your office 365 journey - posam · comprehensive security, archiving and backup solution for office...

Your Office 365 Journey Prepare, Migrate, and Operate with Barracuda

Piotr Nowotarski CEE Sales Engineer

11-12.08.2016 Hotel Kaskady, Sliač

Our Vision

Barracuda simplifies IT with cloud-enabled solutions that empower customers to protect

their networks, applications, and data, regardless of where they reside.

Cloud Email is Growing

©2015 Osterman Research, Inc.

• Shift from on-premises Exchange to the cloud

• Hybrid deployments are the new norm for larger organizations

Customer Survey: Office 365 Usage in EMEAHow many organizations are migrating to Office 365?

Usage Migration Plans

42% of our customers are using Office 365. This is expected to increase to approx. 55% within the next 12 month and continue to grow up to 66%.

Customer Survey: Office 365 Usage in EMEAWhat concerns do organizations have with Office 365?

An average of approx. 44% of our customers is fully or fairly satisfied with the native functionality of Office 365 in respect to the key areas above. This means that more than half of our customers are looking for ways to improve.

Customer Survey: Office 365 Usage in EMEAHow are customers addressing these concerns?

Use of 3rd Party Solutions

83% of our customers considering the use of 3rd party solutions with Office 365. With 25% planning to use the solutions they already have in place we still have 58% left that are prospects for new deployments.

Barracuda’s Strategy

• Enhance Office 365• Augment features – email security, compliance archiving, backup

• Secure data and infrastructure to be Office 365 ready

• Complement

• Simplify and Educate• Leverage Years of Expertise

• Share Storage, Security, Cloud Experience

• Microsoft Gold Partner and #1 ISV in Microsoft Azure Marketplace

Prepare Migrate OperatePrepare your Data and Network

Archive Before Migration

Ensure Quality of Service

Eliminate PST Files

Work With Partners to Migrate…

User Accounts

AD, Name spaces, domains

Applications, devices, services

Provide Security, Compliance & Data Protection

Maintain Multi-layer Security

Simplify Compliance & eDiscovery

Protect Against Deletion

3 Step Methodology

Office 365 Operational Challenges Spam Prevention and Security

• Focus on spam prevention, no phishing/0-day protection

• False positives plaguing IT = Time consuming

• Advanced protection expensive (+$2 per user)

Compliance & eDiscovery

• Retention and Legal Hold

• Users can easily delete emails

• Limited or no mobile access to archive mailbox

Backup & Recovery

• Limited protection of Inbox, folders, emails

• Difficult to recover, limited time to recover

• No file protection in OneDrive for Business

Barracuda Essentials for Office 365

Comprehensive security, archiving and backup solution for Office 365

Centralized administration through Barracuda Cloud Control

Per User Licensing

Cloud-based multi-layer email security, archiving, and backup for Office 365

• Compliments all Office 365 plans

• Built on proven Barracuda SaaS solutions

• Low cost, per user licensing

• Single SKU for simple quoting/bundling

• Centralized management

• Includes 90 Day PST Enterprise

• Compatible with on-premises and hybrid configurations

Barracuda Email Security Service

Easy-to-Use, Cloud-Based Email Security

• Industry-leading spam and virus defense for email

• Protection from data loss and reputation damage

• Advanced, granular policy management

• Real-time threat protection

Email Security Enhancements

Phishing, Ransomware, Zero-day attacks• On the increase and in the news• Microsoft’s Exchange Online Protection doesn’t

protect!

Advanced Threat Detection (ATD)• Sandboxes any suspicious attachments• “Detonates” (opens) in sandbox to detect malware• Optional for ESS; Standard for Essentials

Link Protection• Similar to ATD – redirects suspicious URLs to

sandbox• Detects “typosquatting” (deliberate mis-spellings)• Included in ESS and Essentials

Large Truck Dealership Group• 30+ locations/1,450 users • Standardized on Office 365

Office 365 Email Security (EOP) Stopped Migration Dead• Not granular enough for their needs

• Wanted a SaaS solution that would be easy to run

Solution – Email Security Service from Barracuda• Deployed in 1 day – and is easy to run

• Put their migrations back on-track

Barracuda Cloud Archiving Service

Cloud-based archiving from Office 365 for Compliance and eDiscovery

• 100% Cloud-based (no HW/SW)

• Hosted in secure Barracuda Cloud

• eDiscovery search, hold, and export

• Import historical data (Exchange/Office 365)

• Role-based administration

• Full-featured mobile app

• Works with Exchange and Office 365, including hybrid deployment

Multi-state Eyeglass Optometrist & Retailer• 35 states/157 locations/650+ users• Standardized on Office 365

Office 365 Compliance Did Not Satisfy Requirements• In-Place preservation did not prevent deletion

• Needed cloud-based email archiving

Solution – Barracuda Cloud Archiving Service• Easily generated audit logs for compliance

• Non-intrusive, “set it and forget it” operation

Cloud to Cloud Backup

Cloud to cloud backup option for Office 365 mailboxes and OneDrive for Business

• Protect against accidental deletion

• Set custom retention policies

• Automatic or manual backups

• Multi-selection restores

• All-in-one protection for data hosted locally and offsite

Barracuda Addresses Office 365 Challenges Spam Prevention and Security

• Block email threats including spam, viruses, malware, phishing

• Built-in encryption and data loss prevention (DLP)

