How Secure is Your Transformation to the Cloud?

21st December 2017 | By Mouseworld Now Correspondent |

Mark-Lukie-senior-sales-engineer-at-Barracuda-NetworksBy Mark Lukie, senior sales engineer at Barracuda Networks

Organizations in India are going through a transitional phase and Indian businesses today are embracing cloud. Most organizations are trying to determine how their traditional on-premises infrastructure will work when they start leveraging cloud resources.

The public cloud services market in India is projected to grow 38 percent in 2017 to total $1.81 billion, according to Gartner, Inc. In fact, most cloud vendors see India as a key market. Till early last year, most key cloud vendors did not have data centers in India. However, today for both Microsoft Azure and Amazon Web Services, the story has changed. In a recent survey by Vanson Bourne, we found out that 85 percent of Indian respondents reported that they trust public cloud more than they did five years ago. 77 percent of those surveyed in India also felt confident that their organization’s move to the public cloud was secure.

However, security is a totally different ball game in cloud when compared to traditional IT environment. It is very important to carefully analyze the new security requirements for the new cloud environment and not just continue with the same tools as in the traditional IT environment.

Consider a different set of tools
Next-generation firewalls are purpose-built for data centre architectures (on-premise) where everything is tightly coupled and traffic flows through firewalls that scale vertically. However, public cloud best practices dictate building loosely coupled architectures that scale out horizontally (elastic).

It’s critical to understand the cloud environment that your applications will be deployed in, and the native services that the infrastructure-as-a-service (IaaS) provider offers to achieve security control coverage. Then, you can instrument in your required controls that leverage the provider’s deployment best practices.

This doesn’t necessarily mean bringing in legacy data centre architectures and tools, which tend to be ‘anti-patterns’ in the cloud. Perimeter-based firewall architectures are highly effective in a data centre, for example, but can become sources of friction when deployed in the public cloud.

Instead you should think through the actual security controls you need to cover and use tools that leverage the agility and elasticity of cloud infrastructure — both technically and commercially.

A cloud generation firewall needs to be tightly integrated into the IaaS management fabric. It must support a license-less commercial model that enables automated deployments that don’t incur licensing costs unless they actually see production traffic.

Confusion about security responsibilities
As we move further into the cloud generation, there’s still confusion about security responsibilities.We’re heading in the right direction, but we still see a lot of organizations that are just getting started in the cloud, so it’s still an important part of the discussion.

All the major cloud providers clearly state the security controls that customers inherit with their platforms; however, when customers move applications to the cloud — the responsibility of securing those applications falls on the customer.

In fact, the Vanson Bourne survey revealed some interesting data related to the shared security model. The majority of the survey respondents believe that public cloud providers are responsible for securing customer data and applications in the cloud, which proves that there’s still a lack of clarity around the subject. It would be beneficial for any organization running workloads in the cloud to have a conversation about security.

Handy hints
Look for third parties that support a wide range of ecosystems with the same or similar solutions. Organizations often end up with multiple cloud providers, as well as having an on-premises (legacy) infrastructure. This can have implications on complexity and overall costs; it’s further compounded when third-party solutions such as security are added to the mix.

Consider third parties that offer equivalent licensing options to how you’re licensing your public cloud infrastructure. As organisations weigh licensing options – by usage, per hour, unlimited, etc – we see customers beginning to understand how they can leverage different ones to gain greater cost controls. This becomes more important when third-party vendors are added to the mix.

Finally, look for vendors who can provide a common management scheme – either in their products or using public cloud security infrastructures – to simplify managing and monitoring ongoing security. Companies deploying the most common security routine – routing branch locations’ traffic through a central security solution – generally find these solutions lack scale and cost benefits as their cloud leverage increases. Those that look at distributed security solutions closer to the point of access, such as next-generation firewalls and web application firewalls, reduce those issues but find new ones in managing multiple devices.

(Author Bio: Mark Lukie is a senior sales engineer for Australia and New Zealand at Barracuda Networks. He has over 16 years’ experience in networking, security, backup/disaster recovery, public cloud platforms, as well as systems integration.)

(DISCLAIMER: The views expressed here solely belongs to the author and not necessarily reflect that of Mouseworld Now. Mouseworld Now does not own responsibility for the views expressed here.)

Reproduction of this article, in full or partially, would have to take prior permission of Mouseworld Now. Failing to do so would invite copy right violation charges.

Tags: , , , , , , , , , , , , ,

Leave your comment

IMPORTANT! To be able to proceed, you need to solve the following simple math

What is 15 + 7 ?
Please leave these two fields as-is:

Mouseworldnow Videos
  • r chandrashekhar president nasscom
  • Anant Maheshwari, President, Microsoft India
  • Suresh_Vaswani-220 by 220

Channel News

  • Capillary Technologies Attains AWS Retail Competency Status more...
  • MG Motor Opens its first digital car-less showroom, MG Digital Studio more...
  • Globus Infocom to Participate in InfoComm India 2019 Expo more...
  • ASUS Opens New ASUS Exclusive Store in B’lore more...
  • COMPUTEX 2019 Successfully Comes to a Close at Taipei more...
dell for SMEs
Subscribe via email

Enter your email address:

What does the mouse ask?

Will the spurt in online video advertisement steal the twinkle from the TV ad platform?

View Results

Loading ... Loading ...
Newsletter Registration