WHITEPAPER
CybersecuritySolutionsforManagedSecurityServiceProviders
EnablingPartnersToDeliverBroadandIntegratedSecurityandNetworkingServices
WHITEPAPER|CybersecuritySolutionsforManagedSecurityServiceProviders
ExecutiveSummary
Asthethreatlandscapeesmoreadvancedandcybersecuritytalentesmorescarce,partneringwithamanagedsecurityserviceprovider(MSSP)isanincreasinglyattractiveoptionforanizations.Inordertotakeadvantageofthisopportunity,MSSPsmustbeabletocost-effectivelydeliverabroadrangeofsecurityservices.Havingaplethoraofunconnectedpointproductsonthebackendworksagainstthisgoal.TheSecurityFabricdeliversabroad,integrated,andautomatedsecurityarchitecturethatenablesdeliveryofeffective,prehensivesecurityserviceswithminimalcostandstafftime.ItevenaffordsMSSPsanopportunitytoexpandworkingservices,expandingtheirfootprintatexistingsitesandgrowingabaseofnewclients.
Thecybersecurityskillsshortage,1coupledwiththecostandhassleofmaintaining24×7coverageofanplexinfrastructure,havemadeMSSPsincreasinglyattractivepaniesofallsizes.Onerecentanalysisprojectspanieswillspendmorethan$58billiononmanagedsecurityservicesby2024,2reflectingmorethana14%annualgrowthrate.
“Clientsaretiredof‘buying’toolsandarestartingtofocusontheessofintegratingandessfullydeployingtheir
existinginvestments.”
7 ThistrendrepresentsanunprecedentedopportunityforMSSPs.Providerswithabroadsetofofferingscanincreasetheirfootprintatexistingclientsites,andrecruitnewclientswiththepromiseofbeingabletomeettheircurrentandfutureneeds.3Buttotakeadvantageofthisgrowingmarketneed,MSSPsmustdelivertherightmixofsecurityservicescosteffectively—andinwaysthatalignwiththebusinessneedsandprioritiesoftheirtargetcustomers. MSSPpartnersreduceriskandminimizetheimpactofcyberattacksbyprovidingmanagedsecurityandmonitoringservicestoprotectenterprisedata,infrastructure,andusers—regardlessofwho,where,when,andhowITassetsareessed.Theyextendthesecurityoperationsoftheenterprisebybridgingpeople,skills,process,andtechnology. offersabroadportfolioofintegratedandautomatedsecuritytoolsthatworksecurity,cloudsecurity,4applicationsecurity,5esssecurity,workoperationscenter(NOC)andsecurityoperationscenter(SOC)functions.6TheabilitytobridgesecurityworkingonthesameplatformisabigadvantageforMSSPs,enablingthemtoofferabroad,single-providersolutionandincreasingaveragerevenueperuser(ARPU). KeyMSSPCybersecurityChallenges Visibility AlackofvisibilityisonereasonthatmanybusinessesareturningtoMSSPsforhelpindefendingagainstattacks.Theyfindthemselvesinthispositionbecauseovertime,theyhaverespondedtothegrowthoftheattacksurfacebydeployingunconnectedpointproducts,resultinginadisaggregatedsecurityarchitecture.Thislackofvisibilityincreasesrisk,asanizationoftendoesnotevenknowwhenithasbeenattacked.8 Providingend-to-endvisibilityisanessentialcapabilityforMSSPsseekingtomeettheserviceexpectationsoftheirtargetcustomers.Intheabsenceofvisibility,fast-movingintrusionsmaycauseharmbeforearesponsecanur,negatingalleffortstomaintainaneffectivesecurityposture.9Todeliveravalueaddtocustomers,MSSPsneedtoachieveend-to-endvisibilityacrosseachcustomer’senvironmentandprovidethatvisibilitytothemviaacustomerportal. Operationalefficiency Thepointofamanagedserviceistotakeadvantageofeconomiesofscaletodeliverservicesmorecost-effectivelythanacustomercould.ButiftheMSSP’sservicesaredeliveredinefficiently,theywillnotbeprofitable.Lackofintegrationacrossdifferentsecurityelementsandarchitecturalfragmentationincreaseoperationalinefficiencies.Withoutintegrationandautomation,manysecurityworkflowsmustbemanagedmanually.10Thiscertainlyincreasesrisk,butitcanalsoslowDevOpscycles,degradecustomerandemployeeexperience,andincreaseadministrativeoverheadandoperationalcosts. End-to-endintegration,ontheotherhand,enablestheMSSPtodeliverbroadserviceswhileoptimizingstafftimeandbudgetaryresources,maximizingmarginsandpotentiallyincreasingARPU.Silosareeliminated,andtheMSSP’scustomersreceivethepletesecurityprotectionpossible.
