sb-as logo
Story image

Four tips for better visibility & security in public cloud

29 Aug 2017

Organizations are at their cloud provider’s mercy when it comes to increasing visibility into application and network data, meaning those organizations may have less control than they desire, according to Ixia.

Public cloud brings flexibility and agility, but it also must be highly secure and visible. According to a recent Ixia survey on virtualization, only 37% of organizations monitored their virtual environments at the same level as their physical networks.

According to Ardy Sharifnia, Ixia’s general manager A/NZ, this creates risk around the virtual environment’s performance and it could possibly lead to degraded performance and outages. “Most organisations can’t take that chance; they need to bridge the visibility gap quickly. Visibility will facilitate better control, maintain security no matter where their data goes and, of course, secure reliability of their core business applications,” Sharifnia says.

The survey also found that 76% of respondents were ‘very concerned’ or ‘concerned’ about security in their cloud environment. The number one concern was loss of control of network data (56%), followed by being able to achieve full visibility across their networks (47%).

“It’s necessary to monitor public cloud environments with the same robustness and vigour businesses apply to their on-premises and private cloud environments,” Sharifnia comments. 

“The first step towards getting visibility into public clouds is discovery: IT teams need to know how far their ‘cloud blindness’ extends to establish the potential risk. IT teams also need to determine what they can monitor and test so they can establish performance. Finally, they need to understand the potential risk exposure from being in a multi-tenant environment, as well as what assurances the public cloud provider can give regarding the security of individual tenants’ environments.” 

Ixia says there are four key ways enterprises can boost their security and visibility in cloud environments.

1. Extract and copy traffic from the cloud. Businesses can then subject that traffic to a more detailed inspection through a cloud tap or packet capture agent.  2.  Tunnel cloud data back to the enterprise. Using a network packet broker lets businesses review data in the same way as on-premise traffic.  3.  Identify traffic by application source. This will let businesses to make more intelligent, business-contextualised decisions when monitoring and securing.  4.  Treat each cloud application as an independent entity with its own service level agreement (SLA). Then, when calculating the total SLA, businesses should include the SLAs of each provider. They can then know and actively monitor each cloud SLA separately, building up a holistic view of overall cloud performance. 

“Public cloud is cost effective and lets businesses to scale elastically as the business grows. But to fully realise its benefits securely, it’s vital that the same due diligence that’s currently applied to a physical network is also applied to cloud-based infrastructures,” Sharifnia concludes.

Story image
ThreatQuotient hits $22.5m in new financing, continues growth streak
“Since we first invested in ThreatQuotient in 2017, their team has continued to prove to the market that there is a critical need for cybersecurity solutions aimed at security operations."More
Story image
Infrastructure-as-code, and how it can secure the cloud
Bridgecrew recognised IaC early on as one of the best ways for modern teams to delegate security ownership to individual contributors while distributing it across existing frameworks within CI/CD pipelines. This attribute meant that IaC was invaluable in securing cloud-native environments.More
Story image
Cloud services top threat vector for healthcare industry
"The coronavirus pandemic continues to highlight the unique cybersecurity needs of the healthcare industry, even as it has increased the number of threats these organisations face."More
Story image
Gartner: Top security and risk management trends for 2021
“CISOs are keen to consolidate the number of security products and vendors they must deal with."More
Story image
Hackers offering forged “official” COVID vaccination certificates and negative test results on dark net 
There has been a 350% increase in the number of advertisements selling alleged COVID vaccines within the last three months.More
Story image
AvePoint brings Salesforce Cloud Backup to channel partners
The product adds to the AvePoint suite of trusted Cloud Backup for Microsoft 365 and Dynamics 365 to provide managed service providers with backup and restore capabilities across multiple, popular SaaS providers.More