Sourcefire Overview Jens Brandt. Regional Sales Manager Nordics and Baltics

Transcription

1 Sourcefire Overview Jens Brandt Regional Sales Manager Nordics and Baltics

2 About Sourcefire Mission: To be the leading provider of intelligent cyber security solutions for the enterprise.! Founded in 2001 by Snort Creator, Martin Roesch, CTO! Headquarters: Columbia, MD! Focus on enterprise and government customers! Global Security Alliance ecosystem! NASDAQ: FIRE 2

3 Gartner 2010 IPS Magic Quadrant FACT: Sourcefire has been a leader in Gartner s IPS Magic Quadrant since The Magic Quadrant is copyrighted 6 December 2010 by Gartner, Inc. and is reused with permission. The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period. 3 It depicts Gartner's analysis of how certain vendors measure against criteria for that marketplace, as defined by Gartner. Gartner does not endorse any vendor, product or service depicted in the Magic Quadrant, and does not advise technology users to select only those vendors placed in the "Leaders" quadrant. The Magic Quadrant is intended solely as a research tool, and is not meant to be a specific guide to action. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

4 Traditional IPS vs. Next-Generation IPS Traditional IPS Next-Generation IPS Closed & Blind Architecture Open & Customizable None or Limited Awareness Visibility & Intelligence 4 Human Intensive Automation Self Tuning & Precision

5 Mgmt Sourcefire a comprehensive solution Products Defense Center Management Console Technologies IPSx IPS Awareness 5 NGIPS NGFW SSL Appliance Virtual Products Immunet

6 Security IS needed 6

7 When Security fails Always expect the unexpected! 7

8 Who is this a statue of? Born September 1846 in USA Died

9 9 Died 1911 Cause of death?

10 10 Kicked himself to death He proved that passwords aren t safe 100 years later we still haven t learned the lesson They can even kill you

11 Security systems All face similar problems In or out, same problem Same challenge What makes you smarter? 11

12 Awareness 12

13 Security is really easy!! Know everything!! Keep track of everything!! Be on top of everything!! Always take the right decision!! Be a superman? 13

14 Sourcefire is an alarm system! IPS is your network s combined automated burglar alarm and security guard force 14

15 Incidents Enough awareness? Organizations reputation/brand took a big hit. 15

16 Do you Know your soft spots? Have awareness enough? Have the capacity to handle all security events? Amount of incidents can be a big challenge! 16

17 Next-Gen IPS The Power of Awareness Network Know what s there, what s vulnerable, and what s under attack Application Identify change and enforce policy on hundreds of applications Behavior Detect anomalies in configuration, connections and data flow Identity Know who is doing what, with what, and where 17

18 Sample RNA Detection 18 Applications Operating Systems Network Infrastructure Consumer

19 Comprehensive Ecosystem Network Infrastructure SIEM / Log Management Configuration Management Incident 19 Management Vulnerability Management Systems Management

20 Next-Generation IPS Defense Center Management Console Awareness Technologies Intrusion Prevention Networks SSL Inspection 20 Apps Behavior Virtualization Users

21 Overall Achievable Block Rate 98% 97% 95% 94% 93% 91% 85% 83% 79% 63% 43% 21 Graphic by Sourcefire, Inc. Source data from NSS Labs Network IPS 2010 Comparative Test Results.

22 Protection Against Server-Side Attacks 96% 96% 93% 90% 90% 90% 73% 73% 69% 63% 43% 22 Graphic by Sourcefire, Inc. Source data from NSS Labs Network IPS 2010 Comparative Test Results.

23 Protection Against Client-Side Attacks 99% 98% 97% 97% 96% 96% 96% 93% 91% 55% 44% 23 Graphic by Sourcefire, Inc. Source data from NSS Labs Network IPS 2010 Comparative Test Results.

24 Vulnerability (CVE) Coverage by Year Sourcefire Vendor 2 Vendor 3 Vendor 4 Vendor 5 Vendor 4 Vendor 6 Vendor 7 Vendor 8 Vendor 9 Vendor 10 6 Vendor 10 Vendor 11 24

25 Vendor-Stated vs. Actual Performance 180% 160% 140% 161% Sourcefire s 2G IPS achieved 3.2G for 161% of vendor-stated performance 120% 100% 80% 60% 40% 20% 115% 113% 100% 81% 49% 40% 39% 100% Performance Baseline Most IPS products achieved well below vendor-stated performance claims 35% 20% 17% 3% 3% 0% 25 Graphic by Sourcefire, Inc. Computations derived from NSS Labs Network IPS 2010 Comparative Test Result

26 Thank you!