2 WHITEPAPER|CybersecuritySolutionsforManagedSecurityServiceProviders Breadthofofferings OfferingabroadsuiteofsecurityservicestocustomersenablesanMSSPtomeettheneedsofmorecurrentandpotentialcustomers.ThispotentiallyincreasesARPUthroughtheopportunitytoupsellinspecificounts.Italsoenablesanizationpeteforbusinessfrompotentialnewcustomersthatarelookingforprehensivesetofservicesunderoneumbrella. Addingfunctionalityviaunintegratedpointproductsresultsintechnologysprawlwitheachproductoperatinginitsownsilo,whichnecessitatesmanualcorrelationwithexistingservices.Ironically,itcouldmeanthatcustomerountsthatleveragemoreserviceswouldbelessprofitablethanthosethatusefewerservices,inhibitingbusinessgrowth.Ontheotherhand,MSSPswhoseofferingsarepoweredbyabroad,integrated,andautomatedsecurityarchitecturecancustomizetheirofferingstoeachcustomer’sneeds.AndeverynewlyaddedserviceonanountincreasesbothARPUandprofits. “Youshouldexplaintothemthatyoursecurityservicesareabout morethanjustoutsourcing,gaps,andaugmentation.Instead,youshouldshowyourcustomersthatyoursecurityservicesgivethemesstothehumantalenttheycan’teasily getontheirown.”11 Threatintelligenceandanalytics Intoday’sadvancedthreatlandscape,customersneedreal-timeesstorobustthreatintelligencetocounterattacksthatmoveatmachinespeed.Inadditiontoacustomer’sownsecuritylogs,manysubscribetothreat-intelligencefeedspulledfromworksoffirewallsaroundtheworld,butitisachallengetoaggregatethisdataacrossafragmentedsecurityarchitectureintimetodeliveradequatespeedofresponse. Customersalsoexpectdata-drivenadvicefromtheprofessionalstheyarepayingtomanagetheirsecurityinfrastructure—achallengeforMSSPsoperatingindisaggregatedenvironments.Insuchanenvironment,providingadvicetocustomersisanexpensiveproposition,andtheinsightsgainedarelessvaluableduetoinevitablehumanerrorintheanalysis. UseCases ManagedsecureSD-WANservice Therapidgrowthofsoftware-definedworking(SD-WAN)overthepastfewyears12affordsMSSPsanincredibleopportunity.MSSPsnowhaveeasyesstotoolsthatcanincreasetheirfootprintatcustomersitesbyexpandingworkingservices.Theopportunityisequallyattractivetocustomers,asitenablesthemtoscaleworktrafficusingthepublicwithoutpayingfornewmultiprotocollabelswitching(MPLS)bandwidth.ButsecurityisabigchallengepaniesconsideringSD-WAN,worktrafficmovingonthepublicopensabignewelementoftheattacksurface. OtherSD-WANofferingsareoftenbasedonpointproductsthatarepurchasedandadministeredseparatelyfromasecuritysolution.Thiscanincreaseoperatingcosts,reducemargins,degradesecurity,andreducetheoverallqualityoftheservice.FortiGateSecurepletesecurityandworkingperformanceinasingleplatform,enablingMSSPstobroadentheirreachprofitably. SuchanofferingalsoprovidesthepotentialforanMSSPtoexpanditsservicestoworkingatbranchlocations—againwithoutaddingadditionalpointproducts.SD-BranchincludesFortiGateNext-GenerationFirewalls(NGFWs)binedwithswitching,wirelessess,workesscontroltoolstopleteconnectivityandsecurityprotectionatremoteoffices. OfferingmanagedsecureSD-WANservicespoweredbybringsanumberofadvantagestoMSSPs: nnTheopportunitytogrowARPUatexistingcustomersitesbyexpandingworkingservicesto,from,andwithinbranchlocations nnTheabilitytogrowthisnewbusinessovertimewithalackofexpensiveadditionalcontractsanddeploymentsrequired nnOperationalefficiencyandenhancedprofitabilitybydeliveringtheserviceviaafullyintegrated,multitenanttoolset
3 ManagedCloudSecurityServiceManagedSOCService WHITEPAPER|CybersecuritySolutionsforManagedSecurityServiceProviders SecureSD-WANService CustomerHQFortiGateSecureSD-WAN Branches SD-Branch SecurityFabric MSSP FortiGate FortiManager FortiAnalyzer AdvancedMalwareProtection FortiSIEM ThreatIntelligence Cloud Cloud Cloud SecurityFabric FortiWeb FortiManager FortiCWP FortiCASB FortiGate Figure1:Abroad,integrated,andautomatedsecurityarchitecturefromhelpsMSSPsdeliverawiderangeofservices,includingmanagedSD-WANservices,managedSOCservices,andmanagedcloudsecurityservices.
