Latest / Nutanix Weekly / Nutanix Weekly: Nutanix® Solutions Provide Data and Security Protection for State, Local, and Education Organizations

Transcript

Nutanix Weekly: Nutanix® Solutions Provide Data and Security Protection for State, Local, and Education Organizations · Nutanix Weekly

WEBVTT 1 00:00:02.639 --> 00:00:10.980 Andy Whiteside: Hello everyone and welcome to episode 43 of new tactics weekly i'm your host Andy whiteside that Harvey back with his Harvey where were you last week. 2 00:00:13.170 --> 00:00:17.010 Harvey Green: Customer outside is it customer on site does. 3 00:00:17.010 --> 00:00:17.580 Andy Whiteside: It go. 4 00:00:18.210 --> 00:00:23.400 Harvey Green: It went well, it was called the but it went well. 5 00:00:25.050 --> 00:00:26.700 Jirah Cox: hint as to where we're Harvey was. 6 00:00:28.470 --> 00:00:29.700 Harvey Green: upstate New York. 7 00:00:30.210 --> 00:00:31.650 Jirah Cox: whoa okay yeah that's pretty cool. 8 00:00:31.860 --> 00:00:32.610 Harvey Green: It was no. 9 00:00:32.670 --> 00:00:34.230 Harvey Green: In February sure. 10 00:00:35.040 --> 00:00:38.010 Andy Whiteside: New tannic oriented customer or somebody is something else. 11 00:00:38.940 --> 00:00:42.840 Harvey Green: Yes, both were in the tactics oriented customer. 12 00:00:44.490 --> 00:00:51.090 Andy Whiteside: that's good was it a on the government side of your hats you wear or commercial side of the hats you wear. 13 00:00:51.840 --> 00:00:52.380 Both. 14 00:00:55.740 --> 00:00:56.820 Andy Whiteside: coming in a real sales guy. 15 00:00:56.970 --> 00:01:01.440 Jirah Cox: Wait you're saying you're saying Angela Angela have to pay for half your expenses that's what I heard. 16 00:01:04.290 --> 00:01:06.060 Jirah Cox: The other half good as INTEGRA go there you go. 17 00:01:07.560 --> 00:01:27.450 Andy Whiteside: Well, so on that note is going to apply here Harvey is a legacy, been a solutions architect as integrity, but he's now leading and running the our gov business, which is our sled and fed focus so state Local Education focus the value added reseller as well as federal. 18 00:01:28.830 --> 00:01:34.080 Andy Whiteside: Value Added reseller Parviz harvest becoming a business guy yes. 19 00:01:34.230 --> 00:01:39.270 Jirah Cox: i'm hearing, this is a Zen tiger gov blah Gulf podcast episode number one. 20 00:01:41.910 --> 00:01:45.420 Andy Whiteside: that's true we pay, you know what that's a good idea hurry and you start doing another podcast. 21 00:01:47.160 --> 00:01:47.850 Jirah Cox: You can run with that. 22 00:01:48.030 --> 00:01:49.500 Jirah Cox: Okay that's good you get the idea there. 23 00:01:49.800 --> 00:01:57.060 Harvey Green: All right, um I gotta bring jarrod on that one too, and you know, and he got I think he might be pretty good. 24 00:01:58.710 --> 00:02:00.090 Andy Whiteside: It is tapped out. 25 00:02:00.720 --> 00:02:01.290 Jirah Cox: Something something. 26 00:02:02.220 --> 00:02:06.570 Jirah Cox: yeah this podcast brought to you by his INTEGRA go something will do ad reads. 27 00:02:06.840 --> 00:02:10.080 Andy Whiteside: Every day, I would said what is that a advertisement in there. 28 00:02:11.970 --> 00:02:14.340 Andy Whiteside: Well gyros with this Jerry how's it going. 29 00:02:14.790 --> 00:02:15.210 howdy. 30 00:02:16.800 --> 00:02:20.460 Andy Whiteside: jarrod is a legend of Rome, the new tannic side of the House. 31 00:02:23.880 --> 00:02:27.150 Jirah Cox: You know infamous versus famous is a Gray area. 32 00:02:29.130 --> 00:02:37.050 Andy Whiteside: I get on these qb ours, with the new tannic sales people and it's a little bit in gyro we trust, so if your job is on the podcast. 33 00:02:38.400 --> 00:02:39.600 Harvey Green: It must be good. 34 00:02:42.360 --> 00:02:43.500 Jirah Cox: Every week at the Wednesday. 35 00:02:46.170 --> 00:02:46.560 Andy Whiteside: yeah. 36 00:02:47.910 --> 00:02:56.910 Andy Whiteside: Well i'm harvey's INTEGRA gov and sled tie in that gets us to our blog for today and I will share my screen whenever I get smart enough to do it let's see here. 37 00:02:58.050 --> 00:03:05.310 Andy Whiteside: For those all those listeners i'll share my screen share it so we can cover it here and then people can watch it later in the. 38 00:03:05.640 --> 00:03:19.110 Andy Whiteside: INTEGRA YouTube channel, so our topic is botanic solutions provide data and security, protection for state local and education and organizations, this is by harsha code T Ki law. 39 00:03:21.030 --> 00:03:23.250 Andy Whiteside: blog from January 24. 40 00:03:24.360 --> 00:03:30.480 Andy Whiteside: I wanted to first of all, highlight Harvey and the great things that we're doing its integrity of giving. 41 00:03:31.650 --> 00:03:41.220 Andy Whiteside: going to market on the sled and fed side of the world, I also want to highlight things that people don't really know about sled we've got. 42 00:03:41.820 --> 00:03:51.060 Andy Whiteside: Customers that are small city, you know 100 employees cities, maybe, maybe thousands do 100 to 1000 or greater. 43 00:03:51.630 --> 00:04:03.390 Andy Whiteside: Cities that we work with they have so many different departments they've got you know, water and sewer they have police they have this judicial judicial, but they have this executive department they've got. 44 00:04:04.260 --> 00:04:11.430 Andy Whiteside: You know power, whether maybe they run the power grid, or they own the power grid or service, the power grid and there they've got so many departments. 45 00:04:11.910 --> 00:04:20.490 Andy Whiteside: When you get inside of a city or a local county government or state of course there's there's a bunch going on inside those organizations. 46 00:04:20.820 --> 00:04:28.440 Andy Whiteside: And one of the reason why we picked this one was to highlight that they've got security needs, just like the average customer, but even more because. 47 00:04:28.920 --> 00:04:41.040 Andy Whiteside: Everybody knows who they are, I mean everybody knows you know Mecklenburg county that lives in North Carolina and the bad guys know hey let's go target those guys I knew they've got money they've got tax money coming in yeah agreed. 48 00:04:42.450 --> 00:04:50.280 Andy Whiteside: So Jerry you want to just maybe highlights extend upon when I was talking about there when we talked about the introduction here that says modern challenges for slit. 49 00:04:51.210 --> 00:05:01.170 Jirah Cox: 100% right and the need for designing implementing like a zero trust architecture right like just because you are on the network doesn't necessarily mean. 50 00:05:01.680 --> 00:05:12.750 Jirah Cox: You are in a position of power or your trusted inherently more by virtue of being on the network right because that assumes that we would always be able to keep the network, secure and clean and keep bad guys off of it. 51 00:05:13.860 --> 00:05:16.080 Jirah Cox: that's not the world, we can live in right, we have to assume. 52 00:05:17.460 --> 00:05:19.500 Jirah Cox: assume compromise and then design. 53 00:05:20.670 --> 00:05:25.950 Jirah Cox: Assuming that that principle so yeah and for sure right I sympathize with. 54 00:05:27.090 --> 00:05:39.690 Jirah Cox: All of our flipped classroom cut sled customers that must just feel like they're walking around with a target on their back all day long for sure right, you know where where most most ransomware these days is aimed at yeah extracting some sort of a. 55 00:05:41.460 --> 00:05:44.550 Jirah Cox: Money from the get the entity being attacked. 56 00:05:45.990 --> 00:05:53.070 Jirah Cox: Usually there's a balance when you're in that situation of trying to recover from it quietly without making a. 57 00:05:53.760 --> 00:06:03.240 Jirah Cox: Big deal but there's so much potential yet for a very public failure right when it's a city of county of state of right it's it can be very hard to be a big challenge to hide that. 58 00:06:04.890 --> 00:06:10.260 Andy Whiteside: Well that's the other party, when it does happen, not if but, when it does happen, and you know. 59 00:06:11.370 --> 00:06:17.550 Andy Whiteside: All your constituents are supposed to know about it because you're there they're your constituents there's no hiding. 