Search results

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. Leading payment solutions company credits AlgoSec for increasing security and compliance Organization Payment Solutions Industry Financial Services Headquarters Download case study Share Customer
success stories "Leading fintech company rapidly improves security and compliance with AlgoSec jumpstart program" Background The company is one of the largest payment solutions providers, with offices processing more than 28 billion transactions worldwide. The company services 800,000 merchant outlets that generate $120 billion in processing volume. Its businesses include credit card processing, merchant acquisition and issuance of bank credit cards. The company grew to its enormous size through innovation and acquisition. It has introduced modern technology into the payments industry and has acquired many innovative companies over the last three decades. Challenges Today, the company operates 10 data centers with varying security architectures and firewall equipment from different vendors. The security staff is currently in the process of a cross-company firewall consolidation that will take several years to complete. The company is automating its change management of firewall rules to cut down on the time and effort spent on researching and implementing rules to keep up with its fast growth. It deploys rule changes during tight, scheduled “push windows” and conducts compliance reviews twice per year. The firewall change process is highly complex with many steps: Request Design Peer Review Management Approval Implementation Validation Success for the security team is all about time. They seek to automate the process by reducing time spent on: Research and writing rules Peer reviews Staging Security peering after staging Firewall push window requirements Quarterly firewall ruleset reviews as part of compliance objectives Solution The security team acquired AlgoSec Horizon Security Analyzer (AFA) and deployed it at two of its data centers in Arizona and Colorado. In both locations, the company is in the process of firewall migration to consolidate on one vendor. However, they need to add firewall clusters one at a time after each migration instead of all at once. The company took advantage of AlgoSec’s Jumpstart Program that delivers the benefits of AlgoSec Horizon Security Analyzer in conjunction with other AlgoSec solutions quickly. With Jumpstart, the company is quickly able to: Automate the discovery and mapping of enterprise applications Automate the change management processes Adopt the new processes across the company Realize rapid ROI The company’s lead security infrastructure consultant proclaimed, “AlgoSec customized their Jumpstart Program just for us. Their people are engaged, personable, skilled and highly efficient. They became part of our team dedicated to our success.” In addition to getting Horizon Security Analyzer up and running quickly and delivering its benefits, the Jumpstart team’s AFA deployment immediately identified network security gaps and helped the company close them, making them more secure and compliant. Results AlgoSec Horizon Security Analyzer is achieving all the goals of the security team. Time for policy writing reduced from 90 hours to 15 hours – 83% less Cut the total process time by half, enabling the security team to keep up with the barrage of change requests. Reduced the admin overhead from 30 to 4 – 87% less “Automation is definitely the way to go,” declared their security consultant. “We can now stay on top of the process even while we migrate our firewalls. We are looking for more from AlgoSec.” The company is now in the process of implementing AlgoSec Horizon FireFlow (AFF) to enhance the existing change management system with intelligent network and security automation. AlgoSec Horizon FireFlow enforces compliance and automatically documents the entire change-management lifecycle. Some of the features include: Processing of firewall changes with zero-touch automation Elimination of mistakes and rework, and improvement of accountability for change requests Proactive assessment of the impact of network changes to ensure security and continuous compliance Automation of the rule–recertification processes Schedule time with one of our experts

AlgoSec Horizon Security Analyzer delivers visibility analysis of your network applications across your hybrid network Identify compliance gaps Optimizing policy automation through effective object management Manage network objects across your on-prem and hybrid cloud estate Schedule a demo Watch a video Bring order to a disorderly network. Easily automate changes to firewall and SDN objects from a central location saving time and labor Automate object changes Learn more Reduce risk of outages and security breaches by identifying misaligned object definitions, duplicate objects and unattached objects. Reduce risk Learn more Automatically discover and gain full visibility of all firewall and SDN objects in your network in one central repository. Complete visibility for network objects Learn more Object management is one important piece of a robust security policy. See how our full solution suitecompletes the picture. End-to-end security management Security policy you can see Horizon Security Analyzer Discover, identify, and map business applications across your entire hybrid network. Learn more AlgoSec Cloud Effortless cloud management Security management across the hybrid and multi-cloud estate. Learn more Watch the video "We are much secure since we have had this product" What they say about us Network security Engineer/architect Equip yourself with the technical details to discuss with your team and managers Ready for a deep dive? Learn more Got everything you need?
