Oracle is expanding the built-in security services and capabilities of Oracle Cloud Infrastructure (OCI) to help customers protect their cloud applications and data against emerging threats. Five new capabilities round out OCI’s already comprehensive security offering, including a new built-in and cloud-native firewall service and enhancements to Oracle Cloud Guard and Oracle Security Zones. These innovations will further help ensure that organizations can easily secure their cloud deployments and applications with simple, prescriptive, and integrated services that in most cases, do not require additional investment.
As organizations across industries, from financial services to retail, move mission-critical workloads to the cloud, they must defend against security vulnerabilities from inside and outside the firewall that are resulting in more breaches and exposed data. For example, highlighting threats that originate from inside a company, Gartner® estimates that “through 2023, at least 99 percent of cloud security failures will be the customer’s fault.”[1] To overcome this challenge, cloud users and administrators are now expected to know how cloud security services work, configure them correctly, and maintain their cloud deployments.
“Organizations are just as confident critical applications and data can be safely hosted in a cloud environment as they are on-premises. So, the question becomes one of best fit; OCI’s cloud infrastructure design and new security services are very purposeful and prescriptive based on the hindsight of other cloud options in the market and complexities and lack of automation other providers’ customers encounter. Oracle has now made cloud security easy to consume and affordable for its customers,” said Jay Bretzmann, Security Program director, IDC.
New OCI Security Innovations
Oracle has made security foundational and built-in for OCI customers to help them address regulatory compliance requirements, stay on top of security threats and concerns, and prevent security-related outages. Oracle is expanding its cloud security capabilities to provide multiple layers of defense to help identify and defeat emerging threats and security violations quickly. New capabilities include:
- OCI Network Firewall: Provides centralized protection against cyberattacks across OCI with a new cloud-native, managed firewall service that is powered by industry-leading Palo Alto Networks VM-Series Next-Generation Firewall technology (NGFW). The firewall provides security controls, threat prevention, and mitigation features, including custom URL filtering, intrusion prevention and detection (IDS/IPS), and TLS inspection for inbound, outbound, and lateral traffic to customer workloads hosted on OCI. With OCI Network Firewall, customers can quickly turn on and secure their applications and cloud environment with firewall features and scale their security across their cloud deployment. OCI Network Firewall is available as a turn-key offering to enable customers to immediately take advantage of the firewall without the need to configure and manage additional security infrastructure.
- Oracle Threat Intelligence Service: Aggregates threat intelligence data across different sources and manages this data to provide actionable guidance for threat detection and prevention in Oracle Cloud Guard and other OCI services. This service provides insights from Oracle’s own unique telemetry, open-source feeds such as abuse.ch and Tor exit relays, and third-party partners, such as CrowdStrike.
- Oracle Cloud Guard Threat Detector: Identifies misconfigured resources, insecure activity across customer environments, and potential malicious threat activities. It provides security administrators with the visibility to triage and resolve cloud security issues. Security inconsistencies can be remediated automatically with out-of-the-box Cloud Guard security recipes to effectively scale the security operations center.
- Oracle Security Zones: Expands Oracle Security Zones with support for customer-defined policy sets and integrated security posture monitoring with Cloud Guard. Now customers can create custom security zone policy sets to prevent actions that could weaken a customer’s security posture. Security Zone policies can be applied to various cloud infrastructure types (e.g., network, compute, storage, database, etc.) to ensure cloud resources stay secure and prevent security misconfigurations. Users determine which policies are appropriate for their needs by defining custom security zone policy sets. OCI enforces Security Zone policies as an integrated platform feature that supports a growing number of adjacent OCI Security services. In contrast to IAM permissions, which are associated with people, Security Zone policies act as security guardrails for resources and define allowable configurations.