4 WHITEPAPER|CybersecuritySolutionsforManagedSecurityServiceProviders ManagedSOCservice Notpanycanaffordtohaveafull-fledgedSOC.Designingandbuildingoutthespace,hiringateam,andproviding24×7staffingandhardwareandsoftwaremaintenanceonanongoingbasisisanexpensiveproposition.Unfortunately,thecybersecurityskillsshortagemeansthattheproblemisonlygettingworse.13 Thatsaid,theenhancedsecurity,visibility,andactionableinsightsthatcanbederivedfromaSOCareimportantforthebusiness.MSSPscanfillthisgapbydeliveringarangeofservicesfromtheirownSOC.Theseservicescanbeofferedatspecificlevelsorastailoredservicesforindividualcustomers’needs. Forexample,manycustomersbenefitfrommanagedsecurityinformationandeventmanagement(SIEM)servicesbecauseofthedeepvisibilityandanalyticstheyprovide.Andmanageddetectionandresponseservicescanleverageartificialintelligence(AI)-driventhreatintelligenceandindicatorspromise(IOC)feedstoaddlayersofprotectiontocustomerenvironments.Customerscanevenhavetheirownlog-incredentialtoviewtheanalyticsforthemselves. “Inthemoderntimeswelivein,formulatingnewstrategies, andremedyingexistingsecuritymeasuresbatthechangingthreatlandscape,isoftheutmostimportance.Keepingthisinmind,MSSPsserveastheHolyGrailsolutionthatthecybersecurityrealm needstoday!
”14 TheSecurityFabric,poweredbyFortiGateNGFWs,enablesMSSPstobuildafull-spectrumSOCwithend-to-endintegrationacrosstheentirearchitecture.Numeroussecuritytoolsfromandthird-partyFabricPartnersintegrateseamlesslyintotheFabric.Additionally,theopenarchitectureandrobustrepresentationalstatetransferapplicationprogramminginterface(RESTAPI)enableMSSPstointegrateothersolutionstofillnicheneedsormaximizeinvestmentinlegacytools. DeliveringmanagedSOCservicesusingtheSecurityFabricbringsthesebenefitstoMSSPs: nnTheabilitytoprehensiveserviceswithoutmanagingaplethoraofpointproducts nnThebenefitofreal-time,AI-poweredthreatintelligencealongwithotherlayersofprotectionagainstunknownthreats nnOperationalefficiencyandenhancedprofitabilitybydeliveringtheserviceviaafullyintegrated,multitenanttoolset Managedcloudsecurityservice Theexplosionintheuseofthepubliccloudbybusinessesofallsizesdoesnotseemtobeslowing.Infact,Softwareas-a-Service(SaaS)spendingaloneisexpectedtoexceed$80billionthisyear15—anannualgrowthrateofmorethan17%.Unfortunately,therapidadoptionofsprawlingcloudinfrastructuresincreasessecurityplexityanizations,andtheresultisoftenthatcloud-basedapplicationsarevulnerable.Onekeydriverofriskisthemisconfigurationofcloud-basedsystems.16 Withtherightinfrastructure,MSSPscanprehensivecybersecurityprotectionforallservicesrunningonmultipleclouds.Alternatively,theycanofferprotectiononanapplication-by-applicationbasisusingaWebApplicationFirewall(WAF)as-a-Servicemodel.BothapproachescanincreaseanMSSP’sfootprintatcustomersites.Astheyoffermorecloudsecurityserviceswithinanount,operationalefficienciesderivedfromend-to-endintegrationcanincreasetheirmargins. offersrobust,cloud-nativetoolstobringMSSPcustomers’entiredistributedcloudinfrastructuretogetherunderasingleumbrella,withconsistentsecurityprotection,policymanagement,andconfigurationmanagement.FortiGateVMbringstheNGFWtoavirtualmachineformfactorthatworkswellforcloudenvironments,andtheFortiWebwebapplicationfirewall(WAF)isavailableinseveralformfactorsaswell,includingSaaS.TheFortiCASBcloudesssecuritybroker(CASB)serviceandtheFortiCWPcloudworkloadprotection(CWP)tooldelivervisibility,pliance,threatprotection,andconfigurationmanagementacrossthecloudinfrastructure.