Here’s how you get started How to buy Learn more Get the conversation started by sharing it with your team Solution brochure Learn more Here's how we secure our SaaS solution Cloud Security Get the latest insights from the experts Managing network objects in hybrid environments Watch a video Bridging Network Security Gaps with Better Network Object Management Read an article Learn about the different sources for application connectivity discovery Read solution brochure Schedule time with one of our experts Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

Migrate policies to Cisco ACI with AlgoSec Download PDF Download PDF Add a Title Add a Title Add a Title Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

The aim of this post is to provide a very high-level illustration of the DNS Tunneling method used in the SolarWinds supply chain attack.... Cloud Security DNS Tunneling In The SolarWinds Supply Chain Attack Rony Moshkovich 2 min read Rony Moshkovich Short bio about author here Lorem ipsum dolor sit amet consectetur. Vitae donec tincidunt elementum quam laoreet duis sit enim. Duis mattis velit sit leo diam. Tags Share this article 12/23/20 Published The aim of this post is to provide a very high-level illustration of the DNS Tunneling method used in the SolarWinds supply chain attack . An Attacker compromises SolarWinds company and trojanizes a DLL that belongs to its software. Some of the customers receive the malicious DLL as an update for the SolarWinds Orion software. “Corporation XYZ” receives the malicious and digitally signed DLL via update. SolarWinds Orion software loads the malicious DLL as a plugin. Once activated, the DLL reads a local domain name “local.corp-xyz.com” (a fictious name). The malware encrypts the local domain name and adds it to a long domain name. The long domain name is queried with a DNS server (can be tapped by a passive DNS sensor). The recursive DNS server is not authorized to resolve avsvmcloud[.]com, so it forwards the request. An attacker-controlled authoritative DNS server resolves the request with a wildcard A record. The Attacker checks the victim’s name, then adds a CNAME record for the victim’s domain name. The new CNAME record resolves the long domain name into an IP of an HTTP-based C2 server. The malicious DLL downloads and executes the 2nd stage malware (TearDrop, Cobalt Strike Beacon). A Threat Researcher accesses the passive DNS (pDNS) records. One of the long domain names from the pDNS records is decrypted back into “local.corp-xyz.com”. The Researcher deducts that the decrypted local domain name belongs to “Corporation XYZ”. Schedule a demo Related Articles Q1 at AlgoSec: What innovations and milestones defined our start to 2026? AlgoSec Reviews Mar 19, 2023 · 2 min read 2025 in review: What innovations and milestones defined AlgoSec’s transformative year in 2025? AlgoSec Reviews Mar 19, 2023 · 2 min read Navigating Compliance in the Cloud AlgoSec Cloud Mar 19, 2023 · 2 min read Speak to one of our experts Speak to one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Schedule a call

The goal of the AlgoSec Professional Services Team is to partner with you and enable you to meet your budget, time and resource constraints AlgoSec professional services Service offerings We offer a variety of à la carte Professional Services to help you quickly benefit from your AlgoSec investment. AlgoSec JumpStart packages View detailed information Through our new JumpStart packages we will deploy your AlgoSec products quickly and cost-effectively within your environment, so that you can start generating value from your AlgoSec investment as soon as possible Basic deployment of the AlgoSec security management suite View detailed information This service includes installing your AlgoSec appliances with the most recent build of the AlgoSec Security Management Suite including AlgoSec Horizon Security Analyzer and/or AlgoSec Horizon FireFlow and/or AlgoSec BusinessFlow, then verifying connectivity and defining devices. We will also verify that the reporting functionality works properly for each deployed device, and will provide sufficient knowledge transfer to enable you to perform basic operations in your AlgoSec environment. AlgoSec technical audit View detailed information Get a technical audit of your running AlgoSec environment – remotely or on-premises. Make sure you are optimally configured to get the best performance and functionality. Identify critical issues, receive insights and actionable suggestions to help you improve your network, identify issues that may have arisen since deployment, as well as recommendations for architectural improvements and optimization. AlgoSec Technical Audit is recommended once a year, and at least 6 months following initial deployment. Integration with existing Change Management Systems (CMS) View detailed information We can seamlessly integrate with any existing CMS including ServiceNow, Remedy, ServiceDesk and others. We can integrate your CMS system with AlgoSec via a Web Services call, as well as import historical change requests into AlgoSec. Advanced configuration View detailed information Suitable for complex, enterprise environments, this service includes verifying requirements and designing the appropriate topology for: High-Availability or Disaster-Recovery modes Load Distribution mode Geographical Distribution or Central-Manager / Remote-Agent mode Develop custom reports View detailed information We can create custom risk profiles and baseline configuration reports to meet your unique needs. Develop custom change workflows View detailed information While AlgoSec includes several out-of-the-box workflows, we can develop custom workflows to meet your unique needs. Customization options include creating the different steps in a change process, managing the ticket lifecycle based on your processes, dynamically routing tickets to required approvers and changing request form fields and appearance. Project management and customer success management View detailed information We can provide on-going project management to support your AlgoSec implementation. We provide regular status updates and meetings to ensure that the project is on schedule and meets your requirements. Schedule time with one of our experts Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* Long answer Send message

