Source: www.arubanetworks.com
Healthcare is one of the most targeted and breached industries by cybercriminals. Stolen electronic medical health records are highly lucrative, as they give a comprehensive and multi-faceted profile of an individual. Cybercriminals can from which to launch personal identity theft scams as well as phishing, and a variety of other cyberattacks to gain access to company networks.
Broad attack surface
Healthcare network infrastructures are complex. The physical facility is open to a constantly changing array of new visitors who access guest networks with personal devices or can even connect into unsecured wired ports. The network supports many different types of Internet-connected IoT devices and sensors in addition to staff computers, tablets and handhelds – both company owned and BYOD. And with the expected useful life of biomedical devices at 10+ years, IT and security teams also have to manage older, outdated connectivity and security standards. All this widens the attack surface and makes the infrastructure more difficult to secure.
Closing the gaps
Although healthcare organizations are investing in cybersecurity, recent breach statistics suggest there are opportunities for improvement to stay ahead of threats. The way we approach security requirements and compliance has to be addressed from the Edge, where new devices, users, and critical data reside.
Let’s investigate how modern security solutions from Aruba can help healthcare organizations better:
- Gain visibility into everything connected to both wired and wireless networks
- Ensure that the appropriate IT access policies are applied to users and devices
82% of healthcare organizations experienced a cyberattack on their IoT devices in the past 18 months.
HIPAA Journal, Nov 2021
On the black market, the going rate for your social security number is 10 cents. Your credit card number is worth 25 cents. But your electronic medical health record (EHR) could be worth hundreds or even thousands of dollars.
Forbes
Aruba secure solutions for healthcare
Secure Infrastructure
For over 20 years, Aruba has delivered high performancenetworks that include many built-in security features.
- The newest Wi-Fi certified protocol WPA3™ was co‑authored by Aruba experts and delivers a range of security and ease of use features.
- Secure boot delivers anti-tampering features for access points.
- Military grade encryption and VPN ensure traffic is secure.
- The Aruba Policy Enforcement Firewall (PEF) enables user/application visibility and policy enforcement based on user role, application, device and location.
Aruba ESP is the only architecture to implement an end-toend network architecture composed of WLAN, switching, SD-WAN, and AIOps – all with security built-in from the start.
Automate and Simplify Global Security Operations
Aruba Central NetConductor is the next-generation solution for increasingly complex networks, enabling organizations of all types and sizes to automatically configure LAN, WLAN, and WAN infrastructure to deliver optimal network performance while enforcing granular access control security policies that are the foundation of Zero Trust and SASE architectures. Central NetConductor comprises services delivered by Aruba Central, the platform that is the foundation of the Aruba Edge Services Platform (ESP).
Know What is on the Network
Today, many IoT devices are built on standard hardware platforms, which can make it extremely difficult to know exactly what is on your network. For example, a security camera and smart thermostat could both be built on the same Linux platform. ClearPass Device Insight uses machine learning to identify devices based on multiple attributes, traffic destination, and communication frequency. Knowing what is on the network is critical to applying the appropriate security controls necessary to secure the Edge. Central NetConductor utilizes artificial intelligence to automatically detect network performance and reliability issues while identifying opportunities for optimization based on local and peer-based best practices.
Zero Trust Access to the Network
Aruba ClearPass Policy Manager provides network access control which delivers discovery, profiling, authentication and authorization of users, and devices, including IoT, before letting them on the network or giving them access to IT resources. These pre-admission controls are critical because cybercriminals are adept at quickly advancing and moving laterally within seconds after gaining access to a network. Additionally, ClearPass now shares identity-based telemetry with Aruba EdgeConnect SD-WAN appliances to provide even more granular segmentation. For healthcare organizations, that use Aruba Central, Central NetConductor provides customers the flexibility to pick their NAC solution of choice, whether that is ClearPass, our market-leading onpremises Network Access Control (NAC) solution, or Cloud Auth, the first integrated and cloud-native NAC and identity management solution, which builds on ClearPass NAC market leadership and streamlines the protection of distributed enterprise networks by working seamlessly across wired, wireless, and WAN connections.
Precise Control and Dynamic Segmentation
ClearPass provides adaptive, granular policy-based access controls by user, device, role and location. These controls ensure that each user, device, or IoT has access only to the network, application, or IT resourses and assets they are approved for. Aruba Dynamic Segmentation leverages the Aruba secure infrastructure, PEF and ClearPass Policy Manager to deliver a network edge that securely isolates and separates user and device traffic across wired and wireless networks. If using Aruba Central NetConductor, healthcare organizations can extend the capabilities of Aruba’s market-leading Dynamic Segmentation across multiple network overlays, making it easier to adopt comprehensive Zero Trust and SASE security.
Unified Branch Security and Threat Protection
With caregivers and patients coming in and out of environments and health records being high-value to criminals, healthcare organizations are at high risk and need advanced threat detection capabilities. Aruba solutions defend against a myriad of threats, including phishing, denial of service (DoS), and increasingly widespread ransomware attacks. Supported Aruba SD-WAN gateways perform identity-based intrusion detection and prevention (IDS/ IPS), working together with Aruba Central, ClearPass Policy Manager, and the Policy Enforcement Firewall. Identitybased IDS/IPS performs signature- and pattern-based traffic inspection on both the branch office LAN (east-west) traffic as well as the SD-WAN (north-south) traffic flowing through the gateway to deliver embedded branch network security.
Security Management Dashboard
Aruba Central as well as Central NetConductor provides IT teams with network-wide visibility, multi-dimensional threat metrics, threat intelligence data, as well as correlation and incident management. Insights include threats over time, threat trends, threat metrics by category, type, and severity, and impacted users and services. Threat events are sent to SIEM systems and ClearPass for remediation
WAN, Cloud Security Orchestration, and Secure Access Service Edge (SASE)
Distributed locations require security solutions that can can be adopted across the WAN. Additionally, as healthcare organizations migrate many of their applications to the cloud, it is critical that SD-WAN and security solutions adapt, providing advantages both on the networking and the security side. The Aruba EdgeConnect solution provides best-of-breed SD-WAN capabilities combined with seamless orchestration with best-of-breed cloud security vendors. This significantly reduces the amount it takes to incorporate cloud-based security services into the existing network and security infrastructure and puts security closer to the cloudhosted infrastructure where it belongs.
With advanced access controls and interoperability with over 140 network and security solutions from multiple vendors, Aruba gives you the visibility you need and the confidence that security policies are applied dynamically. To learn more about the Aruba solution, please contact Wise IT specialists through the feedback form on the website, at +38 (044) 277-23-23, or send us an email at info@wiseit.com.ua. Wise IT is an official partner of Aruba, a Hewlett Packard Enterprise company in Ukraine!