• Granular quarantines, exception lists, and blocked sender lists

Compliance & eDiscovery

• Capture and secure copy of every email

• Minimize risk by storing email outside production environment

• Extensive search and discovery capabilities w/granular legal hold

Backup & Recovery

• Automates backup of Exchange Online and OneDrive for Business

• Protects all email (incl. attachments) and complete folder structure

• Restore or download data to different sources

Barracuda NextGen Firewall F

Cloud Security Threats

Community gaps

Exploited system vulnerabilities

Remote access

Barracuda NextGen Firewall F on AzureThe Ultimate Protection Against Network Security Threats

Networking & Infrastructure

IPS/IDS

Integrated intrusion prevention

URL filtering

User and application aware

IPsec VPNs secure remote connectivity

Dynamically scales with your network

Networking Protection

Multi-Tier ArchitectureBuild secure multi-tier architecture in Azure to keep a level of segregation between tiers

VPN TunnelsUnlimited site-to-site VPN tunnels to connect two networks protected byF-Series Firewalls

Traffic ControlInbound/outboundtraffic control while providing IPS/IDS functionality

Access to ResourcesAccess to resources in Azure (unlimited client-to-site VPN, SSL VPN)

ExpressRouteVisibility and control on all traffic coming across the ExpressRoute connection

Most Common Use Cases

Use Case – Multi-Tier Deploying Multi-Tier Architecture in Azure

Secure remote access for mobile users

• Dedicated VPN clients available for Windows, Mac, Linux

• Clientless SSL VPN

• Multiple supported protocols: TINA, IPsec, L2TP, PPTP

Multiple site-to-site connectivity

• VNET-to-VNET connectivity

• Automatic user ID synchronization across sites

• Supports multiple ISPs

• Built-in WAN optimization

• Full ExpressRoute support

Comprehensive security enforcement

• Internal and cross-region network segmentation

• Access control based on user and instance identity

• Full traffic visibility and monitoring

Use Case – Multi-Tier

Best PracticesMulti-Tier Architecture

Controlling traffic between VNETs

• Provide full visibility into traffic using IP, port, application, or protocol

• Control traffic between VNETs (block, allow, or re-direct)

Use Case – Multi-Tier

Preventing direct connections through a reverse-proxy architecture

• Terminate all connections at a proxy• Decrypt all data• Inspect for any malicious content or

embedded attacks

Improve VPN ConnectivityOvercoming IPsec Limitations

• Powerful extensions to standard IPsec tunnel management

• TINA (Transport Independent Network Architecture) developed exclusively by Barracuda

• The TINA protocol allows use of TCP, UDP, and ESP for high speed VPN connections

• Substantially improves the VPN connectivity

Use Case – Multi-Tier

Use Case - ExpressRoute Protecting Microsoft Azure ExpressRoute

Security

• Encrypts traffic across ExpressRoute

• Prevents direct traffic flow between applications and the cloud

• Inspects and logs all inbound and outbound traffic for reporting purposes

Reliability

• VNET-to-VNET connectivity

• Automatically sets up a VPN for secondary connection in the event of failure

• Allows multiple ExpressRoutes; one primary and one secondary

Intelligence

• Prioritizes traffic from any specified application and sends it via a configured link

• Blocks specific application traffic from going to and from Azure

• Allows or denies certain users based on credentials and access privileges

Use Case – ExpressRoute

Best PracticesSecuring ExpressRoute

Preserving Low Latency

Maintain a quality of service based off of protocol and application to achieve equal or better bandwidth than other applicationsControlling Traffic Access

Monitor and control traffic based on IP addresses, ports, protocol, user identity, AD security groups, FQDN, Application Detection, and RPC portmapper information

Protecting Networks from MPLS Failure

Switch to an internet baseline in the event of MPLS router or line failure, and then automatically use that particular connection

Enabling End-to-End Line Security

Encrypt traffic from end-to-end and send it through the system, while maintaining full control over keys and algorithms

Use Case – ExpressRoute

User and Application AwarenessBarracuda NextGen Firewall F

Use Case – ExpressRoute

Reference CustomersBarracuda NextGen Firewall F

Datacenter for Volksbank, Sparda Bank, HYPO Banksappr. 700 Firewalls managed by a Team of 4 technicians

Datacenter for Raiffeisen in Austriaappr. 20 Datacenter-Firewalls and appr. 50 Subsidiaries

Online Bank and Online Traderappr. 10 Datacenter Firewalls and few Subsidiaries2 WAFs in HA

Deutsche Postbank with appr. 3000 Firewalls

Awards

Other Office 365 Solutions

Azure/Public CloudOn-Premises SaaS

Hardware and virtual appliances offer Exchange & Office 365 integration, greater control over security, compliance, and data protection policies

Rapid deployment, 100% hardware free, low management overhead

Spam Firewall Next-Gen Firewall

Archiving PST Mgt. Backup

Spam Firewall Next-Gen Firewall

Archiving Spam Firewall BackupArchiving

PST Mgt.

Web Applicatio

nFirewall

Q&A

Thank You