60 00:06:18.240 --> 00:06:20.310 Jirah Cox: that's true yeah mandatory reporting could be I think do. 61 00:06:22.200 --> 00:06:29.160 Andy Whiteside: Harvey thoughts on just the general challenge that goes on on the sled side, above and beyond what our commercial. 62 00:06:29.490 --> 00:06:37.440 Harvey Green: yeah I mean, I think the the big one, is what you hit on the start with is you know so many different department so many different. 63 00:06:38.280 --> 00:06:58.500 Harvey Green: sets of needs, you know, down from potentially you know, a soup kitchen up all the way to 911 call centers and you know police evidence rooms and things like that those those have you know very differing sets of security that are needed. 64 00:06:59.610 --> 00:07:10.440 Harvey Green: So you definitely need a platform that can handle all of that and not put you in a situation where you're also having to as an IT department. 65 00:07:11.190 --> 00:07:27.810 Harvey Green: handle 50 different departments 50 different ways on 50 different platforms, that would be both very expensive in terms of the actual dollars and hardware, but also, you know in in training and being able to support something that complex. 66 00:07:29.070 --> 00:07:36.870 Andy Whiteside: yeah and we're going to talk about the prevent detection recovery now one thing to highlight, on the recovery side of this. 67 00:07:37.770 --> 00:07:49.950 Andy Whiteside: Know there's life saving services that are involved in these organizations, they can't play hardball and wait 2448 hours to restore everything they got to get it back up and going or people are dying. 68 00:07:50.460 --> 00:08:09.420 Harvey Green: yeah I mean again 911 call centers you and a lot of municipalities, you have different clinics or healthcare facilities as well that are under that umbrella too so yeah I mean you've got people's health hanging in the balance so time is of the essence. 69 00:08:09.870 --> 00:08:15.990 Andy Whiteside: We think about you got people that might be needing critical care you got people whose toilets won't flush magically can be that would be. 70 00:08:16.560 --> 00:08:18.090 Harvey Green: Right, I mean. 71 00:08:18.690 --> 00:08:19.890 Andy Whiteside: That was a joke your says laugh. 72 00:08:20.160 --> 00:08:22.020 Harvey Green: yeah no. 73 00:08:23.070 --> 00:08:25.050 Jirah Cox: No when it comes to flushing toilets man that's not a joke that's. 74 00:08:28.560 --> 00:08:36.300 Andy Whiteside: I forget what movie was and i'm gonna say this is gonna be really bad taste, but you know if it's if it's yellow leave a mellow if it's a brown flush it down. 75 00:08:39.330 --> 00:08:40.320 Andy Whiteside: eyes are on you. 76 00:08:40.410 --> 00:08:44.220 Jirah Cox: Know that's national lampoon that's vacation. 77 00:08:45.060 --> 00:08:45.960 Andy Whiteside: Is it I don't remember if. 78 00:08:46.200 --> 00:08:47.670 Jirah Cox: He goes to visit his brother yeah. 79 00:08:48.030 --> 00:08:50.820 Andy Whiteside: yeah I just I think about that every so often. 80 00:08:51.090 --> 00:08:53.940 Jirah Cox: that's the value I bring here move your movie references yeah. 81 00:08:54.810 --> 00:09:05.760 Andy Whiteside: Alright, the next section, as I leave it to prevent, detect and recovery first section is prevents how his new tactics helping us prevents direct. 82 00:09:08.250 --> 00:09:13.770 Jirah Cox: So or yeah what how to use these techniques as part of your part of your spectrum right of prevention. 83 00:09:15.000 --> 00:09:26.700 Jirah Cox: I was in Texas secure platform secure, both in the development secure in the deploy ability secure in the ability to to self recover back to a secure state where you can define your security baselines. 84 00:09:28.890 --> 00:09:34.170 Jirah Cox: But beyond that right it's not a product right it's part of a security posture. 85 00:09:35.640 --> 00:09:47.550 Jirah Cox: So we could the article has out, you know strong password policies that both you know that's both for users and for admins and for admin dashboards and privileged access, whether that's if you have the humans, for it, you know. 86 00:09:49.290 --> 00:10:04.830 Jirah Cox: You know, sensitive password should be in an envelope in a in a break glass safe somewhere and all your daily driver admin access needs to be via you know multifactor login whether that's, whatever your system as okta duo as your ad with you know authenticator Apps. 87 00:10:07.170 --> 00:10:14.640 Jirah Cox: For those break glass passwords you can either you know, put the password in a envelope in a safe or, if you have enough people for it. 88 00:10:16.050 --> 00:10:27.960 Jirah Cox: You know first customers that will be like you guys are team a yeller team B team a lot into the first half of the password team be as lead, into the back, half of the password right, so you got to get to people agreeing to login together. 89 00:10:29.520 --> 00:10:35.430 Jirah Cox: to accomplish that rest and out now, no one human can can get admin access to the system unmonitored. 90 00:10:37.800 --> 00:10:48.420 Jirah Cox: Block mauer spread with micro segmentation that one's easy right nothing to install on a tedx HIV flow is right there you just simply turn on and define your your fencing policies of what shouldn't shouldn't talk to each other. 91 00:10:49.800 --> 00:11:08.670 Jirah Cox: Both, for you know whether that could be I can imagine that being all kinds of Apps in a like a county government sense of like accounting and payroll separated from like the GIs and mapping services separated from possibly things that might connect to you know power sewer water. 92 00:11:10.020 --> 00:11:21.540 Jirah Cox: Systems, you know, separate from united one systems right, I could, of course, by clusters for each of those or with flow, I can say they can all live on one cluster. 93 00:11:21.900 --> 00:11:32.220 Jirah Cox: But they can't talk to each other whatsoever right, so that if there wasn't a compromise that can limit or or slow the spread of those attackers laterally within the environment. 94 00:11:33.480 --> 00:11:37.410 Jirah Cox: And then, also for any easy environment right if i'm hosting desktops work from home. 95 00:11:38.460 --> 00:11:39.930 Jirah Cox: Any kind of citrix stuff like that. 96 00:11:41.040 --> 00:11:49.230 Jirah Cox: wrapping a firewall around every virtual machine to say you can only get to what you need to possibly even in an ad aware capacity right if Harvey logs in. 97 00:11:49.800 --> 00:12:00.630 Jirah Cox: And he needs to get to a GIs desktop he can only get to those things and can't get to payroll or vice versa, if he works in payroll you can get to that and not get to like you know, no one systems so micro segmentation. 98 00:12:01.800 --> 00:12:13.590 Jirah Cox: Really, you know anywhere it's possible to turn it on definitely use that and with flow, it can even tell you what your existing traffic patterns are so learn what your Apps talk to, and then write policies to lock those down. 99 00:12:15.570 --> 00:12:28.770 Jirah Cox: The third one here, I can certainly agree with right using maintain endpoint protection antivirus block malware I can't say i've got strong opinions there i'm sure the Tigers got got much more recent experience consulting around what you probably need to use in your environment. 100 00:12:31.890 --> 00:12:32.370 Andy Whiteside: yeah. 101 00:12:33.180 --> 00:12:45.330 Harvey Green: We would definitely agree that you need to do that will we can talk through you know different options, depending on what else you need to do to just besides look for. 102 00:12:46.470 --> 00:12:50.040 Harvey Green: Look, for exposure points that have already been exposed right. 103 00:12:51.360 --> 00:12:53.610 Harvey Green: So yeah we can definitely help with that. 104 00:12:55.320 --> 00:13:02.670 Andy Whiteside: it's a multi faceted front right you got your traditional AV you got a wii that we're not a Vb you got the software that kind of looks at. 105 00:13:04.290 --> 00:13:12.000 Andy Whiteside: kind of artificial intelligence types of things you've got intrusion detection stuff from from many, many years back you've got. 106 00:13:13.860 --> 00:13:25.890 Andy Whiteside: It intrusion detection response you've got elements of network flow you got all those different endpoint protection and, by the way, when you talk to the integrity endpoint is the endpoint. 