Speaker: Christian Krakau-Louis

“That needs to stay open. Otherwise, something breaks.” Anyone securing a legacy IT environment knows the problem: rules outlive their rationale, the patch list keeps growing, and nobody knows exactly which connections an application actually needs.

More rules do little good without context. This session shifts the perspective from IP addresses and ports to applications, their dependencies and their business importance. Just because a connection exists does not mean it is necessary.

Using Akamai Guardicore Segmentation as an example, the session explores how network communication can be combined with process, application and vulnerability context. Which connections serve a genuine business need? Where does unnecessary reachability expose ...