5 WHITEPAPER|CybersecuritySolutionsforManagedSecurityServiceProviders AmanagedcloudsecurityservicepoweredbybringstheseadvantagestoMSSPs: nnSecuritytoolsnativetoeachcloudbringaconsistentsetofsecuritypoliciesandpracticestoallcustomerclouddeployments nnIn-line,real-timethreatintelligenceinFortiWebenablesinstant,automatedresponsetosecurityevents nnOperationalefficiencyandenhancedprofitabilitybydeliveringtheserviceviaafullyintegrated,multitenanttoolset DifferentiatorsforMSSPs Robust,broad-basedsecurityproductsandservicestoenableprehensivemenuofservicesforMSSPcustomersfromasingleplatform.ThiscanresultinhigherARPUandbroaderrevenueopportunities.Atthesametime,NetworkSecurityExpert(NSE)traininggivesMSSPsaconsolidatedtrainingmodelforabroadsetofsecurityworkingproductsundermanagement—andawaytodifferentiatetheirservices. “Customersarefortablesharingdatapaniestheyactually trust;whenfirmsfailtodeliveronsecurity,theirbrandreputation,customertrust,andevenrevenuearenegativelyimpacted.”17 MultipleproductconsumptionmodelsofferMSSPsandtheircustomerstheflexibilitytheyneedtosecuretheirdata,infrastructure,andapplicationsinthemostoptimalway.Differentsolutionsareavailableinappliance,virtualmachine,cloud,andSaaSformfactors.MSSPscanalsoleveragespecialpricingprogramssuchaspay-as-you-goandsubscriptions,providingtheflexibilitytoaddressdifferentbusinessmodelssupportingtheirserviceofferings. Recognizedleadershipworksecurity,namedaLeaderintheGartnerMagicQuadrantforNetworkFirewalls,18andscoringbestamongninevendorsintheNSSLabsNext-generationFirewallSecurityValueMap.19ThisunparalleledperformanceenablesMSSPstoreducetheircapitalexpenses(CapEx)spend,andasmallersecurityworkfootprinttodeployandmanagelowersoperationalexpenses(OpEx)costs. Theabilitytoleverageinvestmentsinthird-partyproductsviaintegrationthroughtheFabricAlliance,openAPIs,andarobustRESTAPI.ThisenablesMSSPswithrapidscaletoremovefrictionandincreasethespeedofservicerollouts. Securitysolutionsdesignedasmultitenantfromthegroundup,enablingMSSPstoisolatebutstillmanagemultipleworksfromasingleconsole.ThisincreasesARPUwhileimprovingoperationalefficiencies. Conclusion AscustomerslooktoMSSPstohelpthemwithseeminglyintractablecybersecuritychallenges,offeringlimited,cookiecutter,ordisconnectedservicesisnotagoodwaytobuildbusiness.ButMSSPsthatbaseabroadsetofservicesontheSecurityFabrichavetheopportunitytoeashopforsecurityservices—andatrustedadvisortoagrowingclientbase.
6 WHITEPAPER|CybersecuritySolutionsforManagedSecurityServiceProviders 1MekhalaRoy,“Effectsofcybersecurityskillsshortageworsening,newstudysays,”TechTarget,May10,2019.2“ManagedSecurityServicesMarketisExpectedtoExceedUSD$58billionby2024,”MarketWatch,February27,2019.3heVoilque,“MSSP2.0:HowtoLaunchorExpandManagedSecurityServiceswiththeSecurityFabric,”,March27,2019.4“KeyPrinciplesandStrategiesforSecuringtheEnterpriseCloud:TheCloudSecurityBlueprint,”,December16,2019.5“WebApplicationSecurityfortheCloud,”,March19,2019.6“BridgingtheNOC-SOCDivide:UnderstandingtheKeyArchitecturalRequirementsforIntegration,”,August23,2018.7ScottMatteson,“Topetitive,MSSPsneedtogrowandevolve,”TechRepublic,January16,2019.8JohnMaddison,“TheProblemwithTooManySecurityOptions,”,May9,2019.9DerekManky,“TheEvolvingThreatLandscape—Swarmbots,s,AutomationinMalware,”CSO,August29,2018.10“NetworkComplexityCreatesInefficienciesWhileRatchetingUpRisks:UnderstandingtheCausesandImplications,”,May8,2021.11“ManagedSecurityServices’ValueIsScale,”ChannelFutures,May14,2019.12AndyPatrizio,“EnterprisesaremovingtoSD-WANbeyondpilotstagestodevelopment,”NetworkWorld,May7,2018.13JonOltsik,“Isthecybersecurityskillsshortagegettingworse?
”CSO,May10,2019.14aJames,“HowCanMSSPsThriveintheGrowingTimeofComplexCyberThreats?