- Oracle Cloud Guard Fusion Applications Detector: Extends Oracle Cloud Guard beyond cloud security posture management for OCI to also monitor Oracle Fusion Cloud Applications and provide customers with a consolidated view of security policies. Available first for Oracle Fusion Cloud Human Capital Management and Oracle Fusion Cloud Enterprise Resource Planning, Oracle Cloud Guard Fusion Applications Detector provides pre-configured and customized configurations or “recipes” to monitor potential security violations in the applications. Detectors trigger alerts on sensitive configuration changes related to user privileges that impact important data access, including adding, deleting, or modifying data and function privileges for roles and users, as well as changes to sensitive objects.
“Oracle continues to pave the way in building cloud services that have natively integrated and feature rich security capabilities. By choosing to integrate the industry-leading technology in Palo Alto Networks VM-Series Next Generation Firewall, Oracle is giving its customers incredible security as a native service,” said Anand Oswal, senior vice president, Network Security, Palo Alto Networks. “Oracle customers can have the peace of mind that they have access to many of Palo Alto Networks network security tools.”
“Oracle has decades of experience guiding customers to secure their valuable data and applications in the cloud and on-premises,” said Mahesh Thiagarajan, senior vice president, Security and Developer Services, Oracle Cloud Infrastructure. “With OCI Network Firewall, powered by industry-leading Palo Alto Networks, we are bringing the ecosystem closer to the platform. These latest innovations, combined with our existing offerings, provide organizations with a comprehensive set of cloud security services that lower the barrier to secure customer cloud environments and help them more easily identify potential vulnerabilities.”
Customers Across Industries Rely on OCI Security
Ferguson Enterprises is the largest U.S distributor of plumbing supplies, PVF, waterworks and fire and fabrication products. “As we venture into the public cloud, Ferguson Enterprises is focused on cloud security,” said Karen Cake, Cloud Architect, Ferguson Enterprises. “Oracle Security Zones integrated with Oracle Cloud Guard, helps Ferguson build safe environments and maintain security with true, ‘trust and verify’ security posture management.”
Northern Illinois University is a student-centered, nationally recognized public research university, with expertise that benefits its region and spans the globe in a wide variety of fields, including the sciences, humanities, arts, business, engineering, education, health, and law. “We are looking to Oracle Cloud Guard to easily monitor and remediate security violations,” said Ruperto Herrera, director, ERP Architecture, Northern Illinois University. “Oracle Cloud Guard can enable us to centrally monitor the security posture, providing strong governance and control over what is being built within OCI by our team.”
37 comments
I would like to thank you for the efforts you’ve put in writing this site. I am hoping the same high-grade website post from you in the upcoming as well. Actually your creative writing skills has inspired me to get my own website now. Actually the blogging is spreading its wings quickly. Your write up is a good example of it.
Prodentim is the most recent dental health product. It helps to maintain healthy gums by using an ingredient that dentists at ProDentim UK developed.
An impressive share, I just given this onto a colleague who was doing slightly evaluation on this. And he in fact bought me breakfast as a result of I discovered it for him.. smile. So let me reword that: Thnx for the deal with! However yeah Thnkx for spending the time to debate this, I really feel strongly about it and love studying more on this topic. If attainable, as you become experience, would you mind updating your blog with more details? It is extremely helpful for me. Big thumb up for this weblog publish!
Dead composed subject material, thank you for information. “You can do very little with faith, but you can do nothing without it.” by Samuel Butler.
The next time I read a blog, I hope that it doesnt disappoint me as much as this one. I mean, I know it was my choice to read, but I actually thought youd have something interesting to say. All I hear is a bunch of whining about something that you could fix if you werent too busy looking for attention.
I have read several good stuff here. Certainly worth bookmarking for revisiting. I surprise how much effort you put to create such a excellent informative site.
Thank you for the sensible critique. Me and my neighbor were just preparing to do a little research about this. We got a grab a book from our local library but I think I learned more clear from this post. I’m very glad to see such magnificent info being shared freely out there.
Wow! This can be one particular of the most beneficial blogs We have ever arrive across on this subject. Actually Fantastic. I’m also a specialist in this topic so I can understand your effort.
