Cost-effective, identity-based discovery and control for enterprise networks

Securify works directly with leading Internet Service Providers (ISP's), Managed Service Providers (MSPs) and Managed Security Services Providers (MSSPs) to offer our unique identity-based discovery and control capabilities to enterprise customers as a managed service. Securify's identity-driven, network-based approach leverages existing infrastructures to deliver a simple, unique and cost-effective way to discover and control user access and behavior across changing, complex networks.

Securify's solutions are highly complementary to existing security solutions, including access, behavior and network monitoring solutions, can help improve deployment and maintenance of existing solutions such as firewalls and IDS/IPS and are a proven match for solution providers to augment their existing service offerings.

The ultimate benefits of deploying Securify as a managed service for customers of MSPs and MSSPs include:

Improved visibility across network operations and security operations. Securify's solution offers broad and cost effective visibility across access and behavior. Securify's unique-identity-based discovery capabilities are an alternative to cost-intensive, manual and less accurate approaches like log aggregation and analysis that are typically utilized to achieve compliance inside the network.

Reduced effort and cost to deploy and maintain Securify's solutions. While Securify offers a flexible solution that can scale from medium-size organizations and departments up to hundreds of thousands of users for a single deployment, some organizations do not want to utilize internal resources to deploy, maintain and use Securify. For these organizations, deploying Securify as a managed service or managed security service through one of our partners enables them to achieve Securify's unique identity-based visibility and control while also minimizing the internal resources dedicated to deploying and/or using Securify.

Typical Managed Service Use Cases Utilizing Securify

Securify's solutions can be broadly used by MSPs and MSSPs across network and security operations and Securify has dozens of use cases in a typical network. The following use cases are a few representative examples of how MSPs and MSSPs can utilize Securify as a core part of their solution offerings.

Use Case 1: Improve IDS/IPS Managed Services

While most service provider customers are happy to outsource their IDS/IPS management, they are still challenged by the level of internal effort required to investigate and validate every event after it is turned over to them by their service providers. This customer frustration is further heightened by the large number of false positives that are inherent in IDS/IPS systems, forcing the customer to apply scarce security resources to investigate events which largely turn out to be non-issues. Additionally, traditional IDS/IPS monitoring is falling short of meeting the customers' extended needs for compliance and risk monitoring related to activity inside their networks. It is now critical to receive instant alerts on access violations as well as malware and hacking attempts.

At the same time the service provider must also make uncomfortable decisions regarding quantity of IDS/IPS event data to send to each customer. This in turn leads to two alternatives: either perform large amounts of investigative work, or else to 'tune down' the IDS and reduce the number of alerts sent to the customer, thereby risking missing critical events. Either choice can potentially reduce the overall security posture for a service provider's customer (e.g. risk of false negatives) and can make it extremely difficult for the service provider to meet their customer's expected service levels.

In contrast, Securify's service provider partners address these issues in a more prudent way, by leveraging Securify's real-time, identity-based network usage visibility to complement and optimize IDS/IPS, reducing future false positives, provide broader visibility of both activity and the context of that activity to minimize the effort required by customers to investigate events. In doing so, Securify's service provider partners offer their customers a premium option for gaining more visibility as well as more accurate events, thereby increasing revenues, improving customer satisfaction and enabling service providers to meet and/or exceed expected customer service levels.

Use Case 2: Reducing Challenges Around Outsourced Management of Firewall Rule Sets

Due to the ever increasing speed of business - mergers and acquisitions, divestments, rightsizing, outsourcing, data-center consolidations - there is an ever increasing frequency of demands placed on service providers to change and maintain complex sets of firewall rules. Rule changes across this dynamic business environment creates substantial workload for providers and the complexity of this process can be error-prone. At the same time, due to the critical nature of their Firewalls, customers are often interested in ensuring that the current firewall rules are in line with their current policy, but find that that their service provider has no good way to prove that firewall rules are indeed working as intended. This often leads to time-consuming custom reporting efforts, and ultimately to the subsequent loss of confidence by the customer in their partner managing the firewall rules. In contrast, Securify service provider partners obtain real-time access compliance reports that greatly reduce the overall effort associated with validating that firewall rules have been effectively implemented. Our service provider partners utilize Securify to monitor and ensure that firewall rules are effectively enforcing current policy by observing actual traffic, and this enables service providers to regularly, confidently report high levels of service to customers. In doing so, Securify's service provider partners offer their customers a premium option for validated firewall services and reporting, which enables increased revenues, with less effort, all while enabling a higher quality of service.

Use Case 3: Emerging Business Requirement - Monitoring for Insider Threats

Due to the heightened concern of insider threats, as well as tightening audit and compliance requirements, businesses increasingly must monitor the inside of their networks. Often, these companies have limited internal security resources to address these issues. Just as many of these companies have found a service provider partner to assist them with IDS/IPS and/or Firewall management, these same companies will increasingly be looking to solution partners to provide the capability of monitoring activity inside the network. Securify uniquely provides a solution that can deliver comprehensive insider-threat protection with access discovery and control as well as anomaly detection. As part of its solution set, Securify also enables service provider partners to offer user and network behavior analysis (NBA) capabilities. Securify's identity-based discovery and control solutions monitor user and system access and behavior in real-time, including 'watch-lists' of less trusted users and highly sensitive assets. This in turn enables solution providers to efficiently provide the compliance verification and reporting that end users are required to deliver. Securify also enables its service provider partners to offer a new cost effective service to an emerging business demand.

If you are an end user interested in working with an MSP or MSSP to deploy Securify in your organization, please click here to contact one of our solution experts who can introduce you to the provider in your region that offers these services.