”Infosecurity,October29,2019.15LouisColumbus,“RoundupOfCloudComputingForecastsAndMarketEstimates,2018,”Forbes,September23,2018.16AsherBenbenisty,“Don’tGoOnceMoreUntotheBreach:FixThosePolicyConfigurationMistakes,”Infosecurity,October30,2018.17“Industryleadersstruggletobalancedigitalinnovationandsecurity,”HelpNetSecurity,April4,2018.18“FortiGateNetworkFirewallsGiveMSSPsAnotherReasontoSelect,”,September24,2019.19“IndependentValidationofSolutions:NSSLabsReal-worldGroupTests,”,January2020. Copyright©2021,Inc.Allrightsreserved.®,FortiGate®,FortiCare®andFortiGuard®,andcertainothermarksareregisteredtrademarksof,Inc.,andothernameshereinmayalsoberegisteredand/monlawtrademarksof.Allotherproductpanynamesmaybetrademarksoftheirrespectiveowners.Performanceandothermetricscontainedhereinwereattainedininternallabtestsunderidealconditions,andactualperformanceandotherresultsmayvary.Networkvariables,workenvironmentsandotherconditionsmayaffectperformanceresults.Nothinghereinrepresentsanymitmentby,anddisclaimsallwarranties,whetherexpressorimplied,excepttotheextententersabindingwrittencontract,signedby’sGeneralCounsel,withapurchaserthatexpresslywarrantsthattheidentifiedproductwillperformordingtocertainexpressly-identifiedperformancemetricsand,insuchevent,onlythespecificperformancemetricsexpresslyidentifiedinsuchbindingwrittencontractshallbebindingon.Forabsoluteclarity,anysuchwarrantywillbelimitedtoperformanceinthesameidealconditionsasin’sinternallabtests.disclaimsinfullanycovenants,representations,andguaranteespursuanthereto,whetherexpressorimplied.reservestherighttochange,modify,transfer,orotherwiserevisethispublicationwithoutnotice,andthemostcurrentversionofthepublicationshallbeapplicable.October30,20212:28AM519049-A-0-EN
7 ThistrendrepresentsanunprecedentedopportunityforMSSPs.Providerswithabroadsetofofferingscanincreasetheirfootprintatexistingclientsites,andrecruitnewclientswiththepromiseofbeingabletomeettheircurrentandfutureneeds.3Buttotakeadvantageofthisgrowingmarketneed,MSSPsmustdelivertherightmixofsecurityservicescosteffectively—andinwaysthatalignwiththebusinessneedsandprioritiesoftheirtargetcustomers. MSSPpartnersreduceriskandminimizetheimpactofcyberattacksbyprovidingmanagedsecurityandmonitoringservicestoprotectenterprisedata,infrastructure,andusers—regardlessofwho,where,when,andhowITassetsareessed.Theyextendthesecurityoperationsoftheenterprisebybridgingpeople,skills,process,andtechnology. offersabroadportfolioofintegratedandautomatedsecuritytoolsthatworksecurity,cloudsecurity,4applicationsecurity,5esssecurity,workoperationscenter(NOC)andsecurityoperationscenter(SOC)functions.6TheabilitytobridgesecurityworkingonthesameplatformisabigadvantageforMSSPs,enablingthemtoofferabroad,single-providersolutionandincreasingaveragerevenueperuser(ARPU). KeyMSSPCybersecurityChallenges Visibility AlackofvisibilityisonereasonthatmanybusinessesareturningtoMSSPsforhelpindefendingagainstattacks.Theyfindthemselvesinthispositionbecauseovertime,theyhaverespondedtothegrowthoftheattacksurfacebydeployingunconnectedpointproducts,resultinginadisaggregatedsecurityarchitecture.Thislackofvisibilityincreasesrisk,asanizationoftendoesnotevenknowwhenithasbeenattacked.8 Providingend-to-endvisibilityisanessentialcapabilityforMSSPsseekingtomeettheserviceexpectationsoftheirtargetcustomers.Intheabsenceofvisibility,fast-movingintrusionsmaycauseharmbeforearesponsecanur,negatingalleffortstomaintainaneffectivesecurityposture.9Todeliveravalueaddtocustomers,MSSPsneedtoachieveend-to-endvisibilityacrosseachcustomer’senvironmentandprovidethatvisibilitytothemviaacustomerportal. Operationalefficiency Thepointofamanagedserviceistotakeadvantageofeconomiesofscaletodeliverservicesmorecost-effectivelythanacustomercould.ButiftheMSSP’sservicesaredeliveredinefficiently,theywillnotbeprofitable.Lackofintegrationacrossdifferentsecurityelementsandarchitecturalfragmentationincreaseoperationalinefficiencies.Withoutintegrationandautomation,manysecurityworkflowsmustbemanagedmanually.10Thiscertainlyincreasesrisk,butitcanalsoslowDevOpscycles,degradecustomerandemployeeexperience,andincreaseadministrativeoverheadandoperationalcosts. End-to-endintegration,ontheotherhand,enablestheMSSPtodeliverbroadserviceswhileoptimizingstafftimeandbudgetaryresources,maximizingmarginsandpotentiallyincreasingARPU.Silosareeliminated,andtheMSSP’scustomersreceivethepletesecurityprotectionpossible.
