How to Build a Massively Scalable Next-Generation Firewall

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "How to Build a Massively Scalable Next-Generation Firewall"

Transcription

1 How to Build a Massively Scalable Next-Generation Firewall Seven measures of scalability, and how to use them to evaluate NGFWs Scalable is not just big or fast. When it comes to advanced technologies like Next-Generation Firewalls, you can t rely on a single measure like Mbps for stateful packet inspection to tell you how a security appliance will perform under real-world conditions. In this paper, we will discuss seven measures of performance and scalability, and how you can use them to select a Next-Generation Firewall. We will also outline the kind of technical innovations needed to produce a massively scalable NextGeneration Firewall, and take a quick look at results from a benchmark test comparing some of the leading examples.

2 TABLE OF CONTENTS Why Scalability Is Important Seven Measures of Performance and Scalability, and When to Use Them How to Create a Massively Scalable Next-Generation Firewall The Proof: Results from a Benchmark Test

3 Why Scalability Is Important Better Security: Traditional firewalls scan packet headers and apply rules to forward or block the packets. Next-Generation Firewalls do far more work: They inspect packet payloads, apply advanced malware detection and intrusion prevention techniques, perform content filtering, decrypt Secure Sockets Layer (SSL) traffic, control application traffic, and prevent employees from using non-business Web applications. These activities greatly improve security, but they require much more processing power. When non-scalable appliances max out, administrators typically turn off some security functions.1 This opens up the network to malware and attacks. Lower Costs: One enterprise Next-Generation Firewall can replace multiple firewall and intrusion prevention systems. This consolidation reduces hardware and software license expenses, as well as deployment and administration costs. Higher productivity: When utilization rises, most Next-Generation Firewalls are forced to buffer network packets and inspect them in memory. This slows network performance and hurts employee productivity. A massively scalable Next-Generation Firewall can inspect even very large files at near wire speed, so employee productivity is not affected.2 Seven Measures of Performance and Scalability, and When to Use Them Performance and scalability cannot be boiled down to a single measure for Next-Generation Firewalls. The following are seven measures to use when selecting the right solution for your environment. These measures are often (although not always) available in vendor data sheets and in the reports of independent benchmark tests. 1. Performance with stateful packet inspection. Firewalls that perform stateful packet inspection inspect packet headers, track the state of network connections (such as TCP streams), and apply rules to block or forward packets. Maximum throughput with stateful packet inspection, measured in Mbps or Gbps, was a meaningful measure of performance for traditional stateful packet inspection firewalls. However, it doesn t reflect the workload of Next-Generation Firewalls with their extra security capabilities. It should be given very little weight unless an appliance is going to be used in an environment with minimal security requirements. 3 1 Many IT security pros shut off security to improve performance, survey finds, Infosecurity, July 21, For more details on why scalability is important, see Executive Brief on Enterprise Next-Generation Firewalls

4 2. Performance with deep packet inspection. Deep packet inspection (DPI) involves inspecting the application content or payload of network packets, as well as the headers. Most of the extra security capabilities of Next-Generation Firewalls, such as malware detection, intrusion prevention, SSL decryption, content filtering and application control, are based on DPI. Maximum throughput with deep packet inspection, measured in Mbps or Gbps, is a much more meaningful indicator of Next-Generation Firewall performance than throughput with stateful packet inspection. 3. New connections per second. In enterprise environments, millions of connections are created and dropped every minute. New connections per second measures the ability of a firewall to promptly handle new user traffic. In some ways, it is analogous to measuring acceleration: If many remote users log in at once, can the appliance pick up speed and handle them right away, or will it stall and slow down network performance? New connections per second is an important measure to consider if you have a large number of network users, particularly if they connect and log out frequently. Be aware, however, that some vendors publish connections-per-second statistics with DPI turned off. That test setting does not simulate real-world conditions. 4. Simultaneous connections with DPI enabled. Maximum number of simultaneous connections, measured in thousands or millions, represents the number of network sessions that the Next-Generation Firewall can handle at peak times. Obviously, this is an important measure for large enterprises with large numbers of network users. Again, beware of vendors that publish measurements of connections with DPI turned off. 5. Performance with SSL decryption. SSL traffic is widely used by banks, online retailers and cybercriminals to shield Web traffic from inspection. The ability to decrypt, scan and reassemble SSL-encrypted packets is one of the key security advantages of Next-Generation Firewalls, but it is very resource-intensive. If you have SSL traffic crossing your network boundary, then SSL decryption performance, measured in Mbps or Gbps, is a key metric for understanding how the Next-Generation Firewall will behave under real-world conditions. A related metric is how many simultaneous connections can be decrypted and inspected. 4

