Gemalto Safenet Solution for Cloud Data Security
 

SaaS Security: Cloud Access Control:

Protect access to cloud-based applications via centrally-managed authentication

Cloud Access Control for SaaS Applications

When data and applications move to the cloud, user access—by default —takes place remotely. Organizations therefore have to implement user access controls for enterprise resources residing both in the cloud and within the confines of the data center. With enterprise security perimeters becoming increasingly blurry, organizations are having difficulty affording, implementing and managing consistent, unified access policies to distributed IT resources.

Secure Cloud Access from Gemalto

Gemalto’s SafeNet Authentication Solutions overcome these challenges by allowing organizations to seamlessly extend secure access to the cloud through identity federation. SafeNet authentication platforms leverage organizations’ existing authentication infrastructures, allowing them to extend users’ on-premises identities to the cloud and enabling them to implement consistent access control policies for both cloud and network applications.

Advantages of SafeNet Authentication Solutions’ Native Identity Federation

• Secure access to any cloud application, including Office 365, Salesforce, Amazon Workspaces, GoogleApps, etc.
• 20% lower help desk costs, achieved by eliminating lost or forgotten password tickets
• Lets users authenticate with their current enterprise identity
• Lets IT administrators manage a single username and password set, per user, for all cloud applications
• With native SAML-as-a-Service, there’s no need to buy a separate federation server

With SafeNet multi-factor authentication solutions, you can leverage a unified authentication infrastructure for both on-premise and cloud-based services—providing a centralized, comprehensive way to manage all access policies. Users can log into enterprise cloud services such as Office365, Salesforce.com or GoogleApps through your existing SafeNet authentication mechanisms.

SafeNet cloud access control solutions makes it easy for enterprises to maximize cloud authentication security by offering the following advantages:

• Comprehensive platform: All SafeNet solutions can be managed through SafeNet Authentication Manager, which serves as a central management server that enables identity federation, access controls, and strong authentication to both on-premise and SaaS applications.
• Deployment and form factor flexibility: Gemalto offers the broadest authentication portfolio, including PKI certificate-based authentication, out-of-band via push notification, email or SMS text messages, one time passcodes, contextual authentication, and more, ensuring that organizations can tailor their solutions to their unique security and business objectives.
• User friendliness: Automatic provisioning and federated login to cloud-based (SaaS) applications.
• Advanced reporting: Gemalto's SafeNet authentication platforms offer extensive reporting capabilities that streamline compliance with a host of security regulations and policies.

"The availability and built-in capacity of SafeNet Authentication Service cloud delivery model not only proved to be able to scale with our business, but is able to do so in a very efficient and cost-effective manner."

- Marc Chambault, Product Manager, Integralis

Cloud Data Encryption Solutions

Encrypt your data in any cloud environment

Cloud data encryption solutions combined with strong key management give organizations the ability to protect sensitive data outside of their control as it is used, transferred, stored, or otherwise shared in the cloud and multi-tenant environments.

With truly effective cloud data security, you can protect sensitive information – such as company financials, personally identifiable information, and intellectual property – regardless of where the data resides or the solution you’re using within the SaaS, PaaS or IaaS cloud stack.

Find cloud data encryption solutions that meet your needs

When your data is in the cloud, or moving between the different environments your organization supports, you need to move past silo-constrained encryption and deploy encryption centrally, uniformly, and at scale.

With Gemalto’s SafeNet Cloud Data Encryption solutions, organizations can apply data protection where they need it, when they need it, and how they need it—according to the unique needs of their business.

Secure your data in motion across the cloud

Secure your data in motion across the cloud

SafeNet High Speed Encryptors enable secure cloud connectivity. Proven high-assurance Layer 2 network security for your sensitive data, real-time video and voice, as it moves across virtual and physical networks, between data centers, to the last mile, and up to the cloud and back again.

Encrypt your virtual machine instances

Encrypt your virtual machine instances

SafeNet ProtectV provides security and compliance across virtual and cloud-enabled infrastructure to secure sensitive workloads in the cloud, store confidential data and comply with industry regulations in controlled industries.

Protect your files, folders and shares transparently in the cloud

Protect your files, folders and shares transparently in the cloud

SafeNet ProtectFile is a cloud agnostic solution that works across cloud providers (AWS, Microsoft Azure, IBM SoftLayer, VMware) to encrypt files, folders and shares. SafeNet ProtectFile secures: SQL and NoSQL databases, big data (Apache Hadoop) implementations, DAS, NAS and SAN storage and other solutions such as SharePoint, Gemstone, CHEF, Docker, and Office Tools.

Secure your applications in the cloud

Secure your applications in the cloud

SafeNet ProtectApp encrypts application data as it is created and keeps it secure across its entire lifecycle on-premises or in any cloud – no matter where it is transferred, backed up, or copied. Since the data is secured so early in its life, it stays encrypted throughout its route to the cloud and even remains secure as data.

Protect your databases in the cloud

Protect your databases in the cloud

SafeNet ProtectDB transparently encrypts data at the column-level in multi-vendor database management systems located on-premises or in the cloud. Policy-based controls restrict column access to roles, users, and time of day - among other variables – to preserve finely tailored data ownership even as it moves into cloud datacenters or is shifted from one cloud to another.

Application-level tokenization service

Application-level tokenization service

SafeNet Tokenization protects high value information in databases located in the cloud by replacing it with a surrogate value - a “token” - that preserves the length and format of the data.

