HPE Security Portfolio Overview
Transform to a hybrid infrastructure
Enable workplace productivity
Protect your digital enterprise
Empower a data-driven organization
Transform to a hybrid infrastructure
Enable workplace productivity
Protect your digital enterprise
Empower a data-driven organization
Attack Life Cycle
Infiltration Phishing Attack and Malware
Research
Discovery
Research Potential Targets
Mapping Breached Environment
.
Monetization
Capture
Data Sold on Black Market
Obtain data
Exfiltration/Damage Exfiltrate/Destroy Exfiltrate/Destroyy Stolen StolenData Data Exfiltrate/Destroy Exfiltrate/Destro
Attack Life Cycle
Infiltration Phishing Attack and Malware
Research
Discovery
Research Potential Targets
Mapping Breached Environment
Threat Intelligence HP Security Research HPSR:: HPSR HP Se Secu curi rity t y Rese Resear arch ch Threat Central
.
Monetization
Capture
Data Sold on Black Market
Obtain data
Exfiltration/Damage Exfiltrate/Destroy Exfiltrate/Destroyy Stolen StolenData Data Exfiltrate/Destroy Exfiltrate/Destro
Attack Life Cycle
Infiltration Phishing Attack and Malware
Research Research Potential Targets
Note: Industry Leading Security Research and Threat Intelligence Discovery Mapping Breached Environment
Threat Intelligence HP Security Research HPSR:: HPSR HP Se Secu curi rity t y Rese Resear arch ch Threat Central
.
Monetization
Capture
Data Sold on Black Market
Obtain data Source: Sour ce: HP 2015 Cost of CyberCrime Study
Exfiltration/Damage Exfiltrate/Destroy Exfiltrate/Destroyy Stolen StolenData Data Exfiltrate/Destroy Exfiltrate/Destro
Attack Life Cycle
Infiltration Phishing Attack and Malware
Research Research Potential Targets
Note: Automated Intelligence Sharing via Threat Central Discovery Mapping Breached Environment
Threat Intelligence HP Security Research HPSR: HP Securit y Research Threat Central
.
Monetization
Capture
Data Sold on Black Market
Obtain data
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
Attack Life Cycle
Infiltration Phishing Attack and Malware Block Adversary • HP Fortify
Research Research Potential Targets Threat Intelligence HP Security Research
RASP: DAST: SAST:
Runtime Application Self Protection Dynamic Application Security Testing Static Application Security Testing
Discovery Mapping Breached Environment
HPSR: HP Securit y Research Threat Central
.
Monetization
Capture
Data Sold on Black Market
Obtain data
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
Attack Life Cycle
Infiltration Phishing Attack and Malware Block Adversary • HP Fortify
Research Research Potential Targets Threat Intelligence HP Security Research
Note:
RASP: DAST: SAST:
Runtime Application Self Protection Dynamic Application Security Testing Static Application Security Testing
Discovery Mapping Breached Environment
HPSR: HP Securit y Research DVLabs: Digital Vaccine Labs ZDI: Zero Day Initiative Threat Central
.
Monetization
Capture
Data Sold on Black Market
Obtain data
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
Attack Life Cycle
Infiltration Phishing Attack and Malware Block Adversary • HP Fortify
Research Research Potential Targets Threat Intelligence HP Security Research HPSR:
RASP: DAST: SAST:
Runtime Application Self Protection Dynamic Application Security Testing Static Application Security Testing
Discovery Mapping Breached Environment
HP Securit y Research
DVLabs: Digital VaccineSecurity Labs Note: Industry Leading Software Assurance Portfolio ZDI: Zero Day Initiative Threat Central
.
Monetization
Capture
Data Sold on Black Market
Obtain data
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
Attack Life Cycle
Infiltration Phishing Attack and Malware Block Adversary • HP Fortify
Research Research Potential Targets Threat Intelligence HP Security Research HPSR:
RASP: DAST: SAST:
Runtime Application Self Protection Dynamic Application Security Testing Static Application Security Testing
Discovery Mapping Breached Environment
HP Securit y Research
DVLabs: Digital Vaccine Labs – Application Defender Note: Runtime Application Self Protection ZDI: Zero Day Initiative Threat Central
.