5 6. Latency with DPI enabled. Firewalls with proxy-based designs can have high throughput but still force users to wait for large files to be buffered in memory, inspected and reassembled. So latency with DPI enabled, measured in milliseconds, is an important measure for anticipating how firewall performance will or won t affect end-user productivity. It is particularly important for application response times when large files are transmitted. 7. Maximum file size. Many firewalls place a limit on the size of files they can inspect typically 100 MB. This is because they need to buffer files in memory but don t have enough memory to handle large files. Therefore, these files must either be quarantined, which is bad for end-user productivity, or passed through without inspection, which is bad for security. The file-size limit is particularly important if you have users who receive or send large files such as zip files, audio and video files, ISO images, and CAD/CAM design files. How to Create a Massively Scalable Next-Generation Firewall You can t create a scalable Next-Generation Firewall by taking traditional firewall architecture and adding duplicate components or inserting a faster CPU. Diminishing returns kick in quickly because of bottlenecks. The only way to create a massively scalable Next-Generation Firewall is to design one from the ground up, taking advantage of a wide range of hardware and software technologies such as the following, used by Dell SonicWALL: Specialized processors optimized for networking: Standard x86 microprocessors are inefficient for inspecting and forwarding network traffic. Specially designed application-specific integrated circuits are not flexible enough for DPI, and once installed, they can t easily be upgraded or reprogrammed with microcode. The best results are achieved by using CPUs such as Cavium processors that are optimized for processing network traffic. These are extremely well suited to inspecting data payloads and packet forwarding. They also consume much less power and generate less heat than conventional microprocessors, so more of them can be used together in parallel processing systems. Figure 1: Example of a multi-core architecture to support parallel processing (from the Dell SonicWALL E10000 Series) 5

6 Multi-core architecture and parallel processing: Parallel processing is a critical enabler for enterprise-class performance and scalability. It allows dozens of processors to split the work of inspecting thousands of streams of traffic. Parallel processing can: p Dramatically increase throughput. p Increase new connections per second. p Increase maximum simultaneous connections. Next-Generation Deep Packet Inspection: Advanced hardware alone is not sufficient to create a massively scalable Next-Generation Firewall. The vendor also needs to develop an optimized single-pass engine for DPI. For example, Dell SonicWALL has developed the patented Reassembly-Free Deep Packet Inspection (RFDPI) engine, which performs highly efficient pattern matching within files attachments and many compressed archives, regardless of file size and independent of protocol. RFDPI techniques go far beyond simple security countermeasures. The RFDPI engine analyzes factors such as packet type and expected content for file types. It applies heuristic techniques for example, flagging password-protected compressed files and uses application control to apply granular controls to specific Web applications.3 The efficient RFDPI software engine also eliminates the need for buffering large files in memory. This can: p Reduce latency. p Eliminate the need to cap file sizes. The Proof: Results from a Benchmark Test Independent third-party tests are useful for validating vendor claims about performance and scalability. In April 2012, Network World published an in-depth analysis of four leading Next-Generation Firewalls. These Mixed-HTTP Content Handling tests involved simulating enterprise network traffic with objects of different sizes and file types, designed to closely approximate the loads handled by firewalls in real-world environments. 3 6 For more details on the technologies that go into a massively scalable Next-Generation Firewall, see Why Protection and Performance Matter

7 The testers varied the conditions of the tests by running them with only the firewall turned on; with the firewall and intrusion prevention system features turned on; and with firewall, antivirus, antispyware and IPS features all turned on. The tests were further varied by sending the traffic in cleartext and again encrypted using SSL. Summaries of key results are shown in Figure 2. The Dell SonicWALL SuperMassive E10800 came out on top, with the best performance on five of the six tests. In the most demanding test in this series scanning SSL traffic with firewall, antivirus, antispyware and IPS features turned on the Dell SonicWALL appliance outperformed the second-fastest device by 18% (11,305 Mbps, vs. 9,544 Mbps) and the other two devices by more than 100% (11,305 Mbps, vs. 5,266 Mbps and 4,648 Mbps). Figure 2: Network World Clear Choice Test for Next-Generation Firewalls, Mixed-HTTP Content Handling tests A related Network World article noted: [Dell] SonicWALL s SuperMassive can decrypt SSL traffic very fast in fact, these one-off tests show it to be the fastest device by far. 4 Learn more about Enterprise Next-Generation Firewalls at 1 7 For more details on this and other NGFW benchmarks, see: Clear Choice Test: Next-Generation Firewalls (http://www.networkworld. com/reviews/2012/ firewalls-test html), Scaling Up With SonicWALL s Supermassive (http://www.networkworld.com/ reviews/2012/ firewalls-test-sonicwall html), and What to Look for When Evaluating Next-Generation Firewalls (http://www.bitpipe.com/resource/ _374).

