{"id":3890,"date":"2022-05-17T06:54:45","date_gmt":"2022-05-17T10:54:45","guid":{"rendered":"https:\/\/chrisgrundemann.com\/?p=3890"},"modified":"2022-05-17T07:11:02","modified_gmt":"2022-05-17T11:11:02","slug":"zpe-caap-xfd7","status":"publish","type":"post","link":"https:\/\/chrisgrundemann.com\/index.php\/2022\/zpe-caap-xfd7\/","title":{"rendered":"ZPE Systems Presents Cybersecurity-as-a-Platform (CaaP) at XFD7"},"content":{"rendered":"

I\u2019m currently reading Sandworm<\/a> by Andy Greenberg<\/a>, which is a brilliant book btw, and it reminded me of the need for creative cybersecurity solutions, especially tied to integration, automation, and out of band access. That, in turn, reminded me of the presentations I participated in recently as a delegate at Security Field Day 7<\/a> (#XFD7<\/a>). In particular, I thought back to ZPE System\u2019s session and their approach to those exact three items.<\/p>\n

Cybersecurity Sprawl<\/h1>\n

We\u2019re all fighting against ransomware, supply chain attacks, operational technology (OT) vulnerabilities, and more. And we\u2019re aided in that fight by many great products from many great vendors \u2013 maybe too many.<\/p>\n

\"Cybersecurity<\/a><\/p>\n

Not only are our cybersecurity tools multiplying like rabbid rabbits, but the infrastructure we are defending is shifting beneath us at the same time. So, we\u2019ve got a hybrid multi-cloud infrastructure to defend and dozens or often hundreds of vendors in the security stack. No wonder things slip through the cracks.<\/p>\n

Hybrid Enterprise Use-Cases<\/h1>\n

In addition to rising frequency, intensity, and sophistication of attacks, and the ever-growing list of vendors and products to combat the threat actors, the enterprise is changing as well. With digital at the heart of virtually (if not literally) everything we do, no two businesses are alike. We must pay attention to our specific attack surface, threat profile, and risk tolerance. Which means that we often have to deploy highly tailored combinations of solutions.<\/p>\n

One well-known mix is to find the best of breed solutions for specific, mission critical applications. For example, many folks want the absolute best firewall and the best SD-WAN platform. Of course, best is always subjective \u2013 and so for many enterprise, those two products must be sourced from different vendors.<\/p>\n

Another common situation is the need to leverage a brand new or highly specific solution, often offered by only one or two specialized vendors. Like picosegmentation for OT and IT convergence, continuous pen-testing, or out of band ZTNA publisher bootstrapping. With just those few examples we could easily end up with five appliances stacked at each of our locations, or some other less than ideal setup.<\/p>\n

Open Cybersecurity Platform<\/h1>\n

As I mentioned above, ZPE Systems presented their solution to these challenges at Security Field Day 7. They are taking an expansive cross-vendor approach, which they call the \u201cZero Pain Ecosystem.\u201d Clever reuse of their name there as the acronym. The presentation called out that \u201ccybersecurity is a team sport,\u201d and I agree – but what does that mean in this case, practically?<\/p>\n

Koroush Saraf<\/a>, VP of Product Management and Marketing at ZPE visualized the needed platform, quite cleverly, as a tasty hamburger. The hardware device itself is the bottom bun. Just above the hardware \u2018bottom bun\u2019 is the software (veggies and condiments in our analogy) that support the meat and cheese. This middle part is the most delicious security apps \u2013 exactly the ones you need, and nothing you don\u2019t. And API access for management and automation is the top bun, completing the sandwich and this juicy analogy.<\/p>\n

\"Cybersecurity<\/a><\/p>\n

He went on to draw the comparison between their lovely burger and the public cloud. ZPE is providing the hardware, the software, and the management and automation interface. You provide your hand selected security solutions, which run as apps within their platform.<\/p>\n

\"Cybersecurity<\/a><\/p>\n

And while I like that analogy it seems to me what they\u2019ve really done is finally deliver on the promise of a truly universal CPE.<\/p>\n<\/p>\n

\n
\n

Sounds like @ZPESystems<\/a> is finally delivering on the promise of a Universal CPE, which so many have failed to achieve in the past. <\/p>\n

Looks like a router to NetOps, a server to DevOps, and you can load it up with whatever tools SecOps needs#XFD7<\/a> #networksecurity<\/a> pic.twitter.com\/Gnp8itAgXy<\/a><\/p>\n

— \ud83c\udf35 \u1455\u157c\u1587I\u1515 G\u1587\u144c\u144e\u15eaE\u15f0\u15e9\u144e\u144e (@ChrisGrundemann) March 24, 2022<\/a><\/p>\n<\/blockquote>\n