Customer Stories: Kubernetes network security in Financial Services with Pervez Sikora, CCO

Imagine having the ability to identify software supply chain threats and assign a score to determine their severity. Now, the question arises: what do we do with these invaluable results?

Join us as we delve into the practical applications of image scan results, empowering you to add an extra layer of protection during the critical deploy time in your application deployment lifecycles.

Key Webinar Highlights:

• Leveraging native Admissions Controller: Gain a comprehensive understanding of the admissions controller and its pivotal role in bolstering security. Discover how it acts as a gatekeeper, ensuring only secure and trusted images enter your deployment pipeline.
• Configuring Admissions Controller to Fit Your Needs: Learn the best practices and techniques for configuring admissions controllers based on your organizational requirements. Tailor your settings to achieve the perfect balance between security and operational efficiency.
• Preventing Deployment of Vulnerable Images: Discover the effective strategies and measures to prevent the deployment of vulnerable images. Safeguard your applications from potential threats by leveraging the insights derived from image scan results.

Register now to secure your spot and equip yourself with the knowledge to protect your environments from potential threats. 

Picture this: your application in a Kubernetes environment is under constant threat from external sources launching devastating DDoS attacks. The moment a service is exposed to the Internet, your vulnerabilities become prime targets. But that’s not all. What if attackers breach your Kubernetes cluster, aiming to infect multiple workloads with malware, escalating the impact of their malicious intent?

It’s time to take control and fortify your defenses!

Join us as we guide you through a step-by-step process to combat DDoS attacks head-on. 

Key Webinar Highlights:

• Detect DDoS attacks in Kubernetes with the cutting-edge capabilities of Calico, the trusted guardian of your cluster’s security.
• Deploy the acclaimed recommendations from CISA (Cybersecurity and Infrastructure Security Agency) when your Kubernetes infrastructure is under the onslaught of DDoS attacks.
• Respond to DDoS attacks strategically with proven risk mitigation strategies, empowering you to regain control and safeguard your applications.

Register now to secure your spot in this must-attend event and equip yourself with the knowledge and tools to defend your applications against the ever-present threat of DDoS attacks.

Join us to learn how you can effectively secure your Kubernetes workloads using DNS policies. By default, Kubernetes allows unrestricted communication between workloads and external resources within a cluster. However, as IP addresses change and application developers and DevOps teams strive to connect and safeguard their workloads, the need for application-level security arises.

Unfortunately, Kubernetes lacks native support for defining security policies based on DNS names to protect this crucial communication. But fear not! We have the solution.

In this webinar, we will guide you through a step-by-step process to implement DNS policies, allowing you to manage the egress access of your Kubernetes workloads to external resources. Whether you need to connect with SaaS services or legacy workloads outside the cluster, DNS policies provide an effective method to enhance security.

Key Highlights:

• Analyze DNS information for better troubleshooting understanding 
• Implement DNS policies seamlessly into your Kubernetes environment
• Validate the effectiveness of your DNS policy for robust protection

Don’t miss this opportunity to master the art of securing your Kubernetes workloads. Register now and unlock the potential of DNS policies in safeguarding your applications.

In Kubernetes clusters, the Domain Name System (DNS) plays a crucial role in enabling service discovery for pods to locate and communicate with other services within the cluster. DNS infrastructure misconfigurations, failures or performance degradation can lead to application latency, transaction timeouts, or poor end-user experience. As these issues are sporadic, making it difficult to diagnose and resolve, resulting in prolonged downtime and frustration for application and DevOps teams.

In this webinar, we will explore how you can quickly troubleshoot the following common DNS scenarios:

1. DNS traffic deny
2. DNS “SERVFAIL” response code errors
3. DNS “NXDOMAIN” response code errors
4. DNS “NOERROR” with missing records
5. “core-dns” load-balancing issues

Most organizations that move to microservices and Kubernetes based applications still operate in a hybrid environment where legacy applications still reside on-prem or in cloud. These applications rely on perimeter-based NGFW such as Fortinet’s FortiGate with appropriate rules to govern traffic flows. Calico can integrate Kubernetes environments with these firewalls to enable similar workflows and security zones so that operators can use the firewalls in a Kubernetes environment. In this webinar, we will discuss the following:

• How to map firewall rules to Calico security policies for Kubernetes 
• Use firewalls to control egress access from Kubernetes pods without constantly updating IP addresses
• Eliminate the need to open up large CIDR ranges to allow traffic to and from Kubernetes clusters
• Working demo of the Fortinet-Calico integration

As more organizations adopt Kubernetes for their production workloads, ensuring the security and privacy of data in transit has become increasingly critical. Encrypting traffic within a Kubernetes cluster is one of the most effective components in a multi-layered defence when protecting sensitive data from interception and unauthorized access. In this webinar, we will explore why encrypting traffic in Kubernetes is important and how it addresses compliance needs with:

1. Performance with minimal overhead
2. Simpler configuration
3. Scale with lightweight design and efficient use of system resources
4. Robust security