Next-Generation Firewalls: Critical to SMB Network Security

Next-Generation Firewalls: Critical to SMB Network Security Next-Generation Firewalls: Critical to SMB Network Security Next-Generation Firewalls provide dramatic improvements in protection versus traditional firewalls, particularly in dealing with today s more

More information

Achieve Deeper Network Security

Achieve Deeper Network Security Achieve Deeper Network Security Dell Next-Generation Firewalls Abstract Next-generation firewalls (NGFWs) have taken the world by storm, revolutionizing network security as we once knew it. Yet in order

More information

What to Look for When Evaluating Next-Generation Firewalls

What to Look for When Evaluating Next-Generation Firewalls What to Look for When Evaluating Next-Generation Firewalls Using independent tests to compare performance, cost and functionality Table of Contents Why Use Independent Tests in Evaluations?... 3 What to

More information

Achieve Deeper Network Security and Application Control

Achieve Deeper Network Security and Application Control Achieve Deeper Network Security and Application Control Dell Next-Generation Firewalls Abstract Next-generation firewalls (NGFWs) have emerged to revolutionize network security as we once knew it. Yet

More information

Why Protection and Performance Matter

Why Protection and Performance Matter Why Protection and Performance Matter - The Benefits of Multi-core Reassembly-Free Deep Packet Inspection. Next-Generation Firewalls combine multi-core architecture with real-time Deep Packet Inspection

More information

Why protection & performance matter

Why protection & performance matter Why protection & performance matter By Daniel Ayoub, CISSP, CISA Next-Generation Firewalls combine multi-core architecture with real-time Deep Packet Inspection to fulfill the protection and performance

More information

Game changing Technology für Ihre Kunden. Thomas Bürgis System Engineering Manager CEE

Game changing Technology für Ihre Kunden. Thomas Bürgis System Engineering Manager CEE Game changing Technology für Ihre Kunden Thomas Bürgis System Engineering Manager CEE Threats have evolved traditional firewalls & IPS have not Protection centered around ports & protocols Expensive to

More information

Executive Brief on Enterprise Next-Generation Firewalls

Executive Brief on Enterprise Next-Generation Firewalls Executive Brief on Enterprise Next-Generation Firewalls How security technology can reduce costs, improve compliance and increase employee productivity Enterprise Next-Generation Firewalls protect businesses

More information

Firewall Sandwich. Aleksander Kijewski Presales Engineer Dell Software Group. Dell Security Peak Performance

Firewall Sandwich. Aleksander Kijewski Presales Engineer Dell Software Group. Dell Security Peak Performance Firewall Sandwich Aleksander Kijewski Presales Engineer Dell Software Group 1 Many of your users web sessions are encrypted with HTTPS 2 Many of your users web sessions are encrypted with HTTPS and so

More information

How Traditional Firewalls Fail Today s Networks And Why Next-Generation Firewalls Will Prevail

How Traditional Firewalls Fail Today s Networks And Why Next-Generation Firewalls Will Prevail How Fail Today s Networks And Why Will Prevail Why your current firewall may be jeopardizing your security, and how you can counter today s threats, manage web 2.0 apps and enforce acceptable-use policies.

More information

Why it's time to upgrade to a Next Generation Firewall. Dickens Lee Technical Manager

Why it's time to upgrade to a Next Generation Firewall. Dickens Lee Technical Manager Why it's time to upgrade to a Next Generation Firewall Dickens Lee Technical Manager Dell History 2 Confidential Dell s legacy Became leading provider of subscription services on optimized appliances Shipped

More information

Dell SonicWALL Portfolio

Dell SonicWALL Portfolio Dell SonicWALL Portfolio Jiří Svatuška Presales Consultant Transform Connect Inform Protect Dell SonicWALL network security portfolio Network security Secure mobile access Email security Policy and management

More information

Providing Secure IT Management & Partnering Solution for Bendigo South East College

Providing Secure IT Management & Partnering Solution for Bendigo South East College Providing Secure IT Management & Partnering Solution for Bendigo South East College Why did Bendigo South East College engage alltasksit & DELL? BSEC is in the midst of school population growth in 2015,

More information

Applications erode the secure network How can malware be stopped?

