Why Secure Access Architecture

Transcription

1 The Future is Wireless Guido Handel Fortinet SE Copyright Fortinet Inc. All rights reserved. Why Secure Access Architecture

2 Trend: Need for More Speed Migration to continues Wi-Fi Standards Evolution Migration to Gigabit Mbps n 450 Mbps g/a 54 Mbps Mbps b 11 Mbps 1st Generation nd Generation rd Generation th Generation th Generation Now Infonetics, Wireless LAN Equipment Quarterly Worldwide and Regional Market Share: 4Q14 3 Trend: Devices Going Wireless Wi-Fi becoming the primary access medium IoT Access Technology Predications LAN Access Technologies Ethernet Wi-Fi Bluetooth ZigBee Other 7% 9% 13% 36% 35% 64% Wireless 0% 10% 20% 30% 40% 50% Percent of Respondents Nemertes Research, August 2015 Each generation of Wi-Fi technology accelerates the migration to wireless for users Infonetics, M2M Strategies by Vertical: N. American Enterprise Survey, January 2014 IoT devices going wireless 4

3 Trend: Seamless User Experience A unified access experience is the expected norm Users utilize multiple devices in the enterprise» Wireless: smartphone, tablets» Wired: desktops, workstations Wireless Authentication Wired Consistent user experience is the norm» Consistent policies for access, application, security Seamless device experience» New device types must be provisioned appropriately» Headless devices IoT Access Points Switch 5 How Fortinet Provides Secure Access Secure Access Architecture

4 Complete Secure Access Offerings Comprehensive deployment options 1 Infrastructure 2 Integrated 3 Cloud WLAN Mgt + WLAN Mgt Cloud Cloud Management On Premise Management On Premise Management Switch Switch Switch AP AP AP + 7 Infrastructure Secure Access Architecture

5 Infrastructure Secure access solution that provides flexibility Why Infrastructure? Mobile: Fit for highly mobile and scalable deployments where low latency and roaming support matter. BSSID Spoofing Flexibility: Channel planning flexibility to shorten site survey and deployment times Choice: Able to separate access infrastructure purchase decision from security purchase WLAN Management Mobility / Roaming / Scale Supports highly mobile environments Lowest latencies for video and voice traffic Channel Planning Flexibility Reduce site survey planning Reduce deployment times Choice and access unbundled Ability to pick and choice best options 9 Zero Handoff Today s WLAN FortiWLC Virtual AP Architecture BSSID = A BSSID = B BSSID = M BSSID = M 01:00 00:00 100ms 3 sec between handoff Improved Handoff For Client 10

6 Infrastructure Deployment Diagram Wireless LAN Manager Wireless SC/MC ATC/ATF Wireless LAN Controller FortiGate NGFW/UTM Access Points FortiSwitch POE Access Points Wireless Plane Data Control Management 11 Infrastructure Access Points Product Matrix High End AP832 3x3:3 AP n, Tri Radio 3x3:3 OAP832 3x3:3 AP822 AP122, Wall Plate AP1010/ n Entry Indoor Outdoor 12

7 Infrastructure WLAN Controller Product Matrix High End MC6000 Supports up to 5,000 APs 200Gbps+ 10 GbE MC4200 Supports up to 500 APs 10 GbE SA2000 Up to 250 controllers MC3200 Support up to 200 APs SA250 Up to 10 controllers Entry MC1550 Supports up to 50 APs WLAN Controller Service Appliance 13 Integrated Secure Access Architecture

8 Integrated Secure access solution that provides security and access control in one box Why Integrated? Integrated: Industry s most integrated secure access offering Unified Management: Single pane of glass to manage both security and access. Scalable: Scalable to support enterprises of all different sizes Central Location FortiCl oud Remote Branch Office Integrated appliance and access control in one box with WLAN controller built in Unified Management Single pane to manage switches, access points, security appliances and more Scalable Scalable to support enterprises of all sizes Full line from large to small secure access appliances 15 Client Monitor Client view inside the FGT. This includes a client health indicator, client connection details and application usage. Enhances management functionality. 16