Monetization
Capture
Data Sold on Black Market
Obtain data
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
Attack Life Cycle
Infiltration Phishing Attack and Malware
Note: Industry Leading Security Analytics and Correlation Portfolio Block Adversary • HP Fortify
Research Research Potential Targets Threat Intelligence HP Security Research
RASP: DAST: SAST:
Runtime Application Self Protection Dynamic Application Security Testing Static Application Security Testing
HPSR: HP Securit y Research DVLabs: Digital Vaccine Labs ZDI: Zero Day Initiative Threat Central
Discovery Mapping Breached Environment Detect Adversary, Security Analytics HP ArcSight SIEM: Logger: UBA: IT GRC: DMA:
.
Security Information & Event Mgmt Operational Analytics User Behavior Analytics Threat Insight DNS Malware Analytics
Monetization
Capture
Data Sold on Black Market
Obtain data
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
Attack Life Cycle
Infiltration Phishing Attack and Malware
Note: Industry Leading Security Analytics and Correlation Portfolio
Research Research Potential Targets Threat Intelligence HP Security Research HPSR: HP Securit y Research DVLabs: Digital Vaccine Labs ZDI: Zero Day Initiative Threat Central
Block Adversary • HP TippingPoint • HP Fortify
NGIPS: Next Generation IPS NGFW: Next Generation Firewall ATA: Advanced Threat Appliance RASP: Runtime Application Self Protection DAST: Dynamic Application Security Testing SAST: Static Application Security Testing
.
Discovery Mapping Breached Environment Detect Adversary, Security Analytics HP ArcSight SIEM: Logger: UBA: IT GRC: DMA:
Security Information & Event Mgmt Operational Analytics User Behavior Analytics Threat Insight DNS Malware Analytics
Monetization
Capture
Data Sold on Black Market
Obtain data
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
Attack Life Cycle
Infiltration Phishing Attack and Malware
Note: Find Insider Threats and APTs with User Behavior Analytics
Research Research Potential Targets Threat Intelligence HP Security Research HPSR: HP Securit y Research DVLabs: Digital Vaccine Labs ZDI: Zero Day Initiative Threat Central
Block Adversary • HP TippingPoint • HP Fortify NGIPS: Next Generation IPS NGFW: Next Generation Firewall ATA: Advanced Threat Appliance RASP: Runtime Application Self Protection DAST: Dynamic Application Security Testing SAST: Static Application Security Testing
.
Discovery Mapping Breached Environment Detect Adversary, Security Analytics HP ArcSight SIEM: Logger: UBA: IT GRC: DMA:
Security Information & Event Mgmt Operational Analytics User Behavior Analytics Threat Insight DNS Malware Analytics
Monetization
Capture
Data Sold on Black Market
Obtain data
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
Attack Life Cycle
Infiltration Phishing Attack and Malware
Note: Find Insider Threats and APTs with DNS Malware Analytics
Research Research Potential Targets Threat Intelligence HP Security Research HPSR: HP Securit y Research DVLabs: Digital Vaccine Labs ZDI: Zero Day Initiative Threat Central
Block Adversary • HP TippingPoint • HP Fortify
NGIPS: Next Generation IPS NGFW: Next Generation Firewall ATA: Advanced Threat Appliance RASP: Runtime Application Self Protection DAST: Dynamic Application Security Testing SAST: Static Application Security Testing
.
Discovery Mapping Breached Environment Detect Adversary, Security Analytics HP ArcSight SIEM: Logger: UBA: IT GRC: DMA:
Security Information & Event Mgmt Operational Analytics User Behavior Analytics Threat Insight DNS Malware Analytics
Monetization
Capture
Data Sold on Black Market
Obtain data
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
Attack Life Cycle
Infiltration Phishing Attack and Malware
Note: Runtime Application Self Protection – and Monitoring
Research Research Potential Targets Threat Intelligence HP Security Research HPSR: HP Securit y Research DVLabs: Digital Vaccine Labs ZDI: Zero Day Initiative Threat Central
Block Adversary • HP TippingPoint • HP Fortify
NGIPS: Next Generation IPS NGFW: Next Generation Firewall ATA: Advanced Threat Appliance RASP: Runtime Application Self Protection DAST: Dynamic Application Security Testing SAST: Static Application Security Testing
.