Applications erode the secure network How can malware be stopped? Vulnerabilities will continue to persist Vulnerabilities in the software everyone uses everyday Private Cloud Security It s Human Nature Programmers make mistakes Malware exploits mistakes Joe Gast Recent

More information

Symantec Enterprise Firewalls. From the Internet Thomas Jerry Scott

Symantec Enterprise Firewalls. From the Internet Thomas Jerry Scott Symantec Enterprise Firewalls From the Internet Thomas Symantec Firewalls Symantec offers a whole line of firewalls The Symantec Enterprise Firewall, which emerged from the older RAPTOR product We are

More information

Application Intelligence, Control and Visualization

Application Intelligence, Control and Visualization Application Intelligence, Control and Visualization Marco Ginocchio Director of Systems Engineering Europe, Middle East, and Africa mginocchio@sonicwall.com SonicWALL Over 1.7 million security appliances

More information

Using Palo Alto Networks to Protect the Datacenter

Using Palo Alto Networks to Protect the Datacenter Using Palo Alto Networks to Protect the Datacenter July 2009 Palo Alto Networks 232 East Java Dr. Sunnyvale, CA 94089 Sales 866.207.0077 www.paloaltonetworks.com Table of Contents Introduction... 3 Granular

More information

Why protection and performance matter

Why protection and performance matter Why protection and performance matter By Daniel Ayoub, CISSP, CISM, CISA Next-Generation Firewalls combine multi-core architecture with real-time Deep Packet Inspection to fulfill the protection and performance

More information

WAN Beschleunigung und Applikationskontrolle, mit SonicWALL alles aus einer Hand

WAN Beschleunigung und Applikationskontrolle, mit SonicWALL alles aus einer Hand WAN Beschleunigung und Applikationskontrolle, mit SonicWALL alles aus einer Hand Thomas Bürgis SE Manager Central Europe tbuergis@sonicwall.com 1 Daily Challenges Streaming video is killing my network

More information

Dell SonicWALL Next Generation Firewall(Gen6) and Integrated Solution. Colin Wu / 吳 炳 東 Colin_Wu1@dell.com

Dell SonicWALL Next Generation Firewall(Gen6) and Integrated Solution. Colin Wu / 吳 炳 東 Colin_Wu1@dell.com Dell Next Generation Firewall(Gen6) and Integrated Solution Colin Wu / 吳 炳 東 Colin_Wu1@dell.com Agenda Company Overview Dell Product Line-Up Architecture Firewall security services Add-on products Wireless

More information

Unified Threat Management Throughput Performance

Unified Threat Management Throughput Performance Unified Threat Management Throughput Performance Desktop Device Comparison DR150818C October 2015 Miercom www.miercom.com Contents Executive Summary... 3 Introduction... 4 Products Tested... 6 How We Did

More information

SSL Performance Problems

SSL Performance Problems ANALYST BRIEF SSL Performance Problems SIGNIFICANT SSL PERFORMANCE LOSS LEAVES MUCH ROOM FOR IMPROVEMENT Author John W. Pirc Overview In early 2013, NSS Labs released the results of its Next Generation

More information

A NEW SET OF NETWORK SECURITY CHALLENGES

A NEW SET OF NETWORK SECURITY CHALLENGES TECH DOSSIER NEXT GENERATION FIREWALLS A NEW SET OF NETWORK SECURITY CHALLENGES A new IDG survey reveals optimism about the ability of nextgeneration firewalls to help IT balance productivity and security

More information

Content-ID. Content-ID URLS THREATS DATA

Content-ID. Content-ID URLS THREATS DATA Content-ID DATA CC # SSN Files THREATS Vulnerability Exploits Viruses Spyware Content-ID URLS Web Filtering Content-ID combines a real-time threat prevention engine with a comprehensive URL database and

More information

The Application Delivery Controller Understanding Next-Generation Load Balancing Appliances

The Application Delivery Controller Understanding Next-Generation Load Balancing Appliances White Paper Overview To accelerate response times for end users and provide a high performance, highly secure and scalable foundation for Web applications and rich internet content, application networking

More information

Bricata Next Generation Intrusion Prevention System A New, Evolved Breed of Threat Mitigation

