Gecontroleerde grip op uw netwerk security en netwerk beheer

Transcription

1 Gecontroleerde grip op uw netwerk security en netwerk beheer Marcel Golverdingen

2 Who is Tucana en what are our activities? Pan-European supplier with offices in Belgium, France, Germany and The Netherlands Test- and Measurement-solutions and related applications/services Quality & Performance testing, Protocol diagnostics, Security, Network Management and Monitoring Consultancy, SW development, training, outsourcing, helpdesk and maintenance Over 25 years of Experience

3 Our customers Providers Telco & IT Manufacturers Others

4 The challenges of the Datacenter: Optimal performance vs. lower costs (CAPEX & OPEX) Minimize downtime / interruptions Signaling and elimination of security threats as soon as possible Optimal visibility of the network Signaling of customers who abuse the (your) network Flexibility and scalability

5 Our Solutions: Design Driven Networking Design driven NetWork automatisation and orchestration Automate Full Lifecycle & Change Management Multi Vendor Multi technology (& domains), Traditional, virtual, SDN

6 Our Solutions: Design Driven Networking Automate Integration with OSS/BSS Systems and 3d party applications Integration with fault management systems ITL/TQM Process enforcement

7 Today s way of Networking Manual processes as deployed is not as designed

8 Design Driven Networking Build, Operate & Maintain networks as designed As deployed = as designed

9 Networking specific.. 90% of network problems can be traced to configuration errors

10 Manual! 80% of these configuration changes are still done manually

11 New approach of network design, building and operation

12 Core platform components Build as designed: Network- and service modeling IP management Smart templates Manage: Configuration management Service management Compliance management Automate: Scenarios Scheduler Vendor modules OS upgrades

13 Core platform components Integrate: Northbound interface Integrations Orchestration Support functions Job control, logging, reporting, monitoring, etc.

14 The advantages of Design Driven Networking: Design driven changes Standardisation of networks First roll out => less mistakes Instead of manual No unauthorised changes We vote design Quality and Stability => less downtime Flexible and accurate change management

15 The advantages of Design Driven Networking: Improve efficiency (less skilled people needed) Required skill level reduced Instead of manual Compliance & control Self service capabilities We vote design Automation! Resulting in significant TCO decrease (average 30-50%!)

16 The Unified Visibility Plane The base for optimal security & monitoring

17 The evolution of network security / monitoring Stage I: The Perimeter - Stop threats before entering the network - Passive Security inside

18 The evolution of network security / monitoring Stage II: Defense in Depth - Attackers are inside - Multiple defense vectors

19 The evolution of network security / monitoring Stage III: Layered Security - Plug & Play Approach - Mix of 3 Styles

20 The evolution of network security / monitoring Tools placed inline (daisy chain) Single points of failure Tools via TAP / SPAN port Likely to have oversubscription on the port and via SPAN port no priority All traffic passes all active Probability of oversubscription of the security / monitoring tools tool, needless use of resources No loadbalancing possibilities Use of tools with the same functionality is not possible No failsafe / powersave mode Can you configure what should available? happen if a specific tool malfunctions? (Pass or block traffic?)

21 The evolution of network security / monitoring Aggregation of multiple input lines Chance of packetloss when aggregating What to do when upgrading line Needless (early) replacement of (1Gb => 10Gb / 10Gb => 100Gb) security / monitoring tools, for incompatibility of the interfaces? No possibility to store the traffic No complete visibility (packetloss) or for e.g. forensics, or only on expensive needless high investments in storage storage of the tool vendor Scalability of the tools? Replacement by bigger (more expensive) tools

22 The evolution of network security / monitoring VSS Layered Security Solution - Eliminates silos providing unprecedented traffic visibility to the security infrastructure - Enables security systems chaining optimizing the whole infrastructure s performance

23 Customer Value The evolution of network security / monitoring High Performance, Comprehensive, Cost-Effective NPB Functions By-Pass Tapping Active Tool Chaining Inline Active Forwarding Mesh Stacking over LAN Virtual Access Control NPB Management Open XML API Microburst Protection* Trigger Policies Flow-aware Balancing L2-L4 Filtering Selective Aggregation PCAP Direct to Storage Control/User Plane Filtering & Balancing L5-L7 DP Filtering Inner L3/L4 Filtering & Balancing Fragment Reassembly Deduplication TCP Tunneling over WAN Protocol Stripping/ De-encapsulation Conditional Slicing Port & Time Stamping Microburst Detection Access Base Traffic Handling Advanced Traffic Manipulation FUNCTIONALITIES

24 The evolution of network security / monitoring The Network Visibility Gap: Eliminated Network Rapid growth Rapid change Monitoring Systems Increasing variety Increasing specialization Active Tool Layer SSL Appliance Secure Web Gateway Next Gen Firewall Intrusion Prevention System Passive Tool Layer Data Loss Prevention Application Performance Monitoring Network Behavior Analysis Lawful Intercept Intrusion Detection System Forensics

25 Thank you for your attention Tucana Telecom N.V./S.A. Mireausstraat 10 B-2018 Antwerp Belgium Tel Fax Tucana Telecom S.A.S Bouleverd Carnet F Le Vésinet France Tel Fax Tucana Telecom GmbH Ickstattstrasse 1 D Munich Germany Tel Fax Tucana Telecom B.V. Minervum 7446K NL-4817 ZG Breda Netherlands Tel Fax info@tucana.com