Despite best efforts, attackers often know more about networks they attack than the network owners. This is particularly the case for the extended network: endpoints, mobile devices, virtual desktops. Attacks are no longer a question of if but when; thus, we need a new approach to network security. This session will cover why taking a threat-centric approach to security provides the best defense.