Bricata Next Generation Intrusion Prevention System A New, Evolved Breed of Threat Mitigation Bricata Next Generation Intrusion Prevention System A New, Evolved Breed of Threat Mitigation Iain Davison Chief Technology Officer Bricata, LLC WWW.BRICATA.COM The Need for Multi-Threaded, Multi-Core

More information

Network Security Solution. Arktos Lam

Network Security Solution. Arktos Lam Network Security Solution Arktos Lam Dell Software Group(DSG) 2 Confidential Trend Dell Software addresses key trends Cloud Big data Mobility Security Management Security 3 Software We deliver security

More information

10 Strategies to Optimize IT Spending in an Economic Downturn. Wong Kang Yeong, CISA, CISM, CISSP Regional Security Architect, ASEAN

10 Strategies to Optimize IT Spending in an Economic Downturn. Wong Kang Yeong, CISA, CISM, CISSP Regional Security Architect, ASEAN 10 Strategies to Optimize IT Spending in an Economic Downturn Wong Kang Yeong, CISA, CISM, CISSP Regional Security Architect, ASEAN Current Economic Landscape 2 Basically you Basically you ve had to throw

More information

The Cisco ASA 5500 as a Superior Firewall Solution

The Cisco ASA 5500 as a Superior Firewall Solution The Cisco ASA 5500 as a Superior Firewall Solution The Cisco ASA 5500 Series Adaptive Security Appliance provides leading-edge firewall capabilities and expands to support other security services. Firewalls

More information

Streamline your network security

Streamline your network security Streamline your network security Consolidated Dell SonicWALL Next-Generation Firewalls Integrated next-generation security appliances and services Highest performance Easy to set up, administer and use

More information

The 2014 Next Generation Firewall Challenge

The 2014 Next Generation Firewall Challenge Network World and Robin Layland present The 2014 Next Generation Firewall Challenge Guide to Understanding and Choosing a Next Generation Firewall to Combat Today's Threats 2014 The 2014 Next Generation

More information

SiteCelerate white paper

SiteCelerate white paper SiteCelerate white paper Arahe Solutions SITECELERATE OVERVIEW As enterprises increases their investment in Web applications, Portal and websites and as usage of these applications increase, performance

More information

Significance of the Entrepreneurial Company of the Year Award

Significance of the Entrepreneurial Company of the Year Award Entrepreneurial Company of the Year Firewall Market Global, 2010 Frost & Sullivan s Global Research Platform Frost & Sullivan is entering its 50th year in business with a global research organization of

More information

Jort Kollerie SonicWALL

Jort Kollerie SonicWALL Jort Kollerie Cloud 85% of businesses said their organizations will use cloud tools moderately to extensively in the next 3 years. 68% of spend in private cloud solutions. - Bain and Dell 3 Confidential

More information

Cisco Application Networking for IBM WebSphere

Cisco Application Networking for IBM WebSphere Cisco Application Networking for IBM WebSphere Faster Downloads and Site Navigation, Less Bandwidth and Server Processing, and Greater Availability for Global Deployments What You Will Learn To address

More information

Dell Security Next-Generation Firewalls

Dell Security Next-Generation Firewalls Dell Next-Generation Firewalls Agenda Evolution of Threats Next-Generation Firewall Features Multi-Core, Parallel Processing Reporting Tools Industry Reports Demo Q&A 2 Confidential The security threat

More information

BSNL IDC Hosted Firewall Service. Total Network Security

BSNL IDC Hosted Firewall Service. Total Network Security Total Network Security Advantage BSNL IDC India s first Uptime Institute Certified Tier-III data centres with combined connectivity and IT services availability from BSNL Low latency Internet Data Centres

More information

Sourcefire Solutions Overview Security for the Real World. SEE everything in your environment. LEARN by applying security intelligence to data

Sourcefire Solutions Overview Security for the Real World. SEE everything in your environment. LEARN by applying security intelligence to data SEE everything in your environment LEARN by applying security intelligence to data ADAPT defenses automatically ACT in real-time Sourcefire Solutions Overview Security for the Real World Change is constant.