107 00:13:26.580 --> 00:13:34.170 Andy Whiteside: Is in the endpoint is also that virtual APP or desktop server sitting back in the clock back in the data Center, no matter where that data Center is. 108 00:13:34.440 --> 00:13:34.680 yeah. 109 00:13:36.510 --> 00:13:42.990 Jirah Cox: The next one here about you know employee training on cybersecurity right bit of an old drum to beat on. 110 00:13:43.620 --> 00:13:47.580 Jirah Cox: I actually was reading a discussion thread last week with a bunch of SIS admins. 111 00:13:48.090 --> 00:13:59.280 Jirah Cox: That we're talking about you know they were actually able to successfully go to HR and talk about you know how like a three strike policy of you know if this employee keeps on getting finished successfully right. 112 00:14:00.330 --> 00:14:11.130 Jirah Cox: The the quantifiable risk that that happens to the business is greater than ever right, and they are actually able to start talking about policies around hey if we've been fished three times right or you fail the fishing tests three times. 113 00:14:12.690 --> 00:14:24.750 Jirah Cox: We can put a price tag on that employee having email access right like is it worth this employee being able to send receive email externally versus like I don't know a $5 million ransomware. 114 00:14:26.220 --> 00:14:35.160 Jirah Cox: ransom, you know and and, that being a more actual policy nowadays, more than ever, right 10 years ago, you know phishing attempts were prevalent and. 115 00:14:35.670 --> 00:14:45.720 Jirah Cox: Policies had i'm going to say, less teeth right compared to now protecting the organization is taken much, much more seriously because failure has consequences right failure, has a price tag. 116 00:14:47.130 --> 00:15:02.430 Andy Whiteside: No yes and it's in the news everybody sees that it costs money and and that it's been enabled by my opinion heavily enabled by cryptocurrency and the ability to pay anonymously and walk away with the money that's worth something somewhere else. 117 00:15:04.170 --> 00:15:07.410 Jirah Cox: yeah, so I think if you don't have teeth behind your policies around you know. 118 00:15:08.700 --> 00:15:14.100 Jirah Cox: Those Those sort of test failures right it's worth talking about you know how do we limit our exposure. 119 00:15:15.960 --> 00:15:16.710 Jirah Cox: To those attackers. 120 00:15:17.550 --> 00:15:33.930 Andy Whiteside: The next bullet here talks about the object storage that's amenable to being changed once it's been written we'll talk about new tannic specific things here in a second but that's obviously a clear place where we need to protect the company jewels. 121 00:15:34.530 --> 00:15:46.140 Jirah Cox: Totally I think it's I think it's I like that's under prevention, it also has surface area under recovery as well, later on, but in this case hundred prevention and they can almost as is thinking about taking your backups. 122 00:15:47.490 --> 00:15:52.500 Jirah Cox: On the offense right, what do I do to protect those if the bad guy was right next to them on the network. 123 00:15:52.860 --> 00:15:59.370 Jirah Cox: Well okay great I can sleep tell the backups are that they are configured in such a way that they literally are not allowed to self delete right. 124 00:15:59.760 --> 00:16:11.880 Jirah Cox: Even with admin access even with you know to humans logging in from A and B team, or whatever I say like weren't for compliance, you know, the only way to get rid of the state is to go in the data Center and physically take a sledgehammer to it. 125 00:16:13.410 --> 00:16:22.140 Jirah Cox: You know which, hopefully, if you're vulnerable to that maybe maybe you don't need to talk to it consultants right, and you can go get some some beefy guys the guard your data Center right. 126 00:16:23.460 --> 00:16:32.550 Andy Whiteside: The last bullet here in this section is critically analyze and scan patchwork of vectors in data centers to monitor and continuous updates. 127 00:16:32.910 --> 00:16:38.340 Andy Whiteside: In areas of suspected susceptible to attacks. 128 00:16:39.660 --> 00:16:40.740 Andy Whiteside: we've recently started. 129 00:16:41.820 --> 00:16:49.950 Andy Whiteside: You know intrusion protection, excuse me penetration test type stuff we've also started doing something that I think can be a huge hit over here where we're going to be doing. 130 00:16:50.670 --> 00:17:03.060 Andy Whiteside: vdi type of assessments, assessing the security for security vulnerabilities and a lot of times it's not you know code it's not up to date it's doors that have been left unlocked that you can't justify why they're unlocked. 131 00:17:05.070 --> 00:17:23.130 Harvey Green: yeah for sure, being able to go back through the firewall rules, for example, and you know know the history behind well why did we do this again and was that for a test or does that need to be there for production, you know, eight years after it was put in so. 132 00:17:24.150 --> 00:17:28.170 Harvey Green: definitely need to keep some sort of history. 133 00:17:29.310 --> 00:17:51.030 Harvey Green: And also notes about different security exceptions, you make because eventually those exceptions either need to be taken away or kind of designed around so that you know what's there why it's there and what you're susceptible to than the end to prepare for future attacks. 134 00:17:52.050 --> 00:17:57.330 Andy Whiteside: When I like the the very first word in this one that says critically at other words. 135 00:17:57.870 --> 00:18:14.670 Andy Whiteside: Yes, the critical eye with a look at look at it like if you're paying your networking company that sets up your network to do your penetration test or your vdi companies INTEGRA to do your vdi security test, you know what's the what's the likelihood you're gonna get a straight answer. 136 00:18:15.300 --> 00:18:20.430 Harvey Green: that's right it's like if gyrus is do it, you just do it, and if Harvey says do what you. 137 00:18:21.510 --> 00:18:22.260 Harvey Green: know about that. 138 00:18:24.420 --> 00:18:34.530 Andy Whiteside: Well, in our case we're specifically bringing in a third party to do these in encouraging them to find everything you can and it only make us all, better if you do that yeah. 139 00:18:34.650 --> 00:18:40.410 Harvey Green: Absolutely that's that's important to for a lot of different environment so that. 140 00:18:40.860 --> 00:18:52.050 Harvey Green: You don't have to worry about you know one person's feelings getting hurt by the next person or somebody having you know, an agenda they're out to get somebody to have a third party they're balanced their neutral. 141 00:18:52.590 --> 00:19:04.740 Harvey Green: They come in and their goal is to make sure you're either secure or let you know how you're not secure so that you can take care of it, the the emotional piece of it completely comes out of it. 142 00:19:06.060 --> 00:19:13.470 Andy Whiteside: So let's let's translate the things that we just talked about in terms of things you need to be thinking about to new tactics products and services. 143 00:19:14.280 --> 00:19:26.610 Andy Whiteside: gyro let's hit the first one new tonics ios which stands for Acropolis operating system and prison management what what of those bullets do we fix with a ios and prison management. 144 00:19:27.780 --> 00:19:34.920 Jirah Cox: yeah so so you know this talks about how we, we take the listings right thing Government issued. 145 00:19:36.210 --> 00:19:48.840 Jirah Cox: guidelines on how to secure system we don't give that to you as a document for a human, to read, we also write copy that is machine readable, so you can automate that right so right out of the box, you can simply say enter state compliance mode. 146 00:19:51.510 --> 00:19:59.940 Jirah Cox: that's not just a one time event that's also a defined baseline that if you were to go in and do something to like compromise system security say weekend. 147 00:20:00.360 --> 00:20:09.150 Jirah Cox: Key base ssh down to password ssh we will note that flag it and then re he'll back to the baseline saying I got to turn that off and go back to key based ssh. 148 00:20:11.070 --> 00:20:15.780 Jirah Cox: And then you know for the management layer right even limiting sort of bad actor admins. 