Discovery Mapping Breached Environment Detect Adversary, Security Analytics HP ArcSight SIEM: Logger: UBA: IT GRC: DMA:
Security Information & Event Mgmt Operational Analytics User Behavior Analytics Threat Insight DNS Malware Analytics
Monetization
Capture
Data Sold on Black Market
Obtain data
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
Attack Life Cycle
Infiltration Phishing Attack and Malware
Note: Actionable Risk Intelligence with the ESM module: Risk Insight
Research Research Potential Targets Threat Intelligence HP Security Research HPSR: HP Securit y Research DVLabs: Digital Vaccine Labs ZDI: Zero Day Initiative Threat Central
Block Adversary • HP TippingPoint • HP Fortify
NGIPS: Next Generation IPS NGFW: Next Generation Firewall ATA: Advanced Threat Appliance RASP: Runtime Application Self Protection DAST: Dynamic Application Security Testing SAST: Static Application Security Testing
.
Discovery Mapping Breached Environment Detect Adversary, Security Analytics HP ArcSight SIEM: Logger: UBA: IT GRC: DMA:
Security Information & Event Mgmt Operational Analytics User Behavior Analytics Threat Insight DNS Malware Analytics
Monetization
Capture
Data Sold on Black Market
Obtain data
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
Attack Life Cycle
Infiltration Phishing Attack and Malware
Note: End-To-End Data Protection with HP Voltage Research
Block Adversary • HP Fortify
Research Potential Targets Threat Intelligence HP Security Research
RASP: DAST: SAST:
Runtime Application Self Protection Dynamic Application Security Testing Static Application Security Testing
HPSR: HP Securit y Research DVLabs: Digital Vaccine Labs ZDI: Zero Day Initiative Threat Central
Discovery Mapping Breached Environment Detect Adversary, Security Analytics HP ArcSight SIEM: Logger: UBA: IT GRC: DMA:
.
Security Information & Event Mgmt Operational Analytics User Behavior Analytics Threat Insight DNS Malware Analytics
934-753-2356
Monetization
Capture
Data Sold on Black Market
Obtain data Protect Data HP Atalla, HP Voltage
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
ESKM: Enterpr. Securit y Key Mgmt. NSP: Network Security Processor DLP: Data Loss Prevention FPE, Tokenization: Secure Data, Secure Email
Attack Life Cycle
Infiltration Phishing Attack and Malware
Note: Protection DataResearch at every stage of its lifecycle Research Potential Targets Threat Intelligence HP Security Research HPSR: HP Securit y Research DVLabs: Digital Vaccine Labs ZDI: Zero Day Initiative Threat Central
Block Adversary • HP TippingPoint with • HPAtalla Fortify IPC
NGIPS: Next Generation IPS NGFW: Next Generation Firewall ATA: Advanced Threat Appliance RASP: Runtime Application Self Protection DAST: Dynamic Application Security Testing SAST: Static Application Security Testing
.
Discovery Mapping Breached Environment Detect Adversary, Security Analytics HP ArcSight SIEM: Logger: UBA: IT GRC: DMA:
Security Information & Event Mgmt Operational Analytics User Behavior Analytics Threat Insight DNS Malware Analytics
Monetization
Capture
Data Sold on Black Market
Obtain data Protect Data HP Atalla, HP Voltage
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
ESKM: Enterpr. Securit y Key Mgmt. NSP: Network Security Processor DLP: Data Loss Prevention FPE, Tokenization: Secure Data, Secure Email
Attack Life Cycle
Infiltration Phishing Attack and Malware
Note: Industry Leading Data Protection Portfolio Research Research Potential Targets Threat Intelligence HP Security Research HPSR: HP Securit y Research DVLabs: Digital Vaccine Labs ZDI: Zero Day Initiative Threat Central
Block Adversary • HP TippingPoint • HP Fortify NGIPS: Next Generation IPS NGFW: Next Generation Firewall ATA: Advanced Threat Appliance RASP: Runtime Application Self Protection DAST: Dynamic Application Security Testing SAST: Static Application Security Testing
.
