Bezpečnosť bez kompromisov

Transcription

1 Bezpečnosť bez kompromisov Zsolt Géczi, major account manager, Slovakia, CEH Nov 19, 2015, ATOS Technologické Fórum 2015, SK Copyright Fortinet Inc. All rights reserved.

2 Security is Now a Board Room Discussion 63% of Enterprise IT decision makers report a very high level of Board Level pressure regarding security Security is No Longer a Nice to Have Source: Lightspeed GMI Survey

3 What We Used To Think 3

4 How We Think Today 4

5 Setting the Stage Anti-spam Web Filtering Intrusion Prevention Antivirus App Control/ IP Reputation 5

6 Trying to Break the Kill Chain Step 1 Spam Anti-spam Web Filtering Spam Intrusion Prevention Antivirus App Control/ IP Reputation 6

7 Trying to Break the Kill Chain Step 2 Spam Link Anti-spam Web Filtering Spam Link Intrusion Prevention Web Site Antivirus App Control/ IP Reputation 7

8 Trying to Break the Kill Chain Step 3 Spam Link Anti-spam Web Filtering Spam Link Exploit Intrusion Prevention Exploit Web Site Antivirus App Control/ IP Reputation 8

9 Trying to Break the Kill Chain Step 4 Spam Link Anti-spam Web Filtering Spam Link Exploit Intrusion Prevention Exploit Web Site Antivirus App Control/ IP Reputation 9

10 Trying to Break the Kill Chain Step 5 Spam Link Anti-spam Web Filtering Spam Link Exploit Intrusion Prevention Exploit Web Site Malware Antivirus Malware App Control/ IP Reputation 10

11 Trying to Break the Kill Chain Step 6 Spam Link Anti-spam Web Filtering Spam Link Exploit Intrusion Prevention Exploit Web Site Malware Bot Commands & Stolen Data Antivirus App Control/ IP Reputation Malware Bot Commands & Stolen Data Command & Control Center 11

12 Trying to Break the Kill Chain Step 7: Adding Sandbox Sandbox Spam Link Anti-spam Web Filtering Spam Link Exploit Intrusion Prevention Exploit Web Site Malware Bot Commands & Stolen Data Antivirus App Control/ IP Reputation Malware Bot Commands & Stolen Data Command & Control Center 12

13 The Human Factor - Laziness Old Habits Die Hard 13

14 Operating Systems and Software Require Constant Updates 24% Installed PC Operating Systems* 3% 9% 12% 52% Windows 8/8.1 Windows 7 Windows XP Windows Vista *Net Applications September

15 Breaches Continue at an Alarming Rate Mozilla Korean Credit Bureau Sony 47,740 employees exposed Twitter Target 70K customers at risk European Central Bank Home Depot 56K customers at risk Dominos Pizza (France) Gmail Apple Adobe 152M customer records breached Vodafone AOL 2,400,000 UPS Neiman Marcus 145M customers at risk Lexis Nexus Snapchat Analysts says all organizations should assume they are in a state of continuous compromise Source: DataBreaches.net 15

16 Seems like sci-fi?.sk is not an expection! 16

17 Chcete viac?!?... Compromised Jamie Oliver website serves up malware for third time [scmagazine.com]...hacked Adult Friend Finder database offered for $ ,9 Mil user details breached [ CryptoWall v3 (Ransomware) total $325M, < $1000 USD per victim CTA >Rent-A-Rentner portal in Switzerland, they paid 420USD via Bitcoin >hotel in Austria, didn t pay, recovery from back-ups DDoS attack> Protonmail, a secure provider/hoster in Geneva paid the ransome but the attack did not stop 17

18 Follow The Acronym Trail 18

19 A Global Leader in Network Security Global presence and customer base Customers: 225,000+ Units shipped: 1.9+ Million Offices: 30+ worldwide TAC EMEA Support Center in Prague Revenue $770 M Platform Advantage built on key innovations FortiGuard: industry-leading threat research FortiOS: tightly integrated network + security OS $13M FortiASIC: custom ASIC-based architecture Market-leading technology: 210+ patents, 165 pending Founded 2000, 1 st product shipped 2002, IPO 2009 HQ: Sunnyvale, California Employees: worldwide Consistent growth, gaining market share Strong positive cash flow, profitable 19

20 Customer Challenge Complexity Too Many Point Solutions Over time, point solutions have been deployed in response to evolving threats Platforms vary across small and large deployments Numerous management consoles Inconsistent policy and networking function Internet WAN Acceleration Firewall SaaS Gateway Managemen t VPN Web Filtering Applicatio n Control Varying upgrade cycles Slow and porous response to threats Advanced Threat Protection Antiviru s WiFi Controller IPS Poor user experience, complaints 20

21 Fortinet Advantage - Simplicity FortiOS Enables Networking & Security Convergence Single management console Management Common platform across all size deployments Deploy what you need, where you need it Firewall VPN Application Control IPS Web Filtering Anti-malware WAN Acceleration Data Leakage Protection WiFi Controller Advanced Threat Protection SaaS Gateway Consistent, consolidated policy Consolidated infrastructure Faster, more robust response to threats Lower admin burden, easier to maintain infrastructure, fewer user complaints Decreased risk exposure, eliminate gaps in protection 21

22 FW Baseline IPS Fortinet Advantage Performance FortiASICs Dramatically Boost Speed 10X data center firewall performance 5X NGFW performance Security that keeps up with growing bandwidth requirements FW VPN 40Gbps 25Gbps IPS VPN 10Gbps 9Gbps FW VPN IPS 6Gbps 2Gbps 3.5Gbps NP 6 CP 8 22

23 FortiGuard Security Advantage Anti - Spam FortiGuard Services Web Filtering FDN Services IPS Antivirus FortiGuard Labs Consolidated Intelligence Fortinet Devices App Control IP Reputation 23

24 Cyber Threat Alliance 24

25 Virus Bulletin RAP test 25

26 Firewall FortiGate 800C NGFW FortiGate 3600C 26

27 WAF FortiWeb 1000D BDS FortiSandbox 3000D 27

28 NextGen IPS FortiGate 1500D 28

29 NSS Labs CAWS [Cyber Advanced Warning System] 29

30 30

31 Niečo ďalšie z portfólia: 31

32 DON T GO UNPROTECTED!