149 00:20:16.140 --> 00:20:30.720 Jirah Cox: Are back for rural based control around what of what is it gives a given roll out to do within the environment, so if i'm from the backup guy from the you know database guy I can say, I can only see the parts of prison that are pertinent to my job role. 150 00:20:35.130 --> 00:20:46.230 Andy Whiteside: And that's a has a lot to do with the origins of new tannic which is this user friendly interface, but with control yes. 151 00:20:48.180 --> 00:20:48.420 yeah. 152 00:20:49.740 --> 00:21:02.370 Andy Whiteside: Alright, so the next one on here is new tonics hv which stands for Acropolis hypervisor and flow micro segmentation flow is not an acronym it's a real word. 153 00:21:03.450 --> 00:21:16.650 Andy Whiteside: And I am specifically emphasizing the word Acropolis, when I said it before and saying in here now, I still run into people everyday that use Acropolis interchangeably between these two things, these two areas and that's just not right. 154 00:21:19.170 --> 00:21:19.740 Jirah Cox: i'm. 155 00:21:21.510 --> 00:21:25.620 Jirah Cox: yeah I don't I don't bother correcting people too often about that. 156 00:21:26.910 --> 00:21:32.340 Jirah Cox: You know branding is kind of always just a little bit fluid right i'll spend more time, focusing on the problem to solve. 157 00:21:32.820 --> 00:21:37.770 Jirah Cox: But but yeah and like including this one right where you know delivering micro segmentation. 158 00:21:38.280 --> 00:21:43.920 Jirah Cox: making it easy to apply to your workloads see what they're doing lockdown what they can and can't talk to. 159 00:21:44.280 --> 00:21:56.670 Jirah Cox: But nothing, nothing to install all the code, you need is there on the system from day one and all, all you have to do is just you know set your policies in place and and switching them from monitor mode to enforce mode that's it so couldn't be simpler. 160 00:22:00.390 --> 00:22:03.690 Andy Whiteside: rv i'll let you comment, I was gonna jump in on something else but go ahead. 161 00:22:04.920 --> 00:22:17.010 Harvey Green: No just this is, these are I guess very important tenants here, you know we're talking through prevention and as we get to the one you just highlighted being able to. 162 00:22:18.030 --> 00:22:22.560 Harvey Green: create a mutable backups the right ones read only mode. 163 00:22:23.610 --> 00:22:44.490 Harvey Green: That will again be a great prevention tool and as as direct talk through earlier when we talk about what you do after something happens that's that's also a very, very important tool is to be able to know what you actually can trust, on the other side of something happening right. 164 00:22:45.750 --> 00:22:52.560 Andy Whiteside: And the guy was the last one in the these sets of bullets is new tannic objects, where does that tie into what we talked about above. 165 00:22:54.270 --> 00:22:57.150 Jirah Cox: yeah so objects, is our our. 166 00:22:58.170 --> 00:23:07.170 Jirah Cox: s3 compliant object storage solution on top of mechanics so you can use a node you know, these days, you can use a node for like I don't know it's called 1820 different things right from. 167 00:23:07.470 --> 00:23:20.880 Jirah Cox: Running vmware to running containers to running file services SMB nfl objects is like one of those things you can use a node to do right and you say next node so better living through software so objects, is our software based solution for. 168 00:23:21.930 --> 00:23:31.140 Jirah Cox: for storing data it lends itself to being a backup target very readily right, it can scale to absolutely huge data sets right so. 169 00:23:31.560 --> 00:23:42.090 Jirah Cox: started whatever hundred terabytes grow to petabytes object isn't going to blank right grow grow right along with you as well as, of course, the new tonics cluster below it right scale out it's very, very. 170 00:23:43.650 --> 00:23:55.140 Jirah Cox: alive aligned to that use case but that's all the technical you know whiz bang storage stuff the security side of that is the ability to make it one compliance a worm being you know right once read many. 171 00:23:56.190 --> 00:24:02.880 Jirah Cox: The software itself will literally not allow a deletion of data if that flag has been set so, then it has to age out. 172 00:24:03.300 --> 00:24:12.090 Jirah Cox: According to your policy, whether that's you know one year through your seven year whatever it is, it delusion there's simply not allowed before that threshold has been reached. 173 00:24:14.280 --> 00:24:24.930 Andy Whiteside: And that's a no brainer in our world right it doesn't matter we don't have to put the stuff on tape and send it off study more we can stick it across the aisle or we can stick it across the aisle and across the world, and another data Center. 174 00:24:25.200 --> 00:24:26.580 Andy Whiteside: never change it. 175 00:24:29.940 --> 00:24:31.860 Andy Whiteside: Harvey any specifics around. 176 00:24:33.210 --> 00:24:34.380 Andy Whiteside: immutable storage. 177 00:24:35.310 --> 00:24:39.870 Harvey Green: Know again just making it so that you've got something that you can trust in the end. 178 00:24:41.010 --> 00:24:56.850 Harvey Green: Again, being able to replicate that wherever you need it to live, so that you don't just have it all sitting in the same physical location and just being able to have something that you know, no matter what isn't going to be. 179 00:24:57.900 --> 00:25:06.090 Harvey Green: Written to or changed based on something other some other threat making its way into your environment. 180 00:25:07.050 --> 00:25:07.350 Right. 181 00:25:09.000 --> 00:25:22.470 Andy Whiteside: So guys, let me, let me do this to you two guys if I So you can see my screen right yeah but for for effect if I were to say, this is the end of the blog we've accomplished a lot right there, yes. 182 00:25:23.460 --> 00:25:24.690 Harvey Green: Absolutely for sure. 183 00:25:25.260 --> 00:25:34.890 Andy Whiteside: These are the things we just talked about are the no brainers from new tactics to help solve the security challenge both sledding commercial. 184 00:25:36.480 --> 00:25:37.110 Jirah Cox: hundred percent yeah. 185 00:25:37.890 --> 00:25:41.190 Andy Whiteside: But now let's move on to the next section detection right so we've done. 186 00:25:41.190 --> 00:25:43.530 Andy Whiteside: Prevention never detection now you thought you were done, though. 187 00:25:43.830 --> 00:25:47.400 Jirah Cox: For sure that was Andy stretching one blog post into three episodes. 188 00:25:48.780 --> 00:25:50.460 Jirah Cox: Which i'm totally down for whatever you want me. 189 00:25:50.790 --> 00:25:52.560 Andy Whiteside: Just because it's valentine's day right. 190 00:25:54.240 --> 00:25:56.250 Andy Whiteside: Alright, the next one is detection and i'm going to. 191 00:25:56.310 --> 00:26:13.320 Andy Whiteside: i'm going to read the four bullets, so you don't have to do it again and then we'll talk about where to tactics play so leverage layer seven threat detection tools like intrusion detection and prevention systems, I think I mentioned this earlier to identify super serious serious. 192 00:26:14.160 --> 00:26:16.500 Harvey Green: Serious so curious. 193 00:26:16.650 --> 00:26:17.010 Jirah Cox: Network. 194 00:26:17.640 --> 00:26:25.680 Andy Whiteside: that's the one number to use a consolidated security information used to call it is to consolidate security information event management, a Sim. 195 00:26:26.220 --> 00:26:45.660 Andy Whiteside: solution with real time analytics analysis of security event logs and possible orchestration capabilities that's number two number three employee network honey pots to augment detection number four leverage anomaly detection tools for resource usage and storage activity. 196 00:26:46.830 --> 00:26:59.070 Andy Whiteside: If I go down to where new tannic fits first one talks about new tannic Acropolis hypervisor HP and flow service insertion and chaining gyro help us understand where that helps solve the bullets above. 