9 Cloud Wireless Deployment Diagram FAP-S FortiSwitch POE FAP-S Wireless Plane Data Control Management 17 Integrated Wireless Product Matrix High End FAP-S323C, Ext Ant 3x3:3 FAP-320C 3x3:3 FWF-90D/90D-POE n FAP-S321C 3x3:3 FAP-223C / FAP-221C FAP-222C FWF-50E/51E n FAP-24D n FWF-30E series n FAP-21D / 25D / 28C n, Remote AP Entry FAP-11C / 14C n, Remote AP 1x1:1 FAP-112D n 1x1:1 Stand Alone Remote Indoor Outdoor 18

10 Cloud Secure Access Architecture Cloud Secure access solution that provides security at the edge with simplified management Why Cloud? Secure: Industry s only NGFW/UTM + AP solution Cloud: Roll out remote sites in minutes - not hours and days Controller-less: Wi-Fi without the complexity of on premise controllers Cloud Management Secure Industry s only NGFW/UTM + AP in one Award winning FortiGuard Services built into to every Smart AP (AP-S) Cloud Management Simple roll out and provisioning of secure APs Management via the cloud Controller-less Eliminate the need for on premise controllers 20

11 Cloud Wireless Deployment Diagram FAP-S FortiSwitch POE FAP-S Wireless Plane Data Control Management 21 Wave2 APs are coming FortiWLC and FortiWLM series Not for general circulation Copyright Fortinet Inc. All rights reserved.

12 Wave2 APs are coming 3.46 Gbps 20,40,80,160 MHz MU-MIMO More bandwidth Wider RF channels (up to 160 MHz Channel Width) Use 80 MHz channel width with 4 streams = 1733 Mbps Multi-User MIMO Allows AP to transmit to multiple client devices all at one time 23 FortiAP 421E/423E 4x4 wave-2 AP FAP-421E FAP-423E Specification Use Case Form Factor Rx / Tx Radio 1 Radio 2 PoE Antennas Ethernet Interfaces Attributes High Density Indoor AP Wall / Ceiling Mount 4x4 5 GHz a/n/ac 4x4 MIMO, 4 streams, 80MHz wide (1733 Mbps) 2.4 GHz b/g/n 4x4 MIMO, 4 streams turbo mode (600 Mbps) 802.3at 421E: 8 Internal 423E: 8 External (RP-SMA) 2 x GE RJ45 Plenum rated Extended temp range -20C 24

13 FortiAP S421E/423E 4x4 wave-2 Thick AP FAP-S421E FAP-S423E Specification Use Case Form Factor Rx / Tx Radio 1 Radio 2 PoE Antennas Ethernet Interfaces Attributes High Density Indoor AP Wall / Ceiling Mount 4x4 5 GHz a/n/ac 4x4 MIMO, 4 streams, 80MHz wide (1733 Mbps) 2.4 GHz b/g/n 4x4 MIMO, 4 streams turbo mode (600 Mbps) 802.3at S421E: 8 Internal S423E: 8 External (RP-SMA) 2 x GE RJ45 Plenum rated Extended temp range -20C 25 FortiAP S422E 4x4 wave-2 Outdoor Thick AP FAP-S422E Specification Use Case Form Factor Rx / Tx Radio 1 Radio 2 PoE Antennas Ethernet Interfaces High Density Outdoor Secure Wireless Network Pole, Wall Mount 4x4 5 GHz a/n/ac (1700 Mbps) 2.4 GHz b/g/n (450 Mbps) 802.3at 8 External (N-Type) 2 x GE RJ45 26

14 Presence Analytics Fortinet Presence Analytics Solution for measuring customer behavior using WiFi signal Detects signal from WiFi enabled smartphones Analyzes customer location and movement Provides insights into customer behavior Increase store performance and sales conversion Like Us on Facebook Push coupon to customer 28

15 Hospitality - Bobbejaanland Theme Park Overview 50 attractions and 750,000+ visitors per year FortiGate, FortiAP and FortiPresence deployed Solution Benefits Grew attendance and improved profitability Increased utilization of rides and attractions Connected wireless point-of-sale systems Enabled guest Wi-Fi for visitors 29