2 WHITEPAPER|CybersecuritySolutionsforManagedSecurityServiceProviders Breadthofofferings OfferingabroadsuiteofsecurityservicestocustomersenablesanMSSPtomeettheneedsofmorecurrentandpotentialcustomers.ThispotentiallyincreasesARPUthroughtheopportunitytoupsellinspecificounts.Italsoenablesanizationpeteforbusinessfrompotentialnewcustomersthatarelookingforprehensivesetofservicesunderoneumbrella. Addingfunctionalityviaunintegratedpointproductsresultsintechnologysprawlwitheachproductoperatinginitsownsilo,whichnecessitatesmanualcorrelationwithexistingservices.Ironically,itcouldmeanthatcustomerountsthatleveragemoreserviceswouldbelessprofitablethanthosethatusefewerservices,inhibitingbusinessgrowth.Ontheotherhand,MSSPswhoseofferingsarepoweredbyabroad,integrated,andautomatedsecurityarchitecturecancustomizetheirofferingstoeachcustomer’sneeds.AndeverynewlyaddedserviceonanountincreasesbothARPUandprofits. “Youshouldexplaintothemthatyoursecurityservicesareabout morethanjustoutsourcing,gaps,andaugmentation.Instead,youshouldshowyourcustomersthatyoursecurityservicesgivethemesstothehumantalenttheycan’teasily getontheirown.”11 Threatintelligenceandanalytics Intoday’sadvancedthreatlandscape,customersneedreal-timeesstorobustthreatintelligencetocounterattacksthatmoveatmachinespeed.Inadditiontoacustomer’sownsecuritylogs,manysubscribetothreat-intelligencefeedspulledfromworksoffirewallsaroundtheworld,butitisachallengetoaggregatethisdataacrossafragmentedsecurityarchitectureintimetodeliveradequatespeedofresponse. Customersalsoexpectdata-drivenadvicefromtheprofessionalstheyarepayingtomanagetheirsecurityinfrastructure—achallengeforMSSPsoperatingindisaggregatedenvironments.Insuchanenvironment,providingadvicetocustomersisanexpensiveproposition,andtheinsightsgainedarelessvaluableduetoinevitablehumanerrorintheanalysis. UseCases ManagedsecureSD-WANservice Therapidgrowthofsoftware-definedworking(SD-WAN)overthepastfewyears12affordsMSSPsanincredibleopportunity.MSSPsnowhaveeasyesstotoolsthatcanincreasetheirfootprintatcustomersitesbyexpandingworkingservices.Theopportunityisequallyattractivetocustomers,asitenablesthemtoscaleworktrafficusingthepublicwithoutpayingfornewmultiprotocollabelswitching(MPLS)bandwidth.ButsecurityisabigchallengepaniesconsideringSD-WAN,worktrafficmovingonthepublicopensabignewelementoftheattacksurface. OtherSD-WANofferingsareoftenbasedonpointproductsthatarepurchasedandadministeredseparatelyfromasecuritysolution.Thiscanincreaseoperatingcosts,reducemargins,degradesecurity,andreducetheoverallqualityoftheservice.FortiGateSecurepletesecurityandworkingperformanceinasingleplatform,enablingMSSPstobroadentheirreachprofitably. SuchanofferingalsoprovidesthepotentialforanMSSPtoexpanditsservicestoworkingatbranchlocations—againwithoutaddingadditionalpointproducts.SD-BranchincludesFortiGateNext-GenerationFirewalls(NGFWs)binedwithswitching,wirelessess,workesscontroltoolstopleteconnectivityandsecurityprotectionatremoteoffices. OfferingmanagedsecureSD-WANservicespoweredbybringsanumberofadvantagestoMSSPs: nnTheopportunitytogrowARPUatexistingcustomersitesbyexpandingworkingservicesto,from,andwithinbranchlocations nnTheabilitytogrowthisnewbusinessovertimewithalackofexpensiveadditionalcontractsanddeploymentsrequired nnOperationalefficiencyandenhancedprofitabilitybydeliveringtheserviceviaafullyintegrated,multitenanttoolset
3 ManagedCloudSecurityServiceManagedSOCService WHITEPAPER|CybersecuritySolutionsforManagedSecurityServiceProviders SecureSD-WANService CustomerHQFortiGateSecureSD-WAN Branches SD-Branch SecurityFabric MSSP FortiGate FortiManager FortiAnalyzer AdvancedMalwareProtection FortiSIEM ThreatIntelligence Cloud Cloud Cloud SecurityFabric FortiWeb FortiManager FortiCWP FortiCASB FortiGate Figure1:Abroad,integrated,andautomatedsecurityarchitecturefromhelpsMSSPsdeliverawiderangeofservices,includingmanagedSD-WANservices,managedSOCservices,andmanagedcloudsecurityservices.
4 WHITEPAPER|CybersecuritySolutionsforManagedSecurityServiceProviders ManagedSOCservice Notpanycanaffordtohaveafull-fledgedSOC.Designingandbuildingoutthespace,hiringateam,andproviding24×7staffingandhardwareandsoftwaremaintenanceonanongoingbasisisanexpensiveproposition.Unfortunately,thecybersecurityskillsshortagemeansthattheproblemisonlygettingworse.13 Thatsaid,theenhancedsecurity,visibility,andactionableinsightsthatcanbederivedfromaSOCareimportantforthebusiness.MSSPscanfillthisgapbydeliveringarangeofservicesfromtheirownSOC.Theseservicescanbeofferedatspecificlevelsorastailoredservicesforindividualcustomers’needs. Forexample,manycustomersbenefitfrommanagedsecurityinformationandeventmanagement(SIEM)servicesbecauseofthedeepvisibilityandanalyticstheyprovide.Andmanageddetectionandresponseservicescanleverageartificialintelligence(AI)-driventhreatintelligenceandindicatorspromise(IOC)feedstoaddlayersofprotectiontocustomerenvironments.Customerscanevenhavetheirownlog-incredentialtoviewtheanalyticsforthemselves. “Inthemoderntimeswelivein,formulatingnewstrategies, andremedyingexistingsecuritymeasuresbatthechangingthreatlandscape,isoftheutmostimportance.Keepingthisinmind,MSSPsserveastheHolyGrailsolutionthatthecybersecurityrealm needstoday!