Discovery Mapping Breached Environment Detect Adversary, Security Analytics HP ArcSight SIEM: Logger: UBA: IT GRC: DMA:
Security Information & Event Mgmt Operational Analytics User Behavior Analytics Threat Insight DNS Malware Analytics
Monetization
Capture
Data Sold on Black Market
Obtain data Protect Data HP Atalla, HP Voltage
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy
ESKM: Enterpr. Securit y Key Mgmt. NSP: Network Security Processor DLP: Data Loss Prevention FPE, Tokenization: Secure Data, Secure Email
Attack Life Cycle
Infiltration Phishing Attack and Malware Block Adversary • HP Fortify
Research Research Potential Targets Threat Intelligence HP Security Research
RASP: DAST: SAST:
Runtime Application Self Protection Dynamic Application Security Testing Static Application Security Testing
HPSR: HP Securit y Research Threat Central
Discovery Mapping Breached Environment Detect Adversary, Security Analytics HP ArcSight SIEM: Logger: UBA: IT GRC: DMA:
.
Security Information & Event Mgmt Operational Analytics User Behavior Analytics Threat Insight DNS Malware Analytics
Monetization
Capture
Data Sold on Black Market
Obtain data Protect Data HP Atalla, HP Voltage
Exfiltration/Damage Exfiltrate/Destroy Stolen StolenData Data Exfiltrate/Destroy Action
ESKM: Enterpr. Securit y Key Mgmt. NSP: Network Security Processor FPE, Tokenization: Secure Data, Secure Email
HPE ArcSight Security Information & Event Management
HPEE ArcSight
Act with Instant Clarity against threats that matter Collect
Analyze
Automate
Transform Big Data into actionable security intelligence
Real-time correlation of data across devices to find threats
Automate your compliance out-of-the box
How do we do it?
Approach
Benefit
Collect
Collect logs from any device, any source, and in any format at high speed
Enrich
Machine data is unified into a single format through normalization and categorization
Search
?
Simple text-based search tool for logs and events without the need of domain experts
Store
Archive years’ worth of unified machine data through high compression ratios
Correlate
Automate the analysis, reporting, and alerting of machine data for IT security, IT operations, and IT GRC
HPE ArcSight: Market Leading Solution Company Background
Analyst Recognition #1 in Market Share – Last three reports
• Founded May 2000
• 3000+ customers (~50 MSSP’s) • Offices worldwide (170+ countries)
#1 In-use for both SIEM and Log Management SIEM Leader’s Quadrant 10 years in a row
• Acquired by HPE, Oct 2010 Industry Recognition
HPE Architecture Overview
Admin
Admin
Real time Correlation Tier ArcSight Express/ESM For aggregation and noise filtering
Logger Tier
ArcSight Logger HA – If Needed
Collection Tier ArcSight Connector
HPE ArcSight: A Leader in SIEM (2011-2015 Gartner Quadrant)
2014
2015
Indonesia Customer Refference Financial Industries / Banking Telco Industries Government Private Company
Are we compromised? Forensic Analysis
Are we compromised? Firewall log analysis – Sorted Count of Denials-spanning-two-minutes
HPE ArcSight Correlation Enabling Complete Visibility COLLECT
• Sophisticated correlation technologies • Pattern recognition and anomaly detection to identify modern known and unknown threats • The more you collect, the smarter it gets
CONSOLIDATE
CORRELATE
ArcSight ESM Features
Detection
SIEM
Analysis
Alerting
! ! !