Have you ever considered publishing an e-book or guest authoring on other blogs? I have a blog based on the same information you discuss and would love to have you share some stories/information. I know my audience would appreciate your work. If you are even remotely interested, feel free to shoot me an email.
You are a very smart person!
Precisely what I was searching for, thanks for posting.
I view something really special in this web site.
What’s Going down i’m new to this, I stumbled upon this I have found It positively helpful and it has aided me out loads. I hope to contribute & aid other customers like its helped me. Good job.
I will immediately snatch your rss feed as I can not to find your email subscription hyperlink or newsletter service. Do you’ve any? Please let me know so that I may subscribe. Thanks.
Yeah bookmaking this wasn’t a speculative conclusion outstanding post! .
What i do not understood is actually how you are not really much more well-liked than you might be now. You are very intelligent. You realize therefore significantly relating to this subject, produced me personally consider it from a lot of varied angles. Its like women and men aren’t fascinated unless it is one thing to accomplish with Lady gaga! Your own stuffs nice. Always maintain it up!
I do enjoy the manner in which you have framed this problem plus it does indeed present us a lot of fodder for consideration. However, coming from just what I have observed, I just trust when other opinions pack on that men and women stay on issue and don’t embark on a tirade regarding some other news of the day. Anyway, thank you for this outstanding piece and whilst I can not necessarily agree with this in totality, I value the standpoint.
Very interesting information!Perfect just what I was looking for! “The medium is the message.” by Marshall McLuhan.
obviously like your website but you have to test the spelling on several of your posts. A number of them are rife with spelling problems and I to find it very bothersome to tell the reality then again I will surely come again again.
Some really interesting points you have written.Helped me a lot, just what I was searching for : D.
I know this if off topic but I’m looking into starting my own blog and was curious what all is required to get set up? I’m assuming having a blog like yours would cost a pretty penny? I’m not very web savvy so I’m not 100 positive. Any suggestions or advice would be greatly appreciated. Thank you
Heya i am for the first time here. I came across this board and I find It truly useful & it helped me out much. I hope to give something back and aid others like you helped me.
It’s laborious to seek out knowledgeable folks on this topic, but you sound like you realize what you’re talking about! Thanks
Thanks for this post, I am a big fan of this web site would like to go along updated.
I really enjoy examining on this internet site, it has great blog posts.
I loved as much as you’ll obtain carried out proper here. The sketch is tasteful, your authored subject matter stylish. however, you command get got an nervousness over that you would like be turning in the following. unwell surely come further previously once more as exactly the similar nearly very regularly inside case you defend this hike.
I simply needed to appreciate you yet again. I am not sure the things I could possibly have achieved in the absence of those thoughts documented by you regarding such a concern. It seemed to be an absolute intimidating setting in my circumstances, however , witnessing your well-written fashion you handled that took me to cry over gladness. Now i am happy for this service as well as wish you really know what a great job that you are getting into instructing people today through the use of a web site. More than likely you have never got to know all of us.
I’m still learning from you, while I’m improving myself. I absolutely love reading everything that is written on your blog.Keep the stories coming. I loved it!
Great post. I am facing a couple of these problems.
Precisely what I was searching for, appreciate it for posting.
I like the valuable info you provide in your articles. I will bookmark your weblog and check again here frequently. I am quite certain I will learn many new stuff right here! Good luck for the next!
Wohh just what I was searching for, appreciate it for posting.
You have mentioned very interesting details! ps decent web site. “I just wish we knew a little less about his urethra and a little more about his arms sales to Iran.” by Andrew A. Rooney.
Well I definitely enjoyed reading it. This tip provided by you is very helpful for accurate planning.
Great work! This is the type of info that are supposed to be shared around the internet. Shame on the seek engines for now not positioning this post upper! Come on over and seek advice from my site . Thank you =)
Hello.This article was really motivating, especially since I was investigating for thoughts on this matter last Tuesday.
Awsome post and right to the point. I don’t know if this is really the best place to ask but do you folks have any thoughts on where to hire some professional writers? Thx 🙂