Key lifecycle management across clouds

Key lifecycle management across clouds

SafeNet KeySecure provides scalable security for your route to cloud. Migrate data safely to the cloud, maintain full control and ownership of encryption keys and data, and avoid fragmented key stores with a single, centralized enterprise key management platform. SafeNet KeySecure is a key management server that centralizes the administration of cryptographic materials from across an organization’s encryption infrastructure. Together with SafeNet KeySecure, you can also deploy a SafeNet Hardware Security Module as your root of trust on premises or in the cloud.

Four Reasons You’ll Love Our Cloud Data Encryption:

1. Strengthen security. Centrally manage and broadly deploy security policies to reduce the cost and effort of securing cloud services and managing the keys for disparate security solutions.
2. Ensure compliance and provide detailed audit trails. Encryption ensures that your data is unreadable even if breached. With a unified, cohesive view of cryptographic activity across your enterprise’s cloud-based and on-premises operations, organizations can much more readily track and comply with all relevant security and privacy mandates, dramatically reducing audit durations and costs.
3. Reduce security and IT costs. Leverage proven, repeatable, and documented processes. With centralized, efficient processes for managing policies and cryptographic keys, both upfront cost and ongoing administration efforts are minimized whatever cloud you are using.
4. Increase IT and business agility. Adapt to changing requirements and challenges. Roll out quickly and effectively, taking advantage of the cloud’s agility to support your business objectives—without making any compromises in security.

Cloud Key Management Solutions

Controlling Crypto in the Cloud

Cryptography provides a means for protecting and controlling data wherever it exists. However, when cryptography is used, the risk is transferred from the content of the data, to the cryptographic keys used to protect that data.

Gemalto's SafeNet cloud key management solutions enable you to control your keys and thereby run more sensitive data and workloads in the cloud securely.

Now encryption and key management in the cloud provide the same high-grade protections as if it were fully on-premises, enabling organizations of all types to reach new levels of efficiency and security.

Our SafeNet Cloud Key Management Solutions:

SafeNet Network HSMs

SafeNet Network Hardware Security Modules (HSMs) provide high assurance protection for cryptographic keys used by applications across cloud-enabled as well as on-premises environments. With SafeNet Network HSMs, organizations can protect the entire key-lifecycle on a centralized platform, accelerate cryptographic operations, and leverage a single point of audit for cryptographic keys.

SafeNet Crypto Command Center

With SafeNet Crypto Command Center, you can easily provision and monitor SafeNet HSMs from one secure, central location. This allows you to deliver on-demand, elastic key vaulting and encryption services for data protection in minutes instead of days while maintaining full control of your encryption services and data, consistently enforcing policies, and clearly defining key ownership across your IT infrastructure.

Four reasons customers love SafeNet cloud cryptography solutions

1. Data protection anywhere. Certified to protect keys, SafeNet data protection solutions prevent unwanted access to keys, and thereby also the data that is protected by those keys, no matter the environment, and even by third-party cloud infrastructure providers.
2. Complete control. We enable you to own and control your encryption keys in any environment prove you have complete control of all of your keys, and therefore the data too. This helps achieve and/or maintain compliance with mandates such as PCI DSS.
3. Cloud agnostic. Supporting many deployment scenarios, from on-premises data centers to private, hybrid, public, and multi-cloud environments, Gemalto provides a tremendous amount of flexibility as it enables customers to move keys in and out of cloud environments.
4. Scalability. We make it easy for you and your organization and its developers to optimize infrastructure without the need to customize applications to support a multi-cloud deployment scenario.

Benefit from a proven cryptographic security solution and maintain complete ownership of your keys while realizing the cost, flexibility and performance advantages of the cloud.

"Gemalto's SafeNet hardware security modules address a current gap in the market for encryption and key management. Enterprises that are looking to move more resources to the cloud are realizing the need for encryption and key management, but often lack the resources to deploy and manage their own encryption key management infrastructure. With SafeNet HSMs, enterprises of all sizes can maintain control of their sensitive keys while taking advantage of the benefits the cloud provides."

- Garrett Bekker, Senior Security Analyst at 451 Research

SafeNet Solutions Also Play Well with Others

SafeNet crypto management solutions benefit from one of the broadest ecosystems available on the market and integrate with over 400 of the most commonly used enterprise applications for big data, code signing, TLS, web servers, application servers, databases, and many more.

VDI Security Solutions

Secure Access to Citrix & VMware Virtual Desktop Infrastructures

The growth in the use of virtualized environments—particularly Virtual Desktop Infrastructure (VDI) solutions, such as those provided by Citrix, VMware and AWS—alongside the deployment of multiple types of endpoints, such as thin clients and mobile devices, is challenging businesses to overcome the vulnerabilities of fixed passwords and implement a consistent authentication policy to secure access to all online corporate resources.

Simple, Strong Authentication for VDI Security

By effectively adding a layer of security in the form of strong two-factor authentication to protect critical corporate resources accessed via VDI solutions, Gemalto’s suite of SafeNet Authentication Solutions enable organizations to secure VDI access from any endpoint, while simplifying regulatory compliance, reducing IT administration overheads and mitigating the risk of data breaches arising from credential compromise.

Gemalto’s suite of SafeNet Authentication Solutions deliver secure access to virtualized desktop infrastructure:

• From any device, including thin clients, zero clients, and BYOD mobile devices
• To any VDI application, thanks to out-of-the-box integrations with Citrix, VMware, and AWS
• At any assurance level, via the broadest range of authentication methods and form factors
• With on-premises or as-a-service delivery of strong authentication

Supporting any enterprise solution, be it VPN, Cloud, Web, local network or VDI, SafeNet strong authentication management platforms enable the enforcement of consistent user access controls from a single point of management, offering ease of use and ease of management for a lower TCO.