197 00:26:59.850 --> 00:27:04.890 Jirah Cox: yeah so you can you know with with service insertion right that's a like an advanced feature of flow. 198 00:27:05.340 --> 00:27:16.110 Jirah Cox: Obviously you can do a quick allow or deny at a packet level closer to the virtual machine on the virtualized Nick, but if you want to get fancier than that, obviously, you know, maybe I want to always block. 199 00:27:16.980 --> 00:27:32.730 Jirah Cox: You know, tell them that that's an easy one, I don't need to spend cycles on like a virtualized firewall you know disrupting those packets, looking at the source, looking at at headers are doing like fancier like web web application firewall. 200 00:27:33.990 --> 00:27:35.250 Jirah Cox: analytics of that traffic. 201 00:27:36.480 --> 00:27:43.290 Jirah Cox: You know that's easy right telling that disallowed to my web server maybe on actual 443 packets, I do want. 202 00:27:43.980 --> 00:27:53.220 Jirah Cox: You know, certain traffic patterns, or maybe all traffic redirect through smarter tooling right, I want, maybe virtualized firewalls to be allowed to decrypt that traffic. 203 00:27:53.610 --> 00:28:00.780 Jirah Cox: Look at who it's from see what's happening in their permit injection attacks so that's that's you know another great use case for. 204 00:28:01.590 --> 00:28:18.540 Jirah Cox: flow as part of a Microsoft solution to allow for even more advanced functionality right, so we can work with virtualize firewall vendors application firewalls to do more functionality give you more functionality and more security around your traffic in your workloads traffic flows. 205 00:28:20.850 --> 00:28:22.050 Andy Whiteside: rv comments. 206 00:28:23.280 --> 00:28:35.670 Harvey Green: I our reserve to the till you get to the last one, but i'm just i'm watching this picture build and I just want to make sure, at the end that everybody sees the picture we were building. 207 00:28:38.160 --> 00:28:52.320 Andy Whiteside: The the next bullet as to how new tannic solve these challenges is files files analytics new tannic prison OPS in X play and I can I can fathom what files driver What is all this stuff what is this stuff. 208 00:28:52.830 --> 00:28:53.640 Jirah Cox: yeah so. 209 00:28:55.230 --> 00:28:57.180 Jirah Cox: Some some really creative you know. 210 00:28:59.730 --> 00:29:14.790 Jirah Cox: Collaboration you're right among among the services, the file files analytics watches the traffic on mechanics hosted file servers right so new text files being our software defined scale out nas offering right, so it can host your SMB shares your nfl shares. 211 00:29:15.840 --> 00:29:25.770 Jirah Cox: When data lives on those, then we can generate metadata around about your data right you're storing whatever word documents pdfs family vacation videos whatever. 212 00:29:26.190 --> 00:29:32.520 Jirah Cox: We can watch who's accessing those what does normal look like what do anomalies look like right so hey it's 3am. 213 00:29:33.120 --> 00:29:42.240 Jirah Cox: And you know somebody logged in from an accounting desktop coming through these file shares that's an anomaly right, we need to throw an alert about that that can then be acted on. 214 00:29:43.410 --> 00:29:55.830 Jirah Cox: So, you know that that's not not normal behavior there and then prison OPS can do the same thing for virtual machines right, it will actually learn what does normal look like, for your vm and he was like memory consumption cpu consumption. 215 00:29:57.420 --> 00:30:01.530 Jirah Cox: And they can also alert for anomaly so without you as a human needing to define. 216 00:30:02.250 --> 00:30:13.200 Jirah Cox: X percentage of threshold or somebody megahertz of what is what the steady state look like it'll just learn and baseline against your own behavior and then be able to alert to you based off of anomalies like that. 217 00:30:14.010 --> 00:30:22.500 Jirah Cox: And then, and then cross play is the it's our like coolest automation platform, so you can have lots of we call them playbooks to find. 218 00:30:22.920 --> 00:30:28.890 Jirah Cox: A playbook is almost like if you've used like the the Web service if this than that it's like you know all point and click. 219 00:30:29.490 --> 00:30:37.650 Jirah Cox: automation and chaining of like I want you to take this and do this and strip out this you know third word and email that to me and send me a slack message or teams, or whatever I want. 220 00:30:38.940 --> 00:30:48.810 Jirah Cox: I can use that for like time based triggers on demand triggers or in this case more critically alert based triggers So when I get an alert from the system about X is happening. 221 00:30:49.170 --> 00:31:00.330 Jirah Cox: Right, then I want you to do whatever so I you know you can say hey my critical web servers web traffic is up 10 X, in the last hour right is that worth as a human me checking on. 222 00:31:01.020 --> 00:31:13.140 Jirah Cox: I can get that as an email as a teams message slack message pager duty whatever whatever fits into your ecosystem, so it brings that that detection, all the way to your right to your front door. 223 00:31:14.880 --> 00:31:21.960 Andy Whiteside: So diver are these all things that are part of new techniques or things that new techniques enables that third parties come in and actually do. 224 00:31:22.710 --> 00:31:25.200 Jirah Cox: i'm going to say both. 225 00:31:25.530 --> 00:31:26.430 Jirah Cox: Okay, so that. 226 00:31:28.140 --> 00:31:39.720 Jirah Cox: We have a lot of the the code closer to the virtual machine close to the workload closer to the metal we're not like the APP on your smartphone that alerts you about something, but we work with that APP yeah. 227 00:31:41.400 --> 00:31:45.300 Andy Whiteside: Alright Harvey yeah I can't believe you're excited about number three the way you seem to be but. 228 00:31:46.560 --> 00:31:49.140 Harvey Green: Not so you're actually you were. 229 00:31:49.170 --> 00:31:56.730 Harvey Green: kind of hitting on my point just just a second ago before I got to it, but I, like all of this. 230 00:31:57.720 --> 00:32:11.580 Harvey Green: Well, to jeremy's point not every single piece of it, but all of this, that we talked about so far, these are things that are built into the platform things you can use things that you can have you know day one of implementation. 231 00:32:12.810 --> 00:32:19.800 Harvey Green: So I guess for those so far that have listened to, where we've gotten so far, and you don't have. 232 00:32:20.280 --> 00:32:38.460 Harvey Green: All of these tools in place and you're wondering how in the world, you can get all of them, and you know the thinking that is 15 vendors is the answer on just being able to do this, out of just the mechanics platform that you have is I mean I think that's a very big. 233 00:32:39.570 --> 00:32:56.250 Harvey Green: very big deal that can definitely change an organization security footprint really from day one just being able to plan this out and implement these pieces that you have access to, I think, will be a very, very good change and security posture. 234 00:32:56.940 --> 00:33:04.410 Andy Whiteside: mean here's here's one of my look at this, you can you can move everything to an is you know, one of the big cloud hyper scales, and you can get all this stuff. 235 00:33:05.400 --> 00:33:17.040 Andy Whiteside: But most of us can't do that move everything so then we got to go to some colo we got to go to some partner, other than the public cloud we gotta do our own on data our own premises data Center. 236 00:33:17.940 --> 00:33:33.450 Andy Whiteside: Because of you, because of the universal layer of new tactics and all this, whether it's public cloud colo private data Center private cloud all these things become doable and they become doable in the same way. 237 00:33:35.130 --> 00:33:35.460 Jirah Cox: Right. 238 00:33:38.190 --> 00:33:47.820 Andy Whiteside: And so the third bullet here is about a Sim a security information and event management system that can easily tie into all this and keep you from having to look. 239 00:33:48.540 --> 00:33:56.190 Andy Whiteside: Under every object to find stuff in a place, you can go look to find everything that's being reported and try to make sense of it. 240 00:33:57.480 --> 00:34:04.560 Jirah Cox: yeah I mean I don't want to oversimplify or unintentionally trigger any of my friends in security, who could. 