In today’s digital world, is your data 100% secure? As more people and businesses use cloud services to handle their data,... Cloud Security Your Complete Guide to Cloud Security Architecture Rony Moshkovich 2 min read Rony Moshkovich Short bio about author here Lorem ipsum dolor sit amet consectetur. Vitae donec tincidunt elementum quam laoreet duis sit enim. Duis mattis velit sit leo diam. Tags Share this article 7/4/23 Published In today’s digital world, is your data 100% secure? As more people and businesses use cloud services to handle their data, vulnerabilities multiply. Around six out of ten companies have moved to the cloud, according to Statista . So keeping data safe is now a crucial concern for most large companies – in 2022, the average data leak cost companies $4.35 million . This is where cloud security architecture comes in. Done well, it protects cloud-based data from hackers, leaks, and other online threats. To give you a thorough understanding of cloud security architecture, we’ll look at; What cloud security architecture is The top risks for your cloud How to build your cloud security How to choose a CPSM (Cloud Security Posture Management) tool Let’s jump in What is cloud security architecture? Let’s start with a definition: “Cloud security architecture is the umbrella term used to describe all hardware, software and infrastructure that protects the cloud environment and its components, such as data, workloads, containers, virtual machines and APIs.” ( source ) Cloud security architecture is a framework to protect data stored or used in the cloud. It includes ways to keep data safe, such as controlling access, encrypting sensitive information, and ensuring the network is secure. The framework has to be comprehensive because the cloud can be vulnerable to different types of attacks. Three key principles behind cloud security Although cloud security sounds complex, it can be broken down into three key ideas. These are known as the ‘CIA triad’, and they are; Confidentiality Integrity Availability ‘The CIA Triad’ Image source Confidentiality Confidentiality is concerned with data protection. If only the correct people can access important information, breaches will be reduced. There are many ways to do this, like encryption, access control, and user authentication. Integrity Integrity means making sure data stays accurate throughout its lifecycle. Organizations can use checksums and digital signatures to ensure that data doesn’t get changed or deleted. These protect against data corruption and make sure that information stays reliable. Availability Availability is about ensuring data and resources are available when people need them. To do this, you need a robust infrastructure and ways to switch to backup systems when required. Availability also means designing systems that can handle ‘dos attacks’ and will interrupt service. However, these three principles are just the start of a strong cloud infrastructure. The next step is for the cloud provider and customer to understand their security responsibilities. A model developed to do this is called the ‘Shared Responsibility Model.’ Understanding the Shared Responsibility Model Big companies like Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform offer public cloud services. These companies have a culture of being security-minded , but security isn’t their responsibility alone. Companies that use these services also share responsibility for handling data. The division of responsibility depends on the service model a customer chooses. This division led Amazon AWS to create a ‘shared responsibility model’ that outlines these. Image Source There are three main kinds of cloud service models and associated duties: 1. Infrastructure as a Service (IaaS), 2. Platform as a Service (PaaS) 3. Software as a Service (SaaS). Each type gives different levels of control and flexibility. 1. Infrastructure as a Service (IaaS) With IaaS, the provider gives users virtual servers, storage, and networking resources. Users control operating systems, but the provider manages the basic infrastructure. Customers must have good security measures, like access controls and data encryption. They also need to handle software updates and security patches. 2. Platform as a Service (PaaS) PaaS lets users create and run apps without worrying about having hardware on-premises. The provider handles infrastructure like servers, storage, and networking. Customers still need to control access and keep data safe. 3. Software as a Service (SaaS) SaaS lets users access apps without having to manage any software themselves. The provider handles everything, like updates, security, and basic infrastructure. Users can access the software through their browser and start using it immediately. But customers still need to manage their data and ensure secure access. Top six cybersecurity risks As more companies move their data and apps to the cloud, there are more chances for security to occur. Although cybersecurity risks change over time , some common cloud security risks are: 1. Human error 99% of all cloud security incidents from now until 2025 are expected to result from human error. Errors can be minor, like using weak passwords or accidentally sharing sensitive information. They can also be bigger, like setting up security incorrectly. To lower the risk of human error, organizations can take several actions. For example, educating employees, using automation, and having good change management procedures. 