As per Sophos survey: “The Dirty Secrets of Network Firewalls”, which revealed that majority of Indian IT managers have legal liabilities when it comes to unidentified traffic in their organizations. In fact, nearly one-in-four globally cannot identify 70 percent of their network traffic. The lack of visibility creates significant security challenges for today’s businesses and impacts effective network management. The survey polled more than 2,700 IT decision makers across mid-sized businesses in 10 countries worldwide, including the US, Canada, Mexico, France, Germany, UK, Australia, Japan, South Africa and India.
Considering the debilitating impact cyber-attacks can have on a business, it’s unsurprising that 90 percent of respondents agree that a lack of application visibility is a serious security concern. Without the ability to identify what’s running on their network, IT managers are blind to ransomware, unknown malware, data breaches and other advanced threats, as well as potentially malicious applications and rogue users. Network firewalls with signature-based detection are unable to provide adequate visibility into application traffic due to a variety of factors such as the increasing use of encryption, browser emulation, and advanced evasion techniques.
“Controlling network traffic is an essential role of every firewall yet 61 percent IT managers can’t tell you how their bandwidth is being consumed,” said Sunil Sharma, Managing Director Sales at Sophos India & SAARC. “If you can’t see everything on your network, you can’t ever be confident that your organization is protected from threats. IT professionals have been ‘flying blind’ for too long and cybercriminals take advantage of this.”
The survey further stated that 61% would like to see better perimeter security in their organisation’s network firewall along with better threat visibility and better protection.
Organization’s firewall is the gateway between network and internet. Together with endpoint protection, it’s an integral pillar of security infrastructure. Despite the importance of its role in defenses, the survey revealed that firewalls are failing organizations when it comes to delivering the protection they need. On an average, Indian organizations face 26 infected machines a month; approximately 60% higher infected devices in comparison to the global average.
“Ineffective firewalls are costing you time and money. On an average, organizations are spending 7 working days to remediate infected machines,” said Sharma.
“A single network breach often leads to the compromise of multiple computers, so the faster you can stop the infection from spreading the more you limit the damage and time needed to clean it up,” Sharma further added. “Companies are looking for the kind of next-generation, integrated network and endpoint protection that can stop advanced threats and prevent an isolated incident from turning into a widespread outbreak. Sophisticated exploits such as MimiKatz and EternalBlue reminded everyone that network protection is critical to endpoint security and vice versa. Only direct intelligence sharing between these two can reveal the true nature of who and what is operating on your network.”
Sharma went onto explain that the findings highlighted the importance of ‘simplicity’ in all aspects of the security process; network, endpoint or server.
“Reducing complexity is absolutely fundamental to ensuring data and device security; a fact reflected in the research. According to the data 79 percent respondents have security risks from unwanted or unnecessary apps, and a further 60 percent are concerned by productivity loss due to unwanted ones. Unnecessary complexity compromises transparency for a network manager and the end user, and can lead to – not merely security concerns – but, even, liability and compliance issues. The concept of simplicity is central to Sophos, in the way our products are designed and in the counsel we provide. We believe that the simpler the security protocols are to implement, the more likely they are to be effective.”
Organizations acknowledge the need for better protection, visibility and response. The survey revealed that 84 percent of IT managers polled want better protection from their current firewall. 99 percent want their firewall technology to automatically isolate infected computers, and 96 percent want endpoint and firewall protection from the same vendor if it improves detection rates and incident response.
Security is Not the Only Risk to Businesses
Following security risks, 60% organizations are concerned about loss of productivity from unproductive apps. Business productivity can be negatively impacted if IT is unable to prioritize bandwidth for critical applications.
For industries that rely on custom software to meet specific business needs, an inability to prioritize these mission critical applications over less important traffic could be costly. 69 percent of IT professionals who had invested in custom applications admitted that their firewall could not identify the traffic and therefore were unable to maximize their return on investment. Lack of visibility also creates a blind spot for the potential transfer of illegal or inappropriate content on corporate networks, making companies vulnerable to litigation and compliance issues.
“Organizations need a firewall that protects their investment in business-critical and custom applications by allowing employees to have prioritized access to the applications they need,” said Sharma. “Increasing network visibility requires a radically different approach. By enabling the firewall to receive information directly from the endpoint security, it can now positively identify all applications – even obscure or custom applications.”
The Dirty Secrets of Network Firewalls survey was conducted by Vanson Bourne, an independent specialist in market research, in October and November 2017. This survey interviewed 2,700 IT decision makers in 10 countries and across five continents, including the US, Canada, Mexico, France, Germany, UK, Australia, Japan, India, and South Africa. Out of which, 300 respondents were from India, based in Delhi, Mumbai, Hyderabad, Bangalore, Kolkata and Chennai. These employees were from varied sectors such as financial services, IT, technology and telecoms, business and professional services, manufacturing and production amongst others. All respondents were from organizations of between 100 and 5,000 users.
- On an average 57 percent organizations network traffic is unidentifiable; 61 percent don’t know how their bandwidth is consumed
- 89 percent opined that stopping malware threats have become harder over the last year
- 94 percent agree that stopping ransomware should be a top priority in organisations
- A Lack of effective application visibility is a serious security concern for 90 percent of Indian businesses
- 79 percent have security risks from unwanted or unnecessary apps
- 72 percent want to see applications by risk levels through their organisation’s firewall
- 60 percent concerned on productivity loss due to unwanted apps; 52 percent have legal liability or compliance concerns due to potentially illegal content
- 69 percent stated their organisation’s use custom applications that firewall or UTM can’t identify
- 68 percent agree that endpoint protection is more important than ever within organisations
- 96 percent open to same vendor for endpoint and firewall if it improves detection rates and automates incident response
- 99 percent find it extremely useful if their organisation’s firewall could isolate infected machines automatically