241 00:34:05.010 --> 00:34:13.620 Jirah Cox: describe like what the same as doing it way better than I could, but like in my simplified view of the world it's telling it's a record of what happened. 242 00:34:14.070 --> 00:34:27.810 Jirah Cox: And what's normal and what's weird right and that, basically, is like one dimension of like a big data problem of like capture this fire hose of information look for outliers and anomalies hopefully intelligently alert about that. 243 00:34:29.730 --> 00:34:42.420 Jirah Cox: But at that base layer right as a big data problem in taxes, like uniquely suited to do that right, because we have the compute for the actual computation that has to occur, you know, in the form of a virtual machine and V cpus. 244 00:34:43.290 --> 00:34:53.610 Jirah Cox: But we are the performance but the performance storage right they have to capture the data be able to ingest it be able to analyze it be able to search on it when you when you search for like occurrences of events and so forth. 245 00:34:54.030 --> 00:35:03.000 Jirah Cox: Or we need to go review your log data but storing everything in a performant way forever is crazy expensive, and you know public cloud vendors would love you to do that. 246 00:35:04.530 --> 00:35:12.060 Jirah Cox: You know anything new tannic says hey we can do stuff like fancy all flash nodes for your ingest and whatever you want, like last 90 days, perhaps. 247 00:35:12.420 --> 00:35:19.140 Jirah Cox: But if you need to maintain years worth of logs here, we also have a great solution for that with stuff like our our object storage solution. 248 00:35:19.470 --> 00:35:33.210 Jirah Cox: which a lot of security vendors can say we will you know at the application level gracefully aged out data from the hot teardown of the cold tier keeping everything performance, secure and economical, you know, and you have full governance over all that data. 249 00:35:35.040 --> 00:35:38.250 Andy Whiteside: Right it's a it's a platform right. 250 00:35:38.640 --> 00:35:53.610 Andy Whiteside: stuff can tie tie into and watch a new 10 is going from Acropolis operating system running on top of asx to the evolution to Acropolis hypervisor and then all the things the services that have come along with it. 251 00:35:54.750 --> 00:36:01.110 Andy Whiteside: As you guys start to solve cloud like challenges that don't have to be in the cloud it's it's been fun to watch. 252 00:36:03.570 --> 00:36:13.890 Andy Whiteside: Alright last section of this is recovery and the bullets go like this, create snapshot and replication plans replicate data to one or more locations, as part of. 253 00:36:14.220 --> 00:36:21.270 Andy Whiteside: Business continuity and disaster recovery i've never seen this acronym before but BC Dr putting those two together. 254 00:36:22.080 --> 00:36:25.320 Andy Whiteside: Because Everybody talks about them, as if they're one in the same and they're definitely not but. 255 00:36:25.800 --> 00:36:30.180 Andy Whiteside: If that's what somebody is talking about let's give them both and just given one acronym that's interesting I like that. 256 00:36:31.140 --> 00:36:46.290 Andy Whiteside: Follow the 321 rule for backup at least three copies to backups one copy should be located off site that goes back to those days of waiting for the iron mountain guy to show up every day and did lots of that and handing the the box will tapes. 257 00:36:47.790 --> 00:36:53.280 Andy Whiteside: Sometimes check and see if they work, sometimes not use automation and frequently test your recovery right so. 258 00:36:53.610 --> 00:37:01.380 Andy Whiteside: I don't know we I know we brought it up multiple times on this podcast i'm glad glad you got a business continuity well i'm glad you got to Dr plan. 259 00:37:01.710 --> 00:37:06.210 Andy Whiteside: i'm glad there's some element of business continuity in your day to day how often do you test it. 260 00:37:06.960 --> 00:37:13.650 Andy Whiteside: You know if you're doing business continuity right you're you're actually testing alive every day you're doing it, the modern way, but the Dr side of it. 261 00:37:14.550 --> 00:37:24.720 Andy Whiteside: Being able to proactively test that without actually doing it and then actually doing a couple times a year, those are the challenges that can real consulting firms need to have for their for their customers. 262 00:37:27.030 --> 00:37:34.110 Andy Whiteside: The new tannic answers to this starts with number one new tactics ios gyro how is mechanics Acropolis operating system. 263 00:37:35.070 --> 00:37:38.070 Andy Whiteside: i'm going to try to translate that real quick so that's the new tactics. 264 00:37:38.460 --> 00:37:49.740 Andy Whiteside: Acropolis operating system which is really the storage magic and all this, which if I try to dummy it down a little is really the V San piece of what makes new techniques new teams, I know. 265 00:37:50.550 --> 00:37:57.960 Andy Whiteside: I know you guys don't necessarily like somebody calling me saying, because it's way beyond that but that's what Acropolis operating system means to me. 266 00:37:59.040 --> 00:38:06.480 Jirah Cox: it's it's solving the need for highly available storage right now scale up fashion kind of no matter what the workload is right, whether it's. 267 00:38:07.020 --> 00:38:17.160 Jirah Cox: You know right to your point where we started as simple as a virtual machine or as fancy as containerized workloads block storage file storage object storage, you know. 268 00:38:18.510 --> 00:38:22.770 Jirah Cox: I think if if the world's invent a new kind of storage i'm sure will evolve to support that do one day. 269 00:38:24.120 --> 00:38:24.390 Andy Whiteside: Right. 270 00:38:27.300 --> 00:38:27.690 Andy Whiteside: rb. 271 00:38:29.370 --> 00:38:38.760 Andy Whiteside: it's fair to say that the Acropolis operating system portion of this is that's the Foundation that's the cornerstone for all that's happened since, yes it. 272 00:38:38.820 --> 00:38:58.140 Harvey Green: Is the magic, it is the secret sauce is the differentiation, so this is what makes the big difference between attacks and and a lot of the other solutions out there that can do as much or be as wide ranging. 273 00:38:59.370 --> 00:39:02.400 Harvey Green: As far as the workloads cover that and attachments can be. 274 00:39:03.990 --> 00:39:08.100 Jirah Cox: In the place where we fit into like the 321 rules specifically right. 275 00:39:09.390 --> 00:39:19.350 Jirah Cox: You know, three copies of of data, I think one of those should probably be you know, a new tannic snapshot on the primary cluster right where it's it's. 276 00:39:20.310 --> 00:39:23.220 Jirah Cox: it's immutable right can be changed after it's created. 277 00:39:23.760 --> 00:39:39.030 Jirah Cox: And it's going to be the on the spectrum of recovery, the quickest option right, obviously, if I have a site denial event, if I have a physical event, if the sprinklers go off in the data Center also pro tip don't have sprinklers in your data Center but if that cabinet is physically down. 278 00:39:40.530 --> 00:39:50.760 Jirah Cox: Then I can't use that snapshot right but short of a cluster denial event that snapshot to me the quickest way to get up and going, if I have a drop the table a human caused. 279 00:39:51.630 --> 00:40:00.480 Jirah Cox: event a vm deletion, you know some sort of a miss configuration right definitely have backups as well, but one keep one copy right and then. 280 00:40:00.870 --> 00:40:07.680 Jirah Cox: I like the way this article writes it in terms of like match your business recovery objectives, basically, you know profile your vm is right find the important stuff. 281 00:40:08.160 --> 00:40:13.800 Jirah Cox: keeps Nash snapshots of them on the primary cluster more often, they may be retained for longer. 282 00:40:14.430 --> 00:40:22.020 Jirah Cox: You know, you can take snapshots right there taking instantly they don't cause stun they don't cause, you know them slowdowns as you retain them. 283 00:40:22.650 --> 00:40:36.750 Jirah Cox: So keep those there right there built in, as part of the Platform, beyond that, of course, then yeah get into get into your yeah BC Dr I think it's a great acronym for it right, because I don't always have to fail over to recover. 