2. Denial-of-service attacks DoS attacks stop a service from working by sending too many requests. This can make essential apps, data, and resources unavailable in the cloud. DDoS attacks are more advanced than DoS attacks, and can be very destructive. To protect against these attacks, organizations should use cloud-based DDoS protection. They can also install firewalls and intrusion prevention systems to secure cloud resources. 3. Hardware strength The strength of the physical hardware used for cloud services is critical. Companies should look carefully at their cloud service providers (CSPs) hardware offering. Users can also use special devices called hardware security modules (HSMs). These are used to protect encryption codes and ensure data security. 4. Insider attacks Insider attacks could be led by current or former employees, or key service providers. These are incredibly expensive, costing companies $15.38 million on average in 2021 . To stop these attacks, organizations should have strict access control policies. These could include checking access regularly and watching for strange user behavior. They should also only give users access to what they need for their job. 5. Shadow IT Shadow IT is when people use unauthorized apps, devices, or services. Easy-to-use cloud services are an obvious cause of shadow IT. This can lead to data breaches , compliance issues, and security problems. Organizations should have clear rules about using cloud services. All policies should be run through a centralized IT control to handle this. 6. Cloud edge When we process data closer to us, rather than in a data center, we refer to the data as being in the cloud edge. The issue? The cloud edge can be attacked more easily. There are simply more places to attack, and sensitive data might be stored in less secure spots. Companies should ensure security policies cover edge devices and networks. They should encrypt all data, and use the latest application security patches. Six steps to secure your cloud Now we know the biggest security risks, we can look at how to secure our cloud architecture against them. An important aspect of cloud security practices is managing access your cloud resources. Deciding who can access and what they can do can make a crucial difference to security. Identity and Access Management (IAM) security models can help with this. Companies can do this by controlling user access based on roles and responsibilities. Security requirements of IAM include: 1. Authentication Authentication is simply checking user identity when they access your data. At a superficial level, this means asking for a username and password. More advanced methods include multi-factor authentication for apps or user segmentation. Multi-factor authentication requires users to provide two or more types of proof. 2. Authorization Authorization means allowing access to resources based on user roles and permissions. This ensures that users can only use the data and services they need for their job. Limiting access reduces the risk of unauthorized users. Role-based access control (RBAC) is one way to do this in a cloud environment. This is where users are granted access based on their job roles. 3. Auditing Auditing involves monitoring and recording user activities in a cloud environment. This helps find possible security problems and keeps an access log. Organizations can identify unusual patterns or suspicious behavior by regularly reviewing access logs. 4. Encryption at rest and in transit Data at rest is data when it’s not being used, and data in transit is data being sent between devices or users. Encryption is a way to protect data from unauthorized access. This is done by converting it into a code that can only be read by someone with the right key to unlock it. When data is stored in the cloud, it’s important to encrypt it to protect it from prying eyes. Many cloud service providers have built-in encryption features for data at rest. For data in transit, encryption methods like SSL/TLS help prevent interception. This ensures that sensitive information remains secure as it moves across networks. 5. Network security and firewalls Good network security controls are essential for keeping a cloud environment safe. One of the key network security measures is using firewalls to control traffic. Firewalls are gatekeepers, blocking certain types of connections based on rules. Intrusion detection and prevention systems (IDPS) are another important network security tool. IDPS tools watch network traffic for signs of bad activity, like hacking or malware. They then can automatically block or alert administrators about potential threats. This helps organizations respond quickly to security incidents and minimize damage. 