So L U T Io N B R

SOLUTION BRIEF SECURITY AT THE SPEEDOFDEVOPS created. WithVMsbornsecured, you canachieve thefollowing: award-winning endpoint security into BOSH-built VM instances when they are Bitdefender’s incorporate automatically can PCF,you for Tile BEST the With infrastructure of efficiency and provisioning andapplication delivery. speed the maintaining while compliance enterprise-grade solutionthathelpsyou prevent breaches andensure Bitdefender The WAYTHE BETTER instances thathostyour applications,you may bedoing oneofthefollowing: (VM) machine safeguard?secureyouvirtual a Assuming as security endpoint regulationsstipulating other and GDPR, (GLBA), Act HIPAA,Gramm-Leach-Bliley DSS, PCI with complies runorganization your ensure that you do How workloads cloud? that the in protects customer the and hypervisor” to concrete “from everything secures provider cloud the which in model, responsibility shared the of part your fulfill you do How cyberattacks? against applications those protect you do how But time-to-value. accelerating and efficiency improvingoperational choice, your of infrastructure Pivotal SPEED OR SECURITY? Bitdefender • • • • • Bolting on commercial endpoint security after deployment. This approach presents two problems. First, problems. two presents approach This deployment. after security endpoint commercial on Bolting efficiency the preserves approach This deployments. BOSH your to (AV) antivirus open-source Adding the time and cost of application delivery increase.the timeandcostofapplicationdelivery Consequently,VMs. of thousands into agent endpoint the of deployment manual involvemay that process two-step a for automation all-in-one PCF’s sacrifice do security,you enterprise-grade getting be may you though even Second, orchestration). VM of time the at provisioned be must security (i.e., production into goes VM a once allowed are changes no where paradigm infrastructure immutable the with fit not does it provide thecentralized visibilityandreporting capabilitiesrequired toprove compliance lacks manyofthecutting-edgesecuritytechnologiesmoderncommercial solutionsanddoesnotreadily AV Open-source auditability. complicates and protection limited provides it but standards), regulatory by and agilityofPCF(even thoughadditionalscriptingmay beneededtoenableautomaticupdating required ® temie opine ih euaoy tnad clig o an for calling standards regulatory with compliance Streamline cyberattacks advanced from VMs cloud and datacenter Protect PCFby of benefits agility and efficiency operational the Maximize antimalware solutionby always creating VMswithsecuritybuilt-in. the AV Comparatives a Platforms, Forrester Protection Cloud-Workload Gartner of a Bitdefender, Vendor Representative from security next-generation layered with and applysecuritypoliciesafterthefact requiredeliminating thetimeandeffort tomanuallydeploy theagent CloudFoundry (PCF) letsyou rapidlycreate andautomaticallydeploy cloud-native applicationsonthe ® ® ® Wave Leader in Endpoint Security Suites and the winner of winner the and Suites Security Endpoint in WaveLeader npit euiy ol (ET Tl fr C i te first the is PCF for Tile (BEST) Tools Security Endpoint EndpointSecurityTools forPivotal ® OutstandingSecurityProduct Award ® CloudFoundry positives. detection andminimizes false effectiveness inmalware This ensures Bitdefender endpoints globally. hundreds ofmillions on trillionsofsamplesfrom They are continuouslytrained dynamic features. models use40,000staticand Bitdefender machinelearning

SOLUTION BRIEF SECURITY AT THE SPEED OF DEVOPS

HOW IT WORKS

You can deploy Bitdefender Endpoint Security Tools (BEST) for PCF by following the BOSH-orchestrated process summarized in the diagram below. BEST works in tandem with the unified GravityZone Management Console, which provides BEST with licenses, security policies, updates, and upgrades while ingesting security events it reports. The GravityZone Console is deployed separately from BEST - either on premises by the customer or in the cloud by Bitdefender.