284 00:40:38.310 --> 00:40:41.460 Jirah Cox: You know I just need to get the business up back up and running back as quick as possible. 285 00:40:42.570 --> 00:40:53.460 Jirah Cox: The automation right we have another blog post and we did an episode about it, to talk about using our leap right which is that are orchestrated vm recovery, you know with run books and and. 286 00:40:53.910 --> 00:41:01.980 Jirah Cox: Non impactful out of band testing right, I could have that test run every morning at three in the morning and then just email me with the Dr tests. 287 00:41:02.550 --> 00:41:10.470 Jirah Cox: Success results right, I can just go into work every day, knowing that my Dr plan was tested last night, while I slept and we passed the test right. 288 00:41:13.890 --> 00:41:16.800 Andy Whiteside: So let's talk leap. 289 00:41:18.120 --> 00:41:19.740 Andy Whiteside: And what leap does. 290 00:41:20.760 --> 00:41:35.280 Andy Whiteside: Like leap when I first started understanding mechanics my first thought went to the er and how entertainers could offer up a cloud that included that it had new tactics in it and we could easily use that as a replication target. 291 00:41:36.780 --> 00:41:43.530 Andy Whiteside: that's leap right that's that's what the new tannic cloud has become, which is this no brainer place to at least a year, Dr. 292 00:41:44.280 --> 00:41:51.930 Jirah Cox: yeah if you don't if you're a customer without a without a Dr site today and no desire to invest in one a you're in great company and be. 293 00:41:52.140 --> 00:42:00.780 Jirah Cox: As an easy problem to solve, you know absolutely you can you can you know basically rent if that's the right word, you can get a Dr as a service solution. 294 00:42:01.470 --> 00:42:17.670 Jirah Cox: Three new tonics through through the leap service that we offer if you, of course, if you have clusters in you know your your primary and secondary data centers leaps also the software, you can run on Prem to get the same outcome right about vm replication. 295 00:42:18.810 --> 00:42:21.540 Jirah Cox: run book recovery out of ban testing. 296 00:42:23.970 --> 00:42:25.920 Jirah Cox: That full automation for that for that stack. 297 00:42:28.290 --> 00:42:33.840 Andy Whiteside: or via any first hand, knowledge and experience, using using leap for the Dr side. 298 00:42:35.640 --> 00:42:46.230 Harvey Green: Not not me personally, as far as recovering from it, but helping customers at least get it in place, yes conversations about it absolutely. 299 00:42:47.550 --> 00:42:55.260 Harvey Green: Definitely again like Darren mentioned, if you if you're a customer who does not have any sort of backup Dr site. 300 00:42:55.920 --> 00:43:04.320 Harvey Green: Today this is definitely a way for you to do it there's an affordable way to do it and it's pretty easy to implement and get going. 301 00:43:05.310 --> 00:43:18.990 Harvey Green: where you have you know nothing now this This allows you to both check the box, but check it in a way that you're able to actually utilize test and be able to actually say something for. 302 00:43:20.100 --> 00:43:21.930 Harvey Green: Not just check the box. 303 00:43:22.440 --> 00:43:29.640 Jirah Cox: Right, I think you get full credit for that answer, however, setting it up that's that's the important part right like you don't get extra points for actually suffering the outage. 304 00:43:29.730 --> 00:43:30.390 That makes you guys. 305 00:43:33.360 --> 00:43:43.080 Jirah Cox: Hopefully that's that's what we want for all everyone right is is, you have the production in place capability to recover you test it and never actually need to maybe do a full on full blown full smash recovery. 306 00:43:44.430 --> 00:43:55.470 Andy Whiteside: Well, for for me leap is that story that came full circle, but then also watching new tactics doing what they're doing with the clusters on azure clusters on aws maybe clusters on tcp. 307 00:43:55.920 --> 00:44:12.780 Andy Whiteside: it's those types of things building out redundancy, but for people who just need that Dr scenario check a few boxes pay a few bills nothing compared to pass on guard bill kind of thing, and now you got it covered and when you need to test it, you can. 308 00:44:12.930 --> 00:44:18.000 Jirah Cox: it's one yeah soundgarden last in the past there right like. 309 00:44:18.300 --> 00:44:19.860 Jirah Cox: Right it's recovery that doesn't involve like. 310 00:44:20.220 --> 00:44:24.630 Jirah Cox: backing up a semi you know into the parking lot and hooking into the power grid right it's. 311 00:44:24.750 --> 00:44:35.460 Jirah Cox: Right software defined recovery to target of your choice right so that can be your cluster to to new tannic that can be your cluster to. 312 00:44:36.120 --> 00:44:46.980 Jirah Cox: Your other cluster it communicated your cluster to public cloud right which where you can also just run at 10 X cluster right so it's really you're in control of what your recovery environment should look like. 313 00:44:48.330 --> 00:44:48.720 Andy Whiteside: I went. 314 00:44:50.400 --> 00:45:02.520 Andy Whiteside: Before this world existed, we just I just implemented vmware for the first, second time in a data Center and I went to sungar to do my Dr test for the new company, I was working for fortune 500 company and. 315 00:45:03.360 --> 00:45:13.470 Andy Whiteside: The servers they gave me were so old I couldn't even install the os on the server is much less the hypervisor and all the os on top of it to rebuild the environment, I was literally there an hour. 316 00:45:14.250 --> 00:45:18.960 Andy Whiteside: There were people walking around from hurricane Katrina 10 years earlier still walking around the data Center. 317 00:45:20.160 --> 00:45:31.980 Andy Whiteside: I was there, an hour this stuff wouldn't work I just left and went out to a club with my buddy like that was the Dr test and I got back in on Monday, my boss said how to go, I said fine that's all we ever talked about. 318 00:45:35.910 --> 00:45:40.530 Jirah Cox: Okay, I mean we should probably had an unwritten step here of have a more rigorous Dr tests than that. 319 00:45:40.830 --> 00:45:41.670 Harvey Green: Just a little bit. 320 00:45:44.130 --> 00:45:48.690 Andy Whiteside: But my I think we were spending 10,000 a month or something for the junk I got when I got there. 321 00:45:49.350 --> 00:45:59.940 Andy Whiteside: I was leaving anyway, I was like this is this is insane we have these guys have no idea what they were just checking boxes, this is the same place to the business continuity side of that plan was you ever buy a laptop. 322 00:46:00.810 --> 00:46:13.500 Jirah Cox: I mean I can't think of a better segue than to say that leap has a Dr test auditing features, it will tell you what it did during the test and give you a PDF that you can you can send to somebody that cares about habit Tesco. 323 00:46:15.210 --> 00:46:17.340 Jirah Cox: thanks for the thanks for the tip there anything else fantastic. 324 00:46:17.520 --> 00:46:31.470 Andy Whiteside: You know i'm not proud of everything's happening not everything something's not all right last one is new tactics mine for backup what does new tannic mind doing to help us with the recovery side of the objective here. 325 00:46:32.490 --> 00:46:40.290 Jirah Cox: yeah I mean, I think this calls it out right is is turnkey data backup and archiving right So if you if you. 326 00:46:41.160 --> 00:46:51.750 Jirah Cox: are adopting the tactics, but you should treat HIV you're open to maybe any backup provider, you could you could talk to Harvey you talk to the tactics and say hey what's The easiest way to just drop in. 327 00:46:52.890 --> 00:47:05.970 Jirah Cox: My new backup target software to get there, all that good stuff and mine is the package you know newt annex for storage, as well as our software partners for the backup provider and like agents, if you need them. 328 00:47:07.980 --> 00:47:15.360 Jirah Cox: All in one in one single cluster right so he's probably going to use our our object storage under the covers and then. 329 00:47:16.050 --> 00:47:25.500 Jirah Cox: Things like our mind partners like vm haiku calm vault as the actual software that is going to pick up your data, whether it's you know if you say i've got physical sequel over there. 