6. Versioning and logging Versioning is tracking different versions of cloud resources, like apps and data. This allows companies to roll back to a previous version in case of a security incident or data breach. By maintaining a version history, organizations can identify and address security vulnerabilities. How a CSPM can help protect your cloud security A Cloud Security Posture Management (CSPM) tool helpful to safeguard cloud security. These security tools monitor your cloud environment to find and fix potential problems. Selecting the right one is essential for maintaining the security of your cloud. A CSPM tool like Prevasio management service can help you and your cloud environment. It can provide alerts, notifying you of any concerns with security policies. This allows you to address problems quickly and efficiently. Here are some of the features that Prevasio offers: Agentless CSPM solution Secure multi-cloud environments within 3 minutes Coverage across multi-cloud, multi-accounts, cloud-native services, and cloud applications Prioritized risk list based on CIS benchmarks Uncover hidden backdoors in container environments Identify misconfigurations and security threats Dynamic behavior analysis for container security issues Static analysis for container vulnerabilities and malware All these allow you to fix information security issues quickly to avoid data loss. Investing in a reliable CSPM tool is a wise decision for any company that relies on cloud technology. Final Words As the cloud computing security landscape evolves, so must cloud security architects. All companies need to be proactive in addressing their data vulnerabilities. Advanced security tools such as Prevasio make protecting cloud environments easier. Having firm security policies avoids unnecessary financial and reputational risk. This combination of strict rules and effective tools is the best way to stay secure. Schedule a demo Related Articles Q1 at AlgoSec: What innovations and milestones defined our start to 2026? AlgoSec Reviews Mar 19, 2023 · 2 min read 2025 in review: What innovations and milestones defined AlgoSec’s transformative year in 2025? AlgoSec Reviews Mar 19, 2023 · 2 min read Navigating Compliance in the Cloud AlgoSec Cloud Mar 19, 2023 · 2 min read Speak to one of our experts Speak to one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Schedule a call

AlgoSec Values Download PDF Download PDF Add a Title Add a Title Add a Title Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

Case Study Soitron Siber Güvenlik Servisleri Horizon Platform released in July 2026. This paper refers to previous product offerings. Download PDF Download PDF Add a Title Add a Title Add a Title Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

Horizon ACE gives you complete visibility into your cloud applications, simplifies network security policy management, and automates compliance across your multi-cloud infrastructure. Horizon ACE Information Center Getting started Why Horizon ACE Horizon ACE access Horizon ACE videos Let’s connect Getting started Great news! As a valued AlgoSec Cloud customer, you now have extended access to AlgoSec Cloud Enterprise (Horizon ACE). We're so excited for you to experience the next level of cloud security, designed to give you unparalleled visibility and control. You're already doing great things with AlgoSec for network security. Now, Horizon ACE is here to help you do even more, providing deeper insights and comprehensive management across your entire multi-cloud environment. Important: To ensure you can see and use all the amazing features the app analyzer has to offer, you'll need to open the required permissions in your cloud environment. This is a crucial step that ensures the program can access all the data required to give you a complete picture. You can find detailed instructions and a list of the permissions needed for your specific cloud provider here: AWS: Horizon ACE Access AWS Azure: Horizon ACE Access Azure GCP: Horizon ACE Access GCP Why Horizon ACE? Horizon ACE gives you complete visibility into your cloud applications, simplifies network security policy management, and automates compliance across your multi-cloud infrastructure. Think of it as your new co-pilot for cloud security, helping you: One unified view: Seamlessly combine cloud posture management with your existing AlgoSec network security. Get a truly holistic perspective of your entire environment. With Horizon ACE, you can bridge the gap between your cloud and on-premise infrastructure to achieve unified hybrid security. With Horizon ACE you can: Gain a single, holistic view across both environments. Enforce consistent policies. Simplify change management. To get a clearer picture of how Horizon ACE can transform your security, download our one-pager. Deeper, actionable insights: Dive into advanced features that give you immediate, practical intelligence about your cloud security health. You'll know exactly what to do next. Amplified protection: Proactively discover and tackle risks across your entire cloud environment, strengthening the already solid foundation you have with AlgoSec. Horizon ACE access We're all about empowering you with the best cloud security tools available. This extended access to Horizon ACE is our way of providing you with: See everything (beyond the network!): Get a full, real-time inventory of all your cloud applications and infrastructure. No more blind spots – you'll see everything, far beyond traditional network boundaries. Spot risks before they're problems: Proactively find vulnerabilities and misconfigurations across your entire cloud setup. Horizon ACE helps you identify potential issues before they can impact your operations, building on your current security efforts. Keep compliance simple: Maintain strong and continuous compliance with industry standards and your internal policies. Horizon ACE brings you deeper, cloud-native