”14 TheSecurityFabric,poweredbyFortiGateNGFWs,enablesMSSPstobuildafull-spectrumSOCwithend-to-endintegrationacrosstheentirearchitecture.Numeroussecuritytoolsfromandthird-partyFabricPartnersintegrateseamlesslyintotheFabric.Additionally,theopenarchitectureandrobustrepresentationalstatetransferapplicationprogramminginterface(RESTAPI)enableMSSPstointegrateothersolutionstofillnicheneedsormaximizeinvestmentinlegacytools. DeliveringmanagedSOCservicesusingtheSecurityFabricbringsthesebenefitstoMSSPs: nnTheabilitytoprehensiveserviceswithoutmanagingaplethoraofpointproducts nnThebenefitofreal-time,AI-poweredthreatintelligencealongwithotherlayersofprotectionagainstunknownthreats nnOperationalefficiencyandenhancedprofitabilitybydeliveringtheserviceviaafullyintegrated,multitenanttoolset Managedcloudsecurityservice Theexplosionintheuseofthepubliccloudbybusinessesofallsizesdoesnotseemtobeslowing.Infact,Softwareas-a-Service(SaaS)spendingaloneisexpectedtoexceed$80billionthisyear15—anannualgrowthrateofmorethan17%.Unfortunately,therapidadoptionofsprawlingcloudinfrastructuresincreasessecurityplexityanizations,andtheresultisoftenthatcloud-basedapplicationsarevulnerable.Onekeydriverofriskisthemisconfigurationofcloud-basedsystems.16 Withtherightinfrastructure,MSSPscanprehensivecybersecurityprotectionforallservicesrunningonmultipleclouds.Alternatively,theycanofferprotectiononanapplication-by-applicationbasisusingaWebApplicationFirewall(WAF)as-a-Servicemodel.BothapproachescanincreaseanMSSP’sfootprintatcustomersites.Astheyoffermorecloudsecurityserviceswithinanount,operationalefficienciesderivedfromend-to-endintegrationcanincreasetheirmargins. offersrobust,cloud-nativetoolstobringMSSPcustomers’entiredistributedcloudinfrastructuretogetherunderasingleumbrella,withconsistentsecurityprotection,policymanagement,andconfigurationmanagement.FortiGateVMbringstheNGFWtoavirtualmachineformfactorthatworkswellforcloudenvironments,andtheFortiWebwebapplicationfirewall(WAF)isavailableinseveralformfactorsaswell,includingSaaS.TheFortiCASBcloudesssecuritybroker(CASB)serviceandtheFortiCWPcloudworkloadprotection(CWP)tooldelivervisibility,pliance,threatprotection,andconfigurationmanagementacrossthecloudinfrastructure.
5 WHITEPAPER|CybersecuritySolutionsforManagedSecurityServiceProviders AmanagedcloudsecurityservicepoweredbybringstheseadvantagestoMSSPs: nnSecuritytoolsnativetoeachcloudbringaconsistentsetofsecuritypoliciesandpracticestoallcustomerclouddeployments nnIn-line,real-timethreatintelligenceinFortiWebenablesinstant,automatedresponsetosecurityevents nnOperationalefficiencyandenhancedprofitabilitybydeliveringtheserviceviaafullyintegrated,multitenanttoolset DifferentiatorsforMSSPs Robust,broad-basedsecurityproductsandservicestoenableprehensivemenuofservicesforMSSPcustomersfromasingleplatform.ThiscanresultinhigherARPUandbroaderrevenueopportunities.Atthesametime,NetworkSecurityExpert(NSE)traininggivesMSSPsaconsolidatedtrainingmodelforabroadsetofsecurityworkingproductsundermanagement—andawaytodifferentiatetheirservices. “Customersarefortablesharingdatapaniestheyactually trust;whenfirmsfailtodeliveronsecurity,theirbrandreputation,customertrust,andevenrevenuearenegativelyimpacted.”17 MultipleproductconsumptionmodelsofferMSSPsandtheircustomerstheflexibilitytheyneedtosecuretheirdata,infrastructure,andapplicationsinthemostoptimalway.Differentsolutionsareavailableinappliance,virtualmachine,cloud,andSaaSformfactors.MSSPscanalsoleveragespecialpricingprogramssuchaspay-as-you-goandsubscriptions,providingtheflexibilitytoaddressdifferentbusinessmodelssupportingtheirserviceofferings. Recognizedleadershipworksecurity,namedaLeaderintheGartnerMagicQuadrantforNetworkFirewalls,18andscoringbestamongninevendorsintheNSSLabsNext-generationFirewallSecurityValueMap.19ThisunparalleledperformanceenablesMSSPstoreducetheircapitalexpenses(CapEx)spend,andasmallersecurityworkfootprinttodeployandmanagelowersoperationalexpenses(OpEx)costs. Theabilitytoleverageinvestmentsinthird-partyproductsviaintegrationthroughtheFabricAlliance,openAPIs,andarobustRESTAPI.ThisenablesMSSPswithrapidscaletoremovefrictionandincreasethespeedofservicerollouts. Securitysolutionsdesignedasmultitenantfromthegroundup,enablingMSSPstoisolatebutstillmanagemultipleworksfromasingleconsole.ThisincreasesARPUwhileimprovingoperationalefficiencies. Conclusion AscustomerslooktoMSSPstohelpthemwithseeminglyintractablecybersecuritychallenges,offeringlimited,cookiecutter,ordisconnectedservicesisnotagoodwaytobuildbusiness.ButMSSPsthatbaseabroadsetofservicesontheSecurityFabrichavetheopportunitytoeashopforsecurityservices—andatrustedadvisortoagrowingclientbase.