330 00:47:26.310 --> 00:47:35.580 Jirah Cox: or i've got vm server here, whatever right mine is that you know kind of all in one one stop shop for both backup software and storage in one cluster. 331 00:47:36.270 --> 00:47:40.560 Andy Whiteside: Right, I know our team is using it were to work with haiku. 332 00:47:41.940 --> 00:47:47.310 Andy Whiteside: leverage in mind underneath the covers in haiku turns around and adds additional value on top of that. 333 00:47:47.850 --> 00:47:48.540 Jirah Cox: couldn't be simpler. 334 00:47:50.310 --> 00:47:51.840 Andy Whiteside: have anything on the unconscious mind. 335 00:47:53.040 --> 00:48:08.220 Harvey Green: i'm just looking at the full strategy there and I can't get this thought out of my hand, so you have to forgive me but snapshot back backup Dr, otherwise known as Oh, oh no and oh snap. 336 00:48:12.510 --> 00:48:13.470 Jirah Cox: it's a spectrum. 337 00:48:13.890 --> 00:48:14.490 Harvey Green: It is. 338 00:48:18.330 --> 00:48:20.010 Andy Whiteside: Spectrum sorry. 339 00:48:21.660 --> 00:48:28.140 Andy Whiteside: All right, um so new tannic select last section talks about any kind of new tannic solutions key to security posture. 340 00:48:28.620 --> 00:48:34.470 Andy Whiteside: I can't think of a better way to tie it together than to talk about what i've talked about it, multiple times on this call, and that is. 341 00:48:34.920 --> 00:48:48.660 Andy Whiteside: cloud enabled technologies are allowing us to solve a lot of these problems, new tannic is the cloud enabled technology that can be anywhere you needed to be that's what's been so awesome about watching tanks journey here. 342 00:48:50.040 --> 00:49:06.120 Harvey Green: yeah absolutely um you know we we find a lot of customers in sled and fed who are not we'll just say, not as excited to go run all of their information to a public cloud, so this gives them a lot of. 343 00:49:06.900 --> 00:49:14.400 Harvey Green: A lot of the same functionality, but being able to do that and still host it where they want to host it so. 344 00:49:15.330 --> 00:49:28.200 Harvey Green: That that is definitely a big one you've got the states, we talked about earlier you've got a bunch of the do the type of proof products, some of the certifications that are listed here. 345 00:49:29.220 --> 00:49:44.580 Harvey Green: that these are definitely very, very important pieces for the new tonics platform that people can use and have you know what they know to be a trusted solution. 346 00:49:45.390 --> 00:50:04.530 Harvey Green: One that's compliant with the standards that they need, and something that they will be able to actually use, and you know really be able to just trust it, you know you've got everything built into this platform and everything built into this system from you know, again we just went through. 347 00:50:05.580 --> 00:50:07.140 Harvey Green: Protection backup and. 348 00:50:08.160 --> 00:50:15.180 Harvey Green: Recovery so you've got everything that you need to make all of those pieces happen, the way that you need them to. 349 00:50:16.770 --> 00:50:22.800 Andy Whiteside: Well, you spoke up there, and you brought the acronym slid back up I had forgotten, we were talking about slid. 350 00:50:24.630 --> 00:50:25.260 Andy Whiteside: Universal. 351 00:50:25.350 --> 00:50:27.480 Harvey Green: Across is it is. 352 00:50:28.800 --> 00:50:35.700 Andy Whiteside: gyro anything else on the security posture that can be enabled through and the tactics platform. 353 00:50:38.940 --> 00:50:53.970 Jirah Cox: What I think I think the bow tie around the whole thing is we've talked about you know virtualization talk about storage management for all of that security as as part of the DNA of that whole every layer of that stack. 354 00:50:56.100 --> 00:51:00.540 Jirah Cox: Micro segmentation backups Dr replication. 355 00:51:02.190 --> 00:51:08.010 Jirah Cox: And when I you know if for no other reason I do those things within the new tonics flavored fashion. 356 00:51:08.850 --> 00:51:15.510 Jirah Cox: I can call one number for support and get a world class support experience for every single layer of that stack right, so how many. 357 00:51:16.080 --> 00:51:30.390 Jirah Cox: How many vendors that I just pull out that can't be pointing fingers at one another, when I need to make this all work for my you know, perhaps you know more rigorous Dr event than we talked about earlier yeah so. 358 00:51:30.630 --> 00:51:30.930 So. 359 00:51:32.250 --> 00:51:35.580 Andy Whiteside: I said the word platform intentionally and you expanded upon it. 360 00:51:37.110 --> 00:51:45.030 Andy Whiteside: You know you got it you got to have a platform or two that you that are your bread and butter and then things you add to it can work with that platform. 361 00:51:48.810 --> 00:51:52.770 Andy Whiteside: Having having one place to you know one place to go get the things you need. 362 00:51:54.300 --> 00:52:02.850 Andy Whiteside: That you can have the right customer service and then add you know additional things to that, but having that one, you know that one reliable place. 363 00:52:03.570 --> 00:52:11.940 Jirah Cox: You are calling, with a question about one part of that stack but the rest i'm talking to you understand everything else that i'm using there right, and you know just. 364 00:52:12.660 --> 00:52:22.530 Jirah Cox: You know piling a bunch of products on top of each other and hoping it all works together, and you are kind of in maybe in partnership with integrity you become the integrator no no they're already integrated right yeah. 365 00:52:24.120 --> 00:52:28.080 Andy Whiteside: Well, I think that has a lot to do with i'm listening to the outliers book from. 366 00:52:30.120 --> 00:52:31.290 Andy Whiteside: What let's the outliers book. 367 00:52:32.760 --> 00:52:34.020 Jirah Cox: that's quite all right. 368 00:52:34.380 --> 00:52:47.100 Andy Whiteside: yeah Malcolm gladwell and he talks about you know, sometimes it's just having the right tools and skills at the right time, you know new tactics coming of age in this cloud platform world. 369 00:52:48.210 --> 00:52:51.210 Andy Whiteside: prevents them from having to bolt a bunch of ugly stuff together. 370 00:52:54.270 --> 00:53:14.760 Jirah Cox: I think it's that I think I mean honestly I my Hats off to our honestly, you know our data engineers back in the day right, like you, tax day one saying what can we do with software defined storage, that we can snapshot replicate recover firm roll back to offer immutability on. 371 00:53:16.080 --> 00:53:17.760 Jirah Cox: The data. 372 00:53:20.190 --> 00:53:24.930 Jirah Cox: sounds trite rarely come from a reformed former storage or a seller. 373 00:53:26.130 --> 00:53:35.070 Jirah Cox: The data is kind of those important thing right it's like why we're all here it's why the applications exist, like yeah virtualization is great recovering that was great you couldn't do one part without the others. 374 00:53:35.550 --> 00:53:43.110 Jirah Cox: But the other day without data integrity with that data agility and the ability to do fun things with the data we wouldn't have. 375 00:53:43.470 --> 00:53:50.730 Jirah Cox: We wouldn't be a suitable platform for backups we wouldn't be able we shouldn't be trusted with your first instance of the data in the application itself. 376 00:53:51.060 --> 00:53:59.460 Jirah Cox: let alone the backups right we wouldn't be able to do database automation like we came with era, without a crazy crazy smart data platform below all of it. 377 00:54:02.280 --> 00:54:14.220 Andy Whiteside: it's the it's the last piece is the engine and everything else can be bolted around a really fast strong and reliable engine, you can you can do a whole lot with that yes. 378 00:54:16.110 --> 00:54:19.590 Andy Whiteside: Well, gentlemen it's 506 on valentine's day i'm already in trouble. 379 00:54:22.020 --> 00:54:26.820 Andy Whiteside: If you noticed, I was doing a lot of texting during some of this I gotta go have a good night. 380 00:54:27.510 --> 00:54:28.080 Harvey Green: yeah sorry. 381 00:54:28.350 --> 00:54:31.680 Jirah Cox: y'all y'all are gonna be my excuse for tonight too Nice.