insights to make compliance easier than ever. Streamline your day: Automate security workflows and policy enforcement. This means more time for you and consistent security across all your expanding cloud resources. Ready to explore your new Horizon ACE access? You've already been granted access! Look for a welcome email with simple instructions to confirm and get started. We'll be there to guide you through the initial steps, helping you quickly get comfortable with the Horizon ACE dashboard and all its powerful features. We've designed this to be a smooth, insightful, and incredibly valuable experience for you! Join the growing community of leading organizations who are transforming their cloud security with the unified power of AlgoSec. We're here to help you master your cloud security journey! Horizon ACE videos Horizon ACE Access Horizon ACE Overview Application Discovery Horizon ACE Dashboard Horizon ACEConfiguration & Compliance Container Security Let’s connect Have a question, need more information, or just want to say hello? We'd love to hear from you Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

Avishai Wool, CTO and co-founder of AlgoSec, looks at how organizations can implement and manage SDN-enabled micro-segmentation... Micro-segmentation Building a Blueprint for a Successful Micro-segmentation Implementation Prof. Avishai Wool 2 min read Prof. Avishai Wool Short bio about author here Lorem ipsum dolor sit amet consectetur. Vitae donec tincidunt elementum quam laoreet duis sit enim. Duis mattis velit sit leo diam. Tags Share this article 6/22/20 Published Avishai Wool, CTO and co-founder of AlgoSec, looks at how organizations can implement and manage SDN-enabled micro-segmentation strategies Micro-segmentation is regarded as one of the most effective methods to reduce an organization’s attack surface, and a lack of it has often been cited as a contributing factor in some of the largest data breaches and ransomware attacks. One of the key reasons why enterprises have been slow to embrace it is because it can be complex and costly to implement – especially in traditional on-premise networks and data centers. In these, creating internal zones usually means installing extra firewalls, changing routing, and even adding cabling to police the traffic flows between zones, and having to manage the additional filtering policies manually. However, as many organizations are moving to virtualized data centers using Software-Defined Networking (SDN), some of these cost and complexity barriers are lifted. In SDN-based data centers the networking fabric has built-in filtering capabilities, making internal network segmentation much more accessible without having to add new hardware. SDN’s flexibility enables advanced, granular zoning: In principle, data center networks can be divided into hundreds, or even thousands, of microsegments. This offers levels of security that would previously have been impossible – or at least prohibitively expensive – to implement in traditional data centers. However, capitalizing on the potential of micro-segmentation in virtualized data centers does not eliminate all the challenges. It still requires the organization to deploy a filtering policy that the micro-segmented fabric will enforce, and writing this a policy is the first, and largest, hurdle that must be cleared. The requirements from a micro-segmentation policy A correct micro-segmentation filtering policy has three high-level requirements: It allows all business traffic – The last thing you want is to write a micro-segmented policy and have it block necessary business communication, causing applications to stop functioning. It allows nothing else – By default, all other traffic should be denied. It is future-proof – ‘More of the same’ changes in the network environment shouldn’t break rules. If you write your policies too narrowly, when something in the network changes, such as a new server or application, something will stop working. Write with scalability in mind. A micro-segmentation blueprint Now that you know what you are aiming for, how can you actually achieve it? First of all, your organization needs to know what your traffic flows are – what is the traffic that should be allowed. To get this information, you can perform a ‘discovery’ process. Only once you have this information, can you then establish where to place the borders between the microsegments in the data center and how to devise and manage the security policies for each of the segments in their network environment. I welcome you to download AlgoSec’s new eBook , where we explain in detail how to implement and manage micro-segmentation. AlgoSec Enables Micro-segmentation The AlgoSec Security Management Suite (ASMS) employs the power of automation to make it easy to define and enforce your micro-segmentation strategy inside the data center, ensure that it does not block critical business services, and meet compliance requirements. AlgoSec supports micro-segmentation by: Providing application discovery based on netflow information Identifying unprotected network flows that do not cross any firewall and are not filtered for an application Automatically identifying changes that will violate the micro-segmentation strategy Automatically implementing network security changes Automatically validating changes The bottom line is that implementing an effective network micro-segmentation strategy is now possible. It requires careful planning and implementation, but when carried out following a proper blueprint and with the automation capabilities of the AlgoSec Security Management Suite, it provides you with stronger security without sacrificing any business agility. Find out more about how micro-segmentation can help you boost your security posture, or request your personal demo . Schedule a demo Related Articles Q1 at AlgoSec: What innovations and milestones defined our start to 2026? AlgoSec Reviews Mar 19, 2023 · 2 min read 2025 in review: What innovations and milestones defined AlgoSec’s transformative year in 2025? AlgoSec Reviews Mar 19, 2023 · 2 min read Navigating Compliance in the Cloud AlgoSec Cloud Mar 19, 2023 · 2 min read Speak to one of our experts Speak to one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Schedule a call