Out of the Box Content for Common Use Cases Understand Network Usage •
•
•
Top Bandwidth Users Top Protocols Top Domains and Zones
•
•
Top External Destinations Top External Sources
Monitor Privileged Users •
•
•
Privileged User Administration Successful and Failed Logins User Session Monitoring
Protect Your Data •
•
•
Database Errors and Warnings Database Successful and Failed Logins Database Configuration Changes
Prevent Intrusions •
•
•
•
•
Top Attackers and Internal Targets IPS / IDS Alert Metrics Intrusion Alert Counts Top Alert Sources and Destinations Top Attackers and Internal Targets
Control User Access •
•
User Authentication Across Hosts Authentication Success and Failures
Control Network Devices •
•
•
•
Network Device Errors and Critical Events Network Device Status and “Down” Notifications
Configuration Changes by User and Change Type Successful and Failed Logins
Monitor VPN / Remote Access •
•
•
•
VPN Authentication Errors Connection Counts Connection Durations Connections Accepted and Denied
•
•
•
•
Successful and Failed Logins Top Connections Top Bandwidth Users VPN Configuration Changes
Prevent Viruses •
•
•
Top Infected Systems All AV Errors AV Signature Update Stats
•
•
Consolidated Virus Activity AV Configuration Changes
Guard the Perimeter •
•
•
•
Firewall Monitoring Denied Inbound Connections Denied Outbound Connections Successful / Failed Login Activity
Correlated Rule Name
Description
This rule detects a failed login attempt to a servers default out of the box account (such as admin, cisco) This rule detects a successf ul login attempt to a servers default out of the box account (such as Successful Login to a default account admin, cisco) Failed Login to a default account
Data Source Firewall, IDS, Web server Firewall, IDS, Web server
Failed Logins of Single User to Multiple Destinations
This rule detects suspicious user behaviour where a single user account has attempted to login to Firewall, IDS, Web multiple servers unsuccessfully server
Brute Force Login Attempt
Tracks multiple failed logins to the same user account on the s ame server. When the threshold is Firewall, IDS, Web reached it will trigger the rule server
Multiple Failed Logins followed by a Tracks multiple failed logins to the same user account on the s ame server. Success
Firewall, IDS, Web server
Port Scan Detected
This Rule is triggered when ESM detects Multiple Reconnaissance Connections where the Target Firewall, IDS, Web Address is the same but the Target Port and Attacker Addresses are unique. server
High Number of IDS Alerts for DOS
This rule will fire when m ultiple IDS Alerts are seen which have been classified as Denial of Service Attacks
IDS/IPS
IDS High DOS
This rule will trigger when an IDS Event classified as DOS with a High Priority is seen.
IDS/IPS
SYN Flood Detected by IDS or Firewall
This rule looks for SYN flood alerts from Intrusion Detection Systems (IDS) or firewalls.
IDS/IPS, Firewall
IDS High Inappropriate Usage IDS Medium Inappropriate Usage
This rule will trigger when an IDS Event c lassified as 'Inappropriate Usage' with a High Priority is seen. This rule will trigger when multiple IDS Events classified as 'Inappropriate Usage' with a Medium Priority are seen.
IDS/IPS IDS/IPS
Real-Time Alerting and Notifications • Alerting • Proactive threat, risk, and compliance alerting
• Escalation • Priority based escalation and workflow
• Notifications •
Email, SMS, pager, SNMP
•
Customizable templates
Analyze and Investigate
HPE Fortify Static & Dynamic Application Testing
HP Fortify – Software Security Testing On-Premise and On-Demand Static Analysis – Fortify SCA
Source Code Mgt. System
Static Analysis Via Build Integration
Dynamic Analysis – WebInspect
Dynamic Testing in QA or Production
Application Protection – HP Application Defender
Real-time Protection of Running Application
Vulnerability Management Remediation IDE Plug-ins (Eclipse, Visual Studio, etc.)
