SIEM for proactive threat detection.  - Post-Breach Threat Detection: Best practices for utilizing network-derived metadata for identifying and responding to post-compromise activities, including practical applications of Indicators of Compromise (IoCs).

Maximize Existing Security Tools - Address Palo Alto CVE-2024-3400 Vulnerability

M-21-31 deadlines are closing in, please join us to learn how Gigamon can help you meet these deadlines while maximizing the investment you’ve already made in your monitoring and security tools. This practical webinar will focus on how Gigamon helps agencies capture, manage, and retain the logging and other data – including encrypted and IoT data - to ensure M-21-31 compliance.  

In this webinar, we will: 
- Review the M-21-31 logging, data capture and retention requirements. 
- Identify some of the most common problems in meeting these requirements. 
- Discuss access and capture of Encrypted, Containers, and IoT/OT data. 
- Demonstrate how Gigamon enables your existing tools to accelerate M-21-31 compliance. 

This session will be led by Gigamon government and technical experts and will focus on practical solutions to meeting the challenges of M-21-31 compliance.

Navigating M-21-31 Compliance with Gigamon

The Security of hybrid cloud models is a crucial topic that holds significance in today's technology world. As the landscape of artificial intelligence continues to expand, safeguarding your data within the diverse realms of cloud environments becomes paramount.  

This webinar will shed light on how prioritizing cloud security is essential for organizations. By investing in best practices for cloud security, businesses can not only fortify their data against potential threats but also optimize cloud performance.  

Discover how the partnership between WWT, Gigamon and Nutanix can provide an innovative approach to securing your hybrid cloud environments.

Securing the Hybrid Cloud: WWT, Nutanix and Gigamon

Hosted By: Gigamon & Carahsoft 

Threat actors conceal lateral movement and data extraction within encrypted communications, making it incredibly difficult to detect when they are present. Gigamon Precryption™ technology is a breakthrough approach to increasing network deep observability in hybrid cloud infrastructure. 

This technology increases deep observability while simultaneously enabling organizations to meet encryption compliance standards. At the same time, Gigamon Precryption technology is reducing complexity and costs to decryption. Precryption offers plaintext visibility into encrypted communications before the payload is encrypted – no decryption required. 

In this complimentary webinar, attendees learned how to: 
- Understand Precryption technology and why it is different 
- Eliminate blind spots and prevent cybercrime using Precryption 
- Help security teams achieve TLS 1.3 compliance, boost DNS security and extend Zero Trust architecture into the hybrid cloud

See Concealed Threat Activity Before Encryption

Why Firewalls Are No Longer Enough

Gigamon Analyst Connection: 5 Pragmatic Tips for Preventing Ransomware

Security Automation Architecture Strategies

Protect Your Edge And Tactical Environments With Gigamon Deep Observability

RiskyBiz Podcast: Precryption™ Technology

Shedding Light on Encrypted Lateral Traffic: Precryption™ Technology Unveiled

Precryption™ – the New Decryption

Securing Your Borders: Evolving Each Layer of Your Security Program

Modern Security Portfolio – Toolsets Organizations Need Now

Gain Visibility into Encrypted Core and 4G+5G Converged Core

Maximizing Tools Efficiency, Minimizing Carbon Footprint

Application Intelligence Best Practices: Leveraging Layer 4-7 Capabilities

How to Get Ahead of Network Issues

Delivering a Superior Application User Experience

TechFix: Unleash Maximum Efficiency with Network Optimization

SIEMs are one of the most important but also one of the most expensive security tools employed today. However, with the advent of high-performance cloud-based databases and low-cost storage, organizations — including Gigamon — are using these technologies to develop SIEM capabilities at a fraction of the cost of traditional SIEMs. In this session, we will highlight the potential financial and operational benefits of this approach and examine key issues when designing and deploying a security data lake.

Using a Security Data Lake to Reduce SIEM Costs

SEIM

Data Lake

Network Security

IT Cost Management

Cloud Cost Management

Cloud Migration

Security Risk Management

Cloud Architecture

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Using a Security Data Lake to Reduce SIEM Costs

Presented by

About this talk

More from this channel