AlgoSec products are sold through our worldwide network of channel partners Request a quote, contact sales or locate a Partner How to buy Request a quote Contact Sales Locate a Partner AWS Marketplace Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Send us a note Work email* First name* Last name* Company* country* Select country... Short answer* Long answer Send message

Hospitals are increasingly becoming a favored target of cyber criminals. Yet if you think about medical equipment that is vulnerable to... Cyber Attacks & Incident Response Checking the cybersecurity pulse of medical devices Prof. Avishai Wool 2 min read Prof. Avishai Wool Short bio about author here Lorem ipsum dolor sit amet consectetur. Vitae donec tincidunt elementum quam laoreet duis sit enim. Duis mattis velit sit leo diam. Tags Share this article 6/14/16 Published Hospitals are increasingly becoming a favored target of cyber criminals. Yet if you think about medical equipment that is vulnerable to being hacked at a hospital, you might not immediately think of high-end, critical equipment such as MRI and X-ray scanners, and nuclear medicine devices. After all, these devices go through rigorous approval processes by the US Food & Drug Administration (FDA) before they are approved for safe use on patients. Yet today many, if not most, medical devices, have computers embedded in them, are connected to the hospital network, and often to the internet as well, so they provide a potential attack vector for cyber criminals. In late 2015 security researchers found that thousands of medical devices were vulnerable to attack and exposed to the public Internet. Interestingly, these researchers also found that many of the devices in question were running Windows XP – which is no longer supported or updated by Microsoft – and did not run antivirus software to protect them against malware. This combination raises an obvious security red flag. Ironically, these security vulnerabilities were further exacerbated because of the very FDA approvals process that certifies the devices. The approval process is, quite rightly, extremely rigorous. It is also lengthy and expensive. And if a manufacturer or vendor makes a change to a device, it needed to be re-certified. Until very recently, a ‘change’ to a medical device meant any sort of change – including patching devices’ operating systems and firmware to close off potential network security vulnerabilities. You can see where this is going: making simple updates to medical equipment to improve its defenses against cyberattacks was made that much more difficult and complex for the device manufacturers, because of the need for FDA re-certification every time a change was made. And of course, this potential delay in patching vulnerabilities made it easy for a hacker to try and ‘update’ the device in his own way, for criminal purposes. Hackers are usually not too concerned about getting FDA approval for their work. Fortunately, the FDA released new guidelines last year that allowed equipment manufacturers to patch software as required without undergoing re-certification—provided the change or modification does not ‘significantly affect the safety or effectiveness of the medical device’. That’s good news – but it’s not quite the end of the story. The FDA’s guidelines are only a partial panacea to the overall problem. They overlook the fact that many medical devices are running obsolete operating systems like Windows XP. What’s more, the actual process of applying patches to the computers in medical devices can vary enormously from manufacturer to manufacturer, with some patches needing to be downloaded and applied manually, while others may be pushed automatically. In either case, there could still be a window of weeks, months or even years before the device’s vendor issues a patch for a given vulnerability – a window that a hacker could exploit before the hospital’s IT team becomes aware that the vulnerability exists. This means that hospitals need to take great care when it comes to structuring and segmenting their network . It is vital that connected medical devices – particularly those where the internal OS may be out of date – are placed within defined, segregated segments of the network, and robustly protected with next-generation firewalls, web proxies and other filters. While network segmentation and filtering will not protect unpatched or obsolete operating system, they will ensure that the hospital’s network is secured to the best of its ability . Schedule a demo Related Articles Q1 at AlgoSec: What innovations and milestones defined our start to 2026? AlgoSec Reviews Mar 19, 2023 · 2 min read 2025 in review: What innovations and milestones defined AlgoSec’s transformative year in 2025? AlgoSec Reviews Mar 19, 2023 · 2 min read Navigating Compliance in the Cloud AlgoSec Cloud Mar 19, 2023 · 2 min read Speak to one of our experts Speak to one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Schedule a call