City of San Bernadino – Solution
Summary
2024 Budget Spend
Cody Reagan
Regional Account Executive
Project Goals
• Streamline security process with single platform approach (Vision One) • Prevent exposure to attack
• Add layers of redundancy for wider visibility of threats • Shift process from reactive to proactive
• Understand risks in a preventative way
• Continue to integrate tools into Vision One Platform
3 | ©2023 Trend Micro Inc.
Vision One credits can be applied to any expansion of
services or growth of current environment
Currently they are being used to add XDR and ASRM to
all endpoints
Budget Summary
4 | ©2023 Trend Micro Inc.
120 licenses for servers
1,050 licenses for user and
city devices
5 | ©2023 Trend Micro Inc.
Vision One - Endpoint Security (Pro)
Endpoint Security • Purpose-built security for endpoint, server, and cloud workloads
• Single console for visibility and
management; protection and EDR
• Connected IT/SecOps workflow
• Part of Vision One platform natively
Public/Private
Cloud
Laptop Virtual
Server
ServerDesktop
Value Toward Goals
• Replacing Apex One in server environment
(not designed for servers in mind)
• Strengthening Vision One with robust server
data and acting as a backup to Tipping Point
internally
6 | ©2023 Trend Micro Inc.
Vision One - Endpoint Security (Core)
Endpoint Security
Public/Private
Cloud
Laptop Virtual
Server
ServerDesktop
Value Toward Goals
• Continued push into Vision One in all endpoints
• Simplify visibility with native connection into
platform
• Will replace the on-premise Apex which was a
target during attack
7 | ©2023 Trend Micro Inc.
Tipping Point – Threat Protection System (IPS)
Pre-emptive threat prevention TippingPoint TPS, deployed inline, inspects and blocks all directions of traffic (inbound, outbound, and lateral) in real time, protecting your environment against known, unknown, and undisclosed vulnerabilities.
Value Toward Goals
• Adds layer of protection that is physical and
in your environment (sits behind firewall)
• Feeds essential data to Vision One when
anything gets past edge security
• Blocks malicious behaviors automatically
• Virtual Patching to reduce overall risk
exposure
8 | ©2023 Trend Micro Inc.
Service One Complete
Value Toward Goals
• Essential in the mitigation the recent attack
• Incident response team was involved
within hours
• Round the clock monitoring at a fraction of
the price of 24/7 staff or 3rd party SOC
• Drives involvement of the city and Trend to
be aware of all risks, alerts, and attacks
together
• Frees up time for proactive risk assessment
and less time looking at alerts
• Proactive Alerts and Threat Hunting
• Detect and Respond Faster
• Extend Your Team
• Maximize Effectiveness & Skills
• 24/7/365 global support
• Assigned Service Manager and priority case
handling
• Managed XDR using MITRE ATT&CK framework and
proprietary threat hunting tools
• Product and threat training for your team
• Regular sync meetings and health checks
• 40 hours of IR Services (used in October to stop an
active threat)
9 | ©2023 Trend Micro Inc.
Vision One – Network Monitoring
• All network connected assets continuously tracked
• Unsanctioned assets identified
• Endpoint protection methodically and holistically deployed • Option to add sandboxing
• Assets not fit for agent protection defended at the network layer • Provide actionable data to ASRM and XDR efforts in Vision One Value Toward Goals
• Sees all network traffic and not just what has a Trend agent on • Used for deep understanding of environment and forensics (similar to how our IR team does research with DDI)
• Strengthen view of the attack surface and risks associated • Deep analysis of traffic and behaviors
• Virtual sensors highly adjustable and configurable to see anything missing or when the are infrastructure changes