We're reselling it and also assisting with installations. It's become more popular in the last few years. Because even though Serbia is relatively small, it has suffered from hacker attacks. We thought we weren't such an important country. So companies are looking for security solutions. And after the basic ones like firewalls and endpoint protection, they're now looking for more. 

For example, robust solutions that bring additional security. And Skybox Security is one of them. It's aimed at larger customers with more assets, like one thousand desktops, servers, and a larger network infrastructure. So, it's a good tool for them to accomplish several things. 

Skybox consists of four modules. One is called Firewall Assurance. The other one is Network Assurance. Then there's Change Management, and the last one is Vulnerability Management. 

So if the company has several firewalls, and probably or potentially firewalls from different producers or manufacturers, they can check all those firewalls together. So at the same time, for several things, like if the policies/rules are made properly and if there are some shadow rules, For example, if there are some rules that have not been used for a long time, Then it can also look for the compliance of the rules or of the configuration of the firewalls in the sense of compliance to some of the standards—security standards, and so on. 

So the customers can manage and check the configuration on several firewalls, especially when there are more than 20 to 30 firewalls, to check if everything is okay with the security of those with the configuration. And the security of those firewalls.

The primary use cases are to check role compliance and OS vulnerabilities.

In my company, we use Skybox Security Suite as a system for ticketing and compliance.

Our company installs and manages the solution for our clients and we have two primary use cases. 

The most common use case is monitoring the security compliance of firewalls. Every company has a firewall policy that includes rules, what traffic is allowed, which ports are open and more. The solution analyzes each firewall and reports if compliance is not achieved. 

Another use case is importing network devices. The solution builds a map to analyze an entire network including compliance of routers and switches that sit behind the firewall. For example, a banking customer might have network zones such as office, core systems, and ATM cashpoints. Between those, the bank has various policies about what traffic can be open. The solution monitors compliance of the network's configuration against policies. Most UK banks are using the solution for this purpose because it is a unique feature. 

A third use case is change management in relation to firewalls. Companies that monitor their firewalls and network zones's compliance often have change orders. If a user requests a change today but it isn't implemented for a week, some solutions will only pick up a non-compliance issue at the actual time of implementation. This solution includes a change manager module that reviews changes before they are implemented, catches non-compliance issues, and stops implementation until they are corrected. It handles all network assurance including in the cloud. 

The final use case is vulnerability management. The solution is unlike Qualys which scans while it detects vulnerabilities, but it instead imports vulnerabilities and patch statuses from various vendors. This is a very useful tool for companies who may have different vulnerability scanners and patch management solutions because the solution imports everything into one consistent system where it runs vulnerabilities. The solution looks at which systems are most risky to fix those vulnerabilities first. Because of its unique network model, the solution understands possible flows of data in the network and analyzes attack vulnerabilities. 

We primarily use it for vulnerability path detection and compliance with policies we define.

Our company uses the solution to provide firewall and vulnerability management for customers. We work with our customer's IT and cybersecurity departments to determine the use case such as viral assurance, network assurance, and change management. We have implemented the solution for 60 customers. 

We provide firewall management for customers who can afford to purchase the Skybox firewall model. 

Most of our use cases are implementing Skybox Control as a firewall tool. We provide customers with more focus so they can understand attack vectors and whether they come from different parts of a network or a partner workforce. The vulnerability control determines how we operate with an attack vector. For example, we might close ports, close some vectors, or patch software. 

I mainly use Skybox to harden firewall rules and for rule usage analysis and compliances. We also use it for configuration compliance for firewalls, most of the Cisco switches and routers, and enterprise firewall vendors.

It's for integrating with firewall logs, and we are looking for automation where we can actually select all of the network architecture. Then, we can understand the rules that are available. We can look at the complexity as to whether the rules are compliant as per the standards or not. It's depends on the compliant order.

We use this solution for data encryption.

We provide and deploy this solution for our customers and show them how to extract the reports. Our customers are really happy.

If they run into any issues, we resolve their queries.

