Defining a new Wireless Strategy to Lead the Market Fortinet Secure Wireless Architecture

Transcription

1 Defining a new Wireless Strategy to Lead the Market Fortinet Secure Wireless Architecture Martin Baumgartner, Principal Systems Engineer, Fortinet GmbH Copyright Fortinet Inc. All rights reserved.

2 Wi-Fi Becoming Primary Access Medium Proliferation of Handheld/Mobile wireless devices Mobility Needs Nemertes Research, August

3 Wi-Fi Infrastructure Trends Machine to Machine Communications LAN Access Technologies Ethernet Wi-Fi Bluetooth ZigBee Other 7% 9% 13% 36% 35% 2014 Traditional IoT (Machine to Machine) devices used Ethernet Significant and growing use of wireless-based technologies Wi-Fi offers flexibility and speed of deployment 0% 10% 20% 30% 40% 50% Percent of Respondents Infonetics, M2M Strategies by Vertical: N. American Enterprise Survey, January

4 Wireless Networks are Vulnerable 60% 50% 40% 30% 20% 10% Lack of secured access No specific security policies No Network Segmentation (i.e : Corporate vs. Guest Access) Heterogeneous environment Complex architecture with multiple security platforms (lack of consistency) 0% Endpoint Core network infrastructure Wireless Databases Applications Storage Worldwide 45% 29% 49% 25% 17% 11% 25% Americas 43% 28% 50% 27% 17% 12% 23% EMEA 47% 27% 52% 22% 17% 10% 24% APAC 43% 31% 44% 25% 18% 10% 29% Source: Fortinet Security Census 2015 Do you really want malware in machine to machine communication? 4

5 Opportunity Migration to ac Presence Analytics Integrated Security Mobile Protection BYOD 2.8 Devices per Worker Service Levels Enforcement Cloud Services $60 Billion Market by 2016 Internet of Things 50 to 212 Billion Devices by 2020 Today s Wi-Fi Infrastructure Requires an Integrated Approach to End-to-End Security Cross Community Authentication 5

6 Fortinet Value Proposition Secure Wireless Architecture

7 Different Architectures 1 Cloud 2 Integrated 3 Infrastructure Security + Controller Security Controller Cloud Cloud Management On Premise Management On Premise Management AP + Security AP AP 7

8 Supports Enterprises of All Sizes SMALL BRANCH (Integrated or Cloud) FEW LARGE BRANCH (Infrastructure or Integrated) AP / site CAMPUS (Infrastructure or Integrated) MANY 8

9 Support Enterprises in All Verticals CLOUD INTEGRATED INFRASTRUCTURE Campus Enterprise Distributed Enterprise Municipal / Outdoor K-12 / Primary /Secondary School Most Recommend Recommend Higher Education Healthcare Campus Hospitality / Public Venue Small Business 9

10 Cloud Wireless Offering Deployment Simplicity

11 Industry's Most Secure Cloud-managed Wi-Fi Competitor Cloud Wi-Fi FortiAP-S Series Managed by FortiCloud No controller required FortiGuard services run on each AP Simplifies deployment and management Connection Credential Lookup Authentication Gap in Security Protection Continue to Wire Connection Credential Lookup Authentication IPS, AV, Botnet URL Filter, App Control Continue to Wire 11

12 Cloud Wireless Deployment Diagram Security FAP-S FortiSwitch POE FAP-S Security Wireless Plane Data Management 12

13 Cloud Access Points Product Matrix FAP-S323C ac, Ext Ant 3x3:3 FAP-S321C ac 3x3:3 FortiCloud WLAN Cloud Management Indoor Cloud Management 13

14 FortiCloud Managed Wi-Fi Security Capabilities Intrusion Prevention System L7 Application Control Antivirus and Anti-botnet Web Filtering 14

15 Integrated Wireless Offering All-In-One Box

16 Integrated Security and WLAN Control Single pane of glass Enterprise WLAN controller Unified wired/wireless Rogue AP and WIDS Application control FortiGuard Services Security WLAN Control Integrated captive portal Tunnel, bridge and mesh Security 16

17 Integrated Wireless Deployment Diagram Security FortiGate NGFW/UTM Access Points FortiSwitch POE Access Points Wireless LAN Controller Wireless Plane Data Control Management 17

18 Integrated Security and Wireless Product Matrix High End FAP-320C ac 3x3:3 FAP-222C ac 2x2:2 FAP-223C / FAP-221C ac 2x2:2 FWF-90D/90D-POE n 2x2:2 Entry FAP-24D n 2x2:2 FAP-21D / 25D / 28C n, Remote AP 2x2:2 FAP-11C / 14C n, Remote AP 1x1:1 FAP-112D n 1x1:1 FWF-60D/60D-POE n 2x2:2 FWF-30D/30D-POE n 2x2:2 Indoor Outdoor Stand Alone 18

19 Integrated Wireless Controllers Every FortiGate includes a WLAN controller Largest range of controllers in the industry Support ranges from 5 APs (100 users) up to 10K APs (32,000 users) Hardware Accelerated with FOS 5.4 No Specific Licenses 19

20 Centralized Wireless Management FortiManager Global Wireless Management Centralized AP Firmware Upgrades SSID and Radio Policy Configuration Centralized Rogue AP Suppression Real-time Client Monitoring FortiAnalyzer Wireless Usage Reporting Security Log Analysis and Forensics Wireless PCI Compliance Reporting Management Logging Central Location FortiManager FortiAnalyzer Branch Office Branch Office 20

21 Infrastructure Wireless Offering Scalability and Flexibility

22 Deployment, Scalability and Flexibility Multi-Channel Virtual Cell + Single Channel Virtual Cell + Channel Layers Multiple channels to maximize spectrum reuse and performance One channel to simplify deployment and seamless roaming Multiple channels to segment application traffic and add capacity

23 Infrastructure Wireless Deployment Diagram Wireless LAN Manager Security Wireless Wireless LAN Controller FortiGate NGFW/UTM SC/MC ATC/ATF Access Points FortiSwitch POE Access Points Wireless Plane Data Control Management 24

24 Infrastructure Access Points Product Matrix High End AP ac 3x3:3 AP ac 2x2:2 AP n, Tri Radio 3x3:3 AP n 3x3:3 OAP ac 3x3:3 AP ac, Wall Plate 2x2:2 AP1010/ n 2x2:2 Entry Indoor Outdoor 25

25 Infrastructure WLAN Controller Product Matrix High End MC6000 Supports up to 5,000 APs 200Gbps+ 10 GbE MC4200 Supports up to 500 APs 10 GbE SA2000 Up to 250 controllers MC3200 Support up to 200 APs SA250 Up to 10 controllers Entry MC1550 Supports up to 50 APs WLAN Controller Service Appliance 26

26 Fortinet Presence Analytics Solution for measuring customer behavior using WiFi signal Detects signal from WiFi enabled smartphones Analyzes customer location and movement Provides insights into customer behavior Increase store performance and sales conversion Like Us on Facebook Push coupon to customer 27

27 Cloud Win in All Verticals Secure Wireless Integrated Win in All Sized Organizations Architecture Infrastructure Win in All Geographies 28

28 Thank you 29