More information

NEXT GENERATION SECURE WEB GATEWAY: THE CORNERSTONE OF YOUR SECURITY ARCHITECTURE

NEXT GENERATION SECURE WEB GATEWAY: THE CORNERSTONE OF YOUR SECURITY ARCHITECTURE : THE CORNERSTONE OF YOUR SECURITY ARCHITECTURE A CLOSER LOOK REVEALS WHY PROXY-BASED ARCHITECTURE IS UNIQUELY EFFECTIVE IN DEFENDING AGAINST WEB-BASED THREATS. The web is central to the way we work, live,

More information

Stingray Traffic Manager Sizing Guide

Stingray Traffic Manager Sizing Guide STINGRAY TRAFFIC MANAGER SIZING GUIDE 1 Stingray Traffic Manager Sizing Guide Stingray Traffic Manager version 8.0, December 2011. For internal and partner use. Introduction The performance of Stingray

More information

White Paper A10 Thunder and AX Series Load Balancing Security Gateways

White Paper A10 Thunder and AX Series Load Balancing Security Gateways White Paper A10 Thunder and AX Series Load Balancing Security Gateways June 2013 WP_LB FW 062013 Disclaimer This document does not create any express or implied warranty about A10 Networks or about its

More information

WhitePaper. Mitigation and Detection with FortiDDoS Fortinet. Introduction

WhitePaper. Mitigation and Detection with FortiDDoS Fortinet. Introduction WhitePaper DDoS Attack Mitigation Technologies Demystified The evolution of protections: From inclusion on border devices to dedicated hardware+behavior-based detection. Introduction Distributed Denial

More information

Cisco Integrated Services Routers Performance Overview

Cisco Integrated Services Routers Performance Overview Integrated Services Routers Performance Overview What You Will Learn The Integrated Services Routers Generation 2 (ISR G2) provide a robust platform for delivering WAN services, unified communications,

More information

UTM-Enabled Network Protection

UTM-Enabled Network Protection Unlocking the Promise of UTM-Enabled Network Protection What small, midsized, and distributed enterprises need to know to get the most from Unified Threat Management Based on a Frost & Sullivan Executive

More information

The Evolution of Application Acceleration:

The Evolution of Application Acceleration: WHITE PAPER The Evolution of Application Acceleration: From Server Load Balancers to Application Delivery Controllers www.crescendonetworks.com Corporate Headquarters 6 Yoni Netanyahu Street Or-Yehuda

More information

4 Delivers over 20,000 SSL connections per second (cps), which

4 Delivers over 20,000 SSL connections per second (cps), which April 21 Commissioned by Radware, Ltd Radware AppDirector x8 and x16 Application Switches Performance Evaluation versus F5 Networks BIG-IP 16 and 36 Premise & Introduction Test Highlights 1 Next-generation

More information

PRODUCTS & TECHNOLOGY

PRODUCTS & TECHNOLOGY PRODUCTS & TECHNOLOGY DATA CENTER CLASS WAN OPTIMIZATION Today s major IT initiatives all have one thing in common: they require a well performing Wide Area Network (WAN). However, many enterprise WANs

More information

Preventing Data Leaks At The Firewall A Simple, Cost-Effective Way To Stop Social Security and Credit Card Numbers From Leaving Your Network

Preventing Data Leaks At The Firewall A Simple, Cost-Effective Way To Stop Social Security and Credit Card Numbers From Leaving Your Network Preventing Data Leaks At The Firewall A Simple, Cost-Effective Way To Stop Social Security and Credit Card Numbers From Leaving Your Network December 2008 Palo Alto Networks 232 E. Java Dr. Sunnyvale,

More information

Load Balancing Security Gateways WHITE PAPER

Load Balancing Security Gateways WHITE PAPER Load Balancing Security Gateways WHITE PAPER Table of Contents Acceleration and Optimization... 4 High Performance DDoS Protection... 4 Web Application Firewall... 5 DNS Application Firewall... 5 SSL Insight...

More information

SuperMassive E10000 Series

SuperMassive E10000 Series SuperMassive E10000 Series Next-Generation Firewall The Dell SonicWALL SuperMassive E10000 Series is Dell SonicWALL s Next-Generation Firewall platform designed for large networks to deliver scalability,

More information

Is Your Network Ready for VoIP?

Is Your Network Ready for VoIP? Is Your Network Ready for VoIP? Evaluating firewalls for VoIP access, control and security. CONTENTS The Network Will Never be the Same 2 A VoIP-Ready Firewall Criteria Checklist 2 Control Considerations

More information

Accelerating UTM with Specialized Hardware WHITE PAPER

Accelerating UTM with Specialized Hardware WHITE PAPER Accelerating UTM with Specialized Hardware WHITE PAPER FORTINET Accelerating UTM with Specialized Hardware PAGE 