Our clients are using it from the firewall assurance perspective. They want to do an audit of their firewalls. So, the use cases are related to policy audit, such as which shadow rules they have and which rules are not getting utilized. 

We are recommending the latest version to our clients because sometimes, a lot of integrations are required with respect to different firewalls and virtual devices. If we are using an old version, some of the things are not getting integrated. That's why we are going with the latest or the latest minus one version.

To my knowledge, most of the deployments that we have done are on-prem.

We primarily use the solution for our management and optimization.

We have been reselling Skybox for probably about five years now, so I'm pretty familiar with it. I've done numerous POCs and I've had hands-on with it quite a bit.

Because I get to work with a bunch of different customers, I get to see just about every use case for Skybox. The first one, which is pretty simple, is auditing firewall rule sets; taking a look at all the configurations that are on the firewalls and ensuring that they're locked down. What we run into a lot of times are firewalls that are set up with excessive permissions, meaning they allow a lot more traffic than they should. Skybox is essential to tearing that down.

Network visibility is another big use case, learning where all the assets are located on the network and how they can talk to each other. 

The last one that I deal with quite a bit is the vulnerability/exposure-monitoring piece. Looking at those vulnerabilities that are on the network, providing the context of network-based mitigation, and then reprioritizing or recasting those vulnerabilities.

Skybox Security Suite is used for security assessments. They have a central part of the security solution that aggregates assets and layers. It's an all-around solution for the security posture.

We primarily used the solution for model sites, on the configuration side of things. We also used it to review certain port services, etc.

We use the product for network visibility and firewall and vulnerability management.

I primarily use the solution for my firewall. It offers a firewall compliance test and can check and verify firewall configurations and firewall changes on a daily basis. They also send you information on which are activated and which should be deactivated.

Primary use case for us is configuration management and configuration compliance.

The primary use case is security and network for security.

Auditing firewall changes on a weekly basis. We use the Network and the Firewall modules. Firewall as I said, and we use the Network and Firewall for PCI compliance reporting.

We use the firewall assurance and the network assurance when we use change manager to check any changes in our firewall. We also use FortiGate's firewall for all our company. For six months, until 2020, we used the vulnerability control module to analyze our infrastructure.

For one of my customers, we used firewall assurance, network assurance and change manager - three modules. We optimized the firewall appliance and rules for one of the Ukrainian banks.

Skybox Security Suite is a major security services provider that offers penetration testing and network standard services for some of our customers. We were able to use it and support their tactics. It helps us better understand complicated situations.

We use it to verify firewall compliance with NIST best practices for access and that our firewalls are configured correctly. We're also getting ready to roll out their Vulnerability Management package.

We mostly use Firewall Assurance and we're getting ready to start using Vulnerability Control.

We use it for change management control and firewall policy management.This helps is keeping the compliance is Check

The use case is firewall rule lifecycle management.

The primary use of this solution is as a firewall and for cybersecurity.

We are a solution provider and this is one of the security solutions that we implement for our customers.

Aside from Firewall Assurance, we use Vulnerability Control and Change Manager to prioritize and focus on key risks.

In my personal experience, I use a Skybox to do some proof of concept for clients. We show characteristics about how the client can connect their firewalls and network.

Within our company, three employees use this solution to run tests.

We use it for Vulnerability Management.

• Potential attack vector discovery
• Network troubleshooting
• Security check
• Compliance

Aside from Firewall Assurance, we use Network Assurance for network visualisation and troubleshooting. Currently, we are not using the Change Manager Module.

We are a system integrator and this is one of the products that we implement for our clients. This is one of the vendors that we focus on, from a security standpoint.

Skybox has an amazing portfolio that makes up the security solution. You can onboard your network devices with the network assurance module. This includes layer three, layer two switches, load balancers, and so on. This partially builds the network model for the infrastructure and the entire security platform is built off of that.

Our customers use it to control their network environment, firewall, and vulnerability equipment.

Our company's main use case for Skybox Security Suite is typically for user architects. Since our company primarily serves enterprise clients, Skybox is often used as a cost-effective solution.