<img src="//pixel.quantserve.com/pixel/p-_JKXxuL8SR7wu.gif?labels=_fp.event.Default" style="display: none;" border="0" height="1" width="1" alt="Quantcast">
blog-banner.jpg

Next-Gen CASB Blog

denial, anger, bargaining, depression & acceptance...

By Nat Kausik | October 20, 2016 at 2:26 PM

 

payphone.jpg

These are the five stages of grief, as laid forth by swiss psychiatrist Elizabeth Kubler-Ross, in her seminal work on human mortality.   Her theory is also valid in the business world, where technological innovations can be merciless in upending the old order. Search engines killed yellow pages. Smart phones killed pay phones. And now...

Just heard that a security and networking giant is telling customers that "agentless CASBs are technologically infeasible.  Software agents and proxy appliances are the way to go."   No surprise, considering that vendor also believes that "one hiccup and boom AWS is gone."

Mobility is a huge productivity booster, with over two billion devices on the planet.    And cloud frees up businesses from the humdrum burden of maintaining software and hardware.   Taken together, corporate data sits on third-party servers, travels third-party networks, to third-party devices.   There is simply no room for security delivered as software agents or hardware appliances.     No place to hang them.   And no enterprise wants to move to the cloud, only to end up having to secure the cloud with more software and hardware.   Agentless CASB is, in fact, the preferred solution and it is no suprise that incumbent security vendors don't like it.  

So where are the incumbents in the five stages of grief?   I believe they are in between Bargaining and Depression. Clearly, they are past Denial, Anger and Bargaining when each of them acquired an API-only CASB to "check the box."   Since API-only CASB provide monday-morning alerts on the data that leaked over the weekend, these acquisitions have done nothing to prevent the Global 2000 from continuing to adopt CASB technologies from innovative startups for real-time data protection.  Particularly, those CASBs that are Agentless, easy to deploy and do not violate Federal Wiretapping laws.    

In a mobile world, Agentless CASBs rule.   Legacy solutions with software agents and proxy appliances will go the way of payphones.