Developers (onshore or offshore)
Correlate Target Vulnerabilities with Common Guidance and Scoring
Defects, Metrics and KPIs Used to Fortify on Demand Software Security Center Measure Risk
Application Lifecycle
Normalization (Scoring, Guidance) Vulnerabili ty Database
Correlation (Static, Dynamic, Runtime)
Threat Intelligence Rules
Development, Project and Management Stakeholders
Hackers & Actual Attacks
HP Fortify Static Code Analyzer (SCA) Static analysis – find and fix security issues in your code during development Features: •
Automate static application security testing to identify security vulnerabilities in application source code during development
•
Pinpoint the root cause of vulnerabilities with line of code details and remediation guidance
•
Prioritize all application vulnerabilities by severity and importance
•
Supports 22 languages, 832,000+ APIs and 688 vulnerability categories
Broadest Technology Support Static analysis supports 22 languages and
Mobile application security solution covers
growing
• Objective C • Android
• ABAP
• ASP .NET
• Blackberry
• C#
• C/C++
• Microsoft
• Classic ASP
• COBOL
• Cold Fusion
• Flex
Vulnerabilities
• HTML
• Java
• JavaScript/AJAX
• JSP
• Detects over 689 unique categories of vulnerabilities
• Objective C
• PHP
• PL/SQL
• Python
API Support
• T-SQL
• VB.NET
• VB6
• VBScript
• More than 832,000 commonly used APIs are understood and supported by SCA
• XML
• Ruby
Sample Work Flow Check-in new code Scheduled Check-out, build and scan
Developer Source Code Repository
Developer picks up bug and writes fixes
SCA Bug Tracker
Build/Scan Server Scan Results uploaded
SSC Server
Auditor Reviews Results
Auditor Submits Security Issues to Bug Tracker
Auditor
HP WebInspect Dynamic analysis – find critical security issues in running applications Features: •
Quickly identify risk in existing applications
•
Automate dynamic application security testing of any technology, from development through production
•
Validate vulnerabilities in running applications, prioritizing the most critical issues for rootcause analysis
•
Streamline the vulnerabilities
process
of
remediating
Dynamic Application Security Testing Quickly find and validate exploitable vulnerabilities <script>alert(“attack”) NO
“<script>alert(“attack”) NO NO
‘<script>alert(“attack”)
NO
/> NO
> (greater than) NO
“ (double quote)
INTERESTING
© 2011 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice
%3e (encoded >)
EVEN BETTER
ATTACK!
%3Cscript%3Ealert(“attack”)%3C/script%3E
Live Scan Visualization Start remediation of vulnerabilities immediately
Live Scan Dashboard
Live Scan Statistics
Site tree
Excluded and Allowed Hosts Section
Detailed Attack Table Vulnerabilities found in application
On Demand – Fortify on Demand
HP Fortify on Demand
Managed Security Services
Quickest Time to Results
Global Data Centers
Centralized Portal
ArcSight ESM with Application View HP Application View Know your apps. Know your users. Know your data! OS, databases, storage
IPS, routers, switches, firewalls, DLP
Servers, IAM, networking
Applications
• Retro-fits applications with security event logs • No change to application required • Out-of-box ready for ArcSight ESM IT SOC
HP Fortify key advantages
Comprehensive
Proven
Flexible
Only app sec provider to cover SAST, DAST, IAST and RASP
Over a decade of successful deployments backed by the largest security research team
Available on premise and on demand
Application Security Market
HPE SecureMail
The HP Security Voltage Unique Advantage HP Identity-based Encryption (IBE) and Stateless Architecture • 60-80% lower cost of operations, 75% less infrastructure • Simple user experience across desktop, Web, and mobile • Seamlessly integrates with email and enterprise ecosystem
HP Identity-based Encryption (IBE): How it Works Alice Sends Email to Bob HP SecureMail Key Server
Bob’s Private Key
1
3
[email protected]
2
Alice
Bob
One Solution for Desktop, Web, and Mobile
Native Apps
HP SecureMail Encryption Client
Archive HP SecureMail
DLP / AV AS / MTA
Encryption Client
Native Apps
SMTP / HTTPS HP SecureMail Applications (REST API)
Mail Server & Mobile Server
HP SecureMail Encryption Client
Native Apps
HP SecureMail Encryption Client
HP SecureMail Key Server
Corporate Network
HP SecureMail Appliance
Internet
External Encryption HP SecureMail Front-End Services
Mail Server
DLP / AV / AS / MTA
Same solution for internal and external
Corporate Network
DMZ
HP SecureMail Encryption Gateway
Any Device Any Email Client Native or Browser
Internet
Internal Encryption Corporate Network Mail Server
Same solution for internal and external
Active Directory
HP SecureMail Key Server
HP SecureMail Management Console
Hardware Security Module
