eBooks/eGuides

38 Ransomware Defense For Dummies, Cisco Special Edition These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. The results: Policy enforcement with dramatic performance gains "We didn't have to wait long to see results," states Warren. "The ability to consistently enforce policies everywhere — including off-network devices — is hugely important to Prologis," he adds. "The Umbrella roaming client implementation was so seamless that no one is even aware it's engaged." As for blocking malicious activity and websites, "In the last six months, we've had only four to five false positives, and they were from non- U.S. sites. That is an awesome number; less than one per month is truly outstanding." Warren points to a significant boost in performance as yet another pos- itive outcome. "After we installed Umbrella, we saw a huge improve- ment in performance. For example, in China and Japan, app response times improved up to 50 percent. In our Denver office, one 10MB download time from the cloud went from 11.4 seconds before deploy- ment to 4.4 seconds after. Since the majority of the apps Prologis uses are in the cloud, performance is extremely important to us. One hun- dred percent of the apps we use experienced performance gains." Other Umbrella features have proven useful as well. "Automated reporting is valuable — especially the Cloud Services Report — because I'm able to share clear, digestible data about how well the network is protected and how much shadow IT is happening in the cloud, which has been a real eye-opener," Warren notes. "The report- ing makes it easy for me to identify any issues, and makes a lot of people's lives better by underscoring the need for our defense- in- depth security infrastructure." "Adding Umbrella to our security stack has been a great decision. Everyone is ecstatically happy about the improved security and per- formance we've experienced as a result of its deployment." (continued)

• Cover
• Title Page
• Copyright Page
• Table of Contents
• Introduction
• About This Book
• Foolish Assumptions
• Icons Used in This Book
• Beyond the Book
• Chapter 1 What Is Ransomware?
• Defining Ransomware
• Recognizing Ransomware in the Modern Threat Landscape
• Understanding How Ransomware Operates
• Chapter 2 Implementing Best Practices to Reduce Ransomware Risks
• Before an Attack: Discover, Enforce, Harden
• During an Attack: Detect, Block, and Defend
• After an Attack: Scope, Contain, and Remediate
• Chapter 3 Building the "New Best-of-Breed" Security Architecture
• Recognizing the Limitations of Current Security Designs
• Defining the "New Best-of-Breed" Security Architecture
• Chapter 4 Deploying Cisco Ransomware Defense
• Leveraging DNS as the First Line of Defense in the Cloud
• Securing Endpoints and Addressing Email Threats
• Cisco Advanced Malware Protection (AMP) for Endpoints
• Cisco Email Security with Advanced Malware Protection (AMP)
• Protecting the Network with Next-Generation Firewalls and Segmentation
• Cisco Firepower Next-Generation Firewall (NGFW)
• Use the network as a sensor and enforcer
• Streamlining Deployments and Bolstering Incident Response
• Chapter 5 Ten Key Ransomware Defense Takeaways
• Ransomware Is Evolving
• Ransomware-as-a-Service Is an Emerging Threat
• Paying a Ransom Doesn't Solve Your Security Problems
• Build a Layered Security Architecture Based on Open Standards
• Deploy Integrated, Best-of-Breed Solutions
• Embed Security throughout Your Network Environment
• Reduce Complexity in Your Security Environment
• Leverage Cloud-Based, Real-Time Threat Intelligence
• Automate Security Actions to Reduce Response Time
• See Something, Say Something
• EULA