6 WHITEPAPER|CybersecuritySolutionsforManagedSecurityServiceProviders 1MekhalaRoy,“Effectsofcybersecurityskillsshortageworsening,newstudysays,”TechTarget,May10,2019.2“ManagedSecurityServicesMarketisExpectedtoExceedUSD$58billionby2024,”MarketWatch,February27,2019.3heVoilque,“MSSP2.0:HowtoLaunchorExpandManagedSecurityServiceswiththeSecurityFabric,”,March27,2019.4“KeyPrinciplesandStrategiesforSecuringtheEnterpriseCloud:TheCloudSecurityBlueprint,”,December16,2019.5“WebApplicationSecurityfortheCloud,”,March19,2019.6“BridgingtheNOC-SOCDivide:UnderstandingtheKeyArchitecturalRequirementsforIntegration,”,August23,2018.7ScottMatteson,“Topetitive,MSSPsneedtogrowandevolve,”TechRepublic,January16,2019.8JohnMaddison,“TheProblemwithTooManySecurityOptions,”,May9,2019.9DerekManky,“TheEvolvingThreatLandscape—Swarmbots,s,AutomationinMalware,”CSO,August29,2018.10“NetworkComplexityCreatesInefficienciesWhileRatchetingUpRisks:UnderstandingtheCausesandImplications,”,May8,2021.11“ManagedSecurityServices’ValueIsScale,”ChannelFutures,May14,2019.12AndyPatrizio,“EnterprisesaremovingtoSD-WANbeyondpilotstagestodevelopment,”NetworkWorld,May7,2018.13JonOltsik,“Isthecybersecurityskillsshortagegettingworse?
”CSO,May10,2019.14aJames,“HowCanMSSPsThriveintheGrowingTimeofComplexCyberThreats?
”Infosecurity,October29,2019.15LouisColumbus,“RoundupOfCloudComputingForecastsAndMarketEstimates,2018,”Forbes,September23,2018.16AsherBenbenisty,“Don’tGoOnceMoreUntotheBreach:FixThosePolicyConfigurationMistakes,”Infosecurity,October30,2018.17“Industryleadersstruggletobalancedigitalinnovationandsecurity,”HelpNetSecurity,April4,2018.18“FortiGateNetworkFirewallsGiveMSSPsAnotherReasontoSelect,”,September24,2019.19“IndependentValidationofSolutions:NSSLabsReal-worldGroupTests,”,January2020. Copyright©2021,Inc.Allrightsreserved.®,FortiGate®,FortiCare®andFortiGuard®,andcertainothermarksareregisteredtrademarksof,Inc.,andothernameshereinmayalsoberegisteredand/monlawtrademarksof.Allotherproductpanynamesmaybetrademarksoftheirrespectiveowners.Performanceandothermetricscontainedhereinwereattainedininternallabtestsunderidealconditions,andactualperformanceandotherresultsmayvary.Networkvariables,workenvironmentsandotherconditionsmayaffectperformanceresults.Nothinghereinrepresentsanymitmentby,anddisclaimsallwarranties,whetherexpressorimplied,excepttotheextententersabindingwrittencontract,signedby’sGeneralCounsel,withapurchaserthatexpresslywarrantsthattheidentifiedproductwillperformordingtocertainexpressly-identifiedperformancemetricsand,insuchevent,onlythespecificperformancemetricsexpresslyidentifiedinsuchbindingwrittencontractshallbebindingon.Forabsoluteclarity,anysuchwarrantywillbelimitedtoperformanceinthesameidealconditionsasin’sinternallabtests.disclaimsinfullanycovenants,representations,andguaranteespursuanthereto,whetherexpressorimplied.reservestherighttochange,modify,transfer,orotherwiserevisethispublicationwithoutnotice,andthemostcurrentversionofthepublicationshallbeapplicable.October30,20212:28AM519049-A-0-EN
声明：
该资讯来自于互联网网友发布，如有侵犯您的权益请联系我们。