Symantec releases a slice of O3 cloud security
Just a third of the overall O3 package from Symantec is ready, with the rest coming at some point this year.


Symantec has made a portion of its O3 product announced last October generally available, yet two-thirds of the overall package is not ready yet.
The O3 offering, which looks to deal with identity management and data loss protection (DLP) in the cloud, consists of three separate parts.
The first is the authentication level, which is ready now, allowing customers to push their in-house identity management policies out to the cloud. It does so by pushing these policies out from Symantec datacentres to end user devices, much in the same way Silicon Valley start-up Zscaler does.
The second part of O3 is the information security layer, which uses Symantec's existing DLP and PGP encryption solutions to protect the data itself.
If you have loads of devices and datacentres, you need access control. That is something Zscaler doesn't have.
Then there is the auditing aspect to O3, which alerts companies to security events so they can move to shore up holes in their cloud infrastrucure.
Those two latter parts are currently unavailable. Symantec spokespeople told IT Pro they would be ready at some point this year, but could not confirm anything more specific.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Once all of 03 is ready, it will be competing with RSA and Zscaler's unnamed cloud identity management product, which mixes the latter's web gateway offering with the former's authentication technology.
However, Symantec's group president for enterprise products and services Francis deSouza told IT Pro at the RSA 2012 conference today that Zscaler's technology lacked things the world's number one security provider could offer, most notably encryption.
"If you have loads of devices and datacentres, you need access control. That is something Zscaler doesn't have," deSouza said.
"You need information protection, so it's not only just a single sign-on and access control but it's DLP and encryption. [Zscaler] does not do any DLP.
"But I think RSA has realised that you can't rely on being on every device, because in the future you won't be. And you can't rely on controlling the server and the perimeter... That's the right direction."
Salesforce.com tie-up
Symantec has also chosen to deeply integrate 03 with Salesforce.com, creating an application on the Force.com platform.
The application will let customers use their Salesforce.com identities as their key into cloud services with a single sign-on.
Just as the general O3 product will do, it will also hand IT departments tighter controls over how and what cloud products are used via Salesforce.com. Two-factor authentication can be built into the app as well.
The O3 Salesforce.com software will be available from mid-2012.
Salesforce.com CEO Marc Benioff was on hand during this morning's keynotes to talk about the need for better cloud security.
"When you're a cloud provider, trust is our number one value. A critical part of that trust is the security infrastructure," Benioff said.
"There is no finish line when it comes to security... Because there is no finish line, trust is ultimately the most important thing."
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
-
Bigger salaries, more burnout: Is the CISO role in crisis?
In-depth CISOs are more stressed than ever before – but why is this and what can be done?
By Kate O'Flaherty Published
-
Cheap cyber crime kits can be bought on the dark web for less than $25
News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
By Emma Woollacott Published
-
ThreatLabz Report: The state of encrypted attacks
Whitepaper What's hiding in your web traffic?
By ITPro Published
-
Capita tells pension provider to 'assume' nearly 500,000 customers' data stolen
Capita told the pension provider to “work on the assumption” that data had been stolen
By Ross Kelly Published
-
Gumtree site code made personal data of users and sellers publicly accessible
News Anyone could scan the website's HTML code to reveal personal information belonging to users of the popular second-hand classified adverts website
By Connor Jones Published
-
Pizza chain exposed 100,000 employees' Social Security numbers
News Former and current staff at California Pizza Kitchen potentially burned by hackers
By Danny Bradbury Published
-
83% of critical infrastructure companies have experienced breaches in the last three years
News Survey finds security practices are weak if not non-existent in critical firms
By Rene Millman Published
-
Identity Automation launches credential breach monitoring service
News New monitoring solution adds to the firm’s flagship RapidIdentity platform
By Praharsha Anand Published
-
Neiman Marcus data breach hits 4.6 million customers
News The breach took place last year, but details have only now come to light
By Rene Millman Published
-
Indiana notifies 750,000 after COVID-19 tracing data accessed
News The state is following up to ensure no information was transferred to bad actors
By Rene Millman Published