BITDEFENDERBITDEFENDER ENDPOINT ENDPOINT SECURITYSECURITY TOOLS TOOLS (BEST) (BEST) FOR FORPIVOTAL PIVOTAL CLOUDCLOUD FOUNDRY FOUNDRY

Pivotal Network (PivNet) Bitdefender GravityZone Console (SaaS or On-Premises) 1

Release Bitdefender Endpoint Apps Apps Security Tools (BEST) Tile App. Runtime Apps Apps 6 7 Release Environment Apps Apps 2 Release PCF Ops Manager 3 5 VM VM VM VM BOSH Stemcell 4 Infrastructure Deployment

1 PCF Operator downloads BEST Tile 3 Operator configures BEST by specifying URLs for 6 bosh –d deploy manifest.yml installs BEST from Pivotal Network (PivNet) OS-appropriate (Windows or Linux) BEST into new or active deployment packages created in GravityZone Console 2 Operator imports BEST Tile into 4 Operator specifies installation targets by 7 BEST receives security policies from and reports PCF Ops Manager’s Installation Stemcell OS, deployment, job/release name, security events to GravityZone. The runtime Dashboard etc., and applies configuration changes environment is now protected 5 Operator adds BEST package to BOSH deployment manifest

SOLUTION FEATURES: BITDEFENDER FOR PIVOTAL CLOUD FOUNDRY

Management

Deployment Automation Single-Console Infrastructure-Management SIEM Connectivity Administration Tool Integration Ensures BOSH Allows automatic automatically deploys Allows single-pane- Enables automatic submission of security BEST at the time of VM of-glass security application of security events for analysis to instantiation management, ubiquitous policies at scale, and Splunk and other SIEM visibility and consistent security license recovery platforms (via Syslog) policy enforcement from decommissioned across heterogeneous VMs in VMware® vSphere, datacenter and cloud AWS® EC2 and Microsoft® infrastructure Azure environments SOLUTION BRIEF SECURITY AT THE SPEED OF DEVOPS

Security

Layered next-generation endpoint security delivering, among others, the following advanced capabilities*:

Application Control Provides both whitelisting (“default deny”) and blacklisting capabilities to restrict the range of applications allowed to run in a VM.

Integrated Patch Management Add-On Automatically discovers and characterizes vulnerabilities and the widest range of patches for OSs, applications and golden images.

Dynamic Machine Learning (Local and Cloud-Based) Leverages proprietary models trained in URL filtering and file analysis on 500 million endpoint- sensors and trillions of samples to maximize efficacy and minimize false positives.

HyperDetect Tunable Machine Learning Allows administrators to adjust aggressiveness of threat-detection to suit the context and risk profile of their organization and detect high-probability, high-impact attacks while minimizing false positives on lower-risk threats.

Sandbox Analyzer Automatically submits suspicious files from VMs to a network sandbox based in the cloud or on premises for detonation and behavioral analysis.

Process Inspector Continuously monitors and scores running processes and system events and tags suspicious activities to provide proactive, dynamic detection and remediation of unknown threats.

Anti-Exploit Detects exploitation methods and protects the memory space of browsers, document viewers, media players and office applications.

* - Some of these features may not be available for Linux. Please consult your Bitdefender representative or inquire online at https://www. bitdefender.com/business/inquire. SOLUTION BRIEF SECURITY AT THE SPEED OF DEVOPS

WHY BITDEFENDER?

Bitdefender is a global cybersecurity leader protecting over 500 million systems in more than 150 countries. Since 2001, Bitdefender innovation has consistently delivered award-winning security products and threat intelligence for the smart connected home, mobile users, modern businesses and their networks, devices, data centers and cloud infrastructure. Today, Bitdefender is also the provider of choice, embedded in over 38% of the world’s security solutions. Recognized by industry, respected by vendors and evangelized by customers, Bitdefender is the cybersecurity company you can trust and rely on.

ENGAGE US

Get the BEST Tile for PCF : https://network.pivotal.io/products/bitdefender-endpoint Call: (US) 800-388-8062 Request trial: bitdefender.com/business/free-trials/2596 Learn more: bitdefender.com/sve

www.bitdefender.com