Cloud Security for Rapidly Increasing Remote Work
22nd April 2020
Three Key Challenges
Because this transition to a remote worker environment has expanded the potential attack surface, we have seen a resulting spike in criminal activity targeting this new paradigm. In this article, we will outline the second phase of an organisation’s remote work strategy – one that goes beyond providing a VPN tunnel back to the network.
Leveraging the cloud to augment on-premises capacity and to enable new functionalities provides scalable, manageable and secure remote access with minimal IT overhead and no need to deploy additional devices. Using the Fortinet Security Fabric products and functionalities deployed in the cloud quickly provides increased remote access capacity and application security capabilities to address the following challenges many organisations are now facing.
The Remote Worker Challenge
First, critical applications and data deployed on-premises – many of which may have only been previously accessible by individuals inside the network – now need to be accessed remotely. Making these resources suddenly available to remote users introduces unexpected risks that may be challenging for organisations to address.
Second, more users than ever need remote access to applications and data. As a result, for many organisations, their remote connectivity capacity is being overwhelmed. And because addressing these requirements needs to be done rapidly, the provisioning of hardware is not feasible. As a result, access to business and productivity applications may be adversely impacted.
Application Access and Security
In order to maintain business continuity, organisations are stressed to open access to various business applications that support supply chain and service delivery business functionalities. In cases where dedicated site VPN connections were used to build secure transaction connectivity with partners or customers, there is now a need to enable internet access. In cases where in-person transactions were required, the need to open up applications to more third-party services and communications is also growing. The ability to open applications to more parties also increases the attack surface and in turn risk. This is why the need to secure these applications must be accounted for.
Productivity Tools
As users interact less in person, the use of SaaS productivity tools and email is especially critical for organisations to continue operating. Tools for collaboration, productivity and email are employees’ primary forms of communication, resulting in more information being shared over collaboration tools and email. Because of this, it is crucial that organisations are properly securing content and maintaining visibility into SaaS collaboration platforms.
Leveraging a Dynamic Nature of the Cloud
Since the Fortinet Security Fabric works consistently across physical, virtual and cloud-based environments, Fortinet customers have the opportunity to leverage its functionalities to address their urgent needs. Fortinet Security Fabric’s products and solutions are available for all major cloud provider platforms. Therefore, it extends organisations’ security infrastructure with a cloud-based solution, helping organisations address the emerging needs for connectivity and application security without adding operational complexity or requiring any capital expenditure – whether this is temporarily or a long-term approach.
Leveraging the cloud enables organisations to rapidly address new security and connectivity requirements. Spinning up on-demand instances of existing products enables our customers to augment the capacity they already have on-premises or in the cloud. This helps keep network and security teams operating in the same model while using a familiar and scalable solution to address growing interaction with customers, partners, vendors and end users. Provisioning can be immediate and can be retired once the need for enhanced capacity or capability no longer exists.
Addressing Five Critical Business Continuity Use Cases with Cloud Security
To help organisations with this transition, Fortinet outlines the main use cases organisations are facing in the following diagram:
1. Scaling Remote Access VPN
There’s been a significant uptick in SSL VPN being used for large scale remote access VPN solutions. Leveraging tunnelling capabilities available in SSL VPN can help organisations seamlessly extend security out to a large remote workforce connectivity solution while also using common network security practices that are likely in place in organisations with large user offices. Since each SSL user session is relatively small in terms of network traffic, high availability is easy to achieve by spreading VPN users across multiple VPN Gateways. FortiGate customers can safely implement auto-scaling and other manual scale out solutions to increase the overall SSL VPN capacity and availability without redesigning their existing deployment to implement significant scalability.
2. Scaling backend VPN tunnels to address impact of traffic increase
VPN tunnels connecting data centres and clouds may be more overloaded due to back end traffic supporting the larger volume of remote users, especially when it is compounded by increased application usage. Often cloud infrastructure limitations pertaining to specific compute and network resources available to customers limit the ability to meet traffic requirements. By leveraging advanced network acceleration and cloud resource aggregation capabilities, organisations can keep operational disruption to a minimum while addressing the increased demand. As an example, organisations can leverage larger virtual machine instances with more core and aggregate virtual network interfaces with FortiGate-VM in order to deliver very high bandwidth VPN tunnels. By leveraging these capabilities, organisations do not need to manage more firewalls or VPN tunnels – which would increase complexity – in order to support the growing scale of applications and user traffic. Additionally, SD-WAN policies can be implemented to reserve capacity for certain applications to ensure secure and available access. Ultimately providing the tools to scale security without impacting users or operations.
3. Mitigating Web Browsing Risks with Secure Web Gateway Capabilities
Fortinet’s Secure Web Gateway (SWG) solution, available for all FortiGate customers through their existing product, enables organisations to use application control for deep visibility into end user traffic, as well as to implement acceptable user policies for company owned devices. Its SSL inspection capabilities also enable it to provide insight into encrypted traffic to ensure that VPN connections don’t become transportation vehicles for malware or data theft.
4. Maintaining Visibility and Control Over SaaS Usage and Shadow IT
As the use of collaboration tools – such as Office 365, Box and Google Drive – from managed and un-managed devices become more critical to ongoing business operations, the ability to maintain visibility of the content and usage of these tools remains a critical extension to remote user network security and connectivity. FortiCASB provides critical visibility and control for SaaS applications or the use of unsanctioned SaaS applications as Shadow IT. Leveraging FortiGate-VM for SWG functionalities in conjunction with FortiCASB helps maintain visibility across sanctioned and unsanctioned applications. IT teams can fine tune and optimise SaaS application security alerts and settings in FortiCASB to monitor SaaS usage, prevent data loss, and gain visibility into Shadow IT resources.
5. Securing Web Applications
As the need to open access to more applications becomes timelier and urgent, the challenge to rapidly provision the adequate protections and acquire expertise in securing these applications increases. To address this challenge, Fortinet provides an easy to use, dynamically available Web Application Security as a Service solution that can support the security of local and global web applications and mobile applications’ APIs. FortiWeb Cloud can offer organisations immediate value with a very easy-to-use and intuitive user interface, a long free trial period and no commitment for long term use.
For FortiWeb customers, it is very easy to expand FortiWeb on-premise deployments to the cloud with FortiWeb VM and leverage the consistent security management capabilities of FortiWeb Manager. It also enables customers to expand SAML and SSO capabilities from on-premise web applications to more applications protected by FortiWeb VM.
Reliable and Scalable Security for Remote Work
Organisations that have had or are in the midst of a transition to an enhanced remote work model can leverage the cloud to rapidly address immediate security requirements, and do so cost-effectively. By leveraging some of the capabilities outlined in this article, organisations can quickly leverage the cloud to meet the demands of their recently expanded remote work while addressing business risks.
Enhancing the user experience and maintaining productivity enables workers to return to business as usual with limited disruptions. And for those organisations who consider making this model part of their “new normal,” web-based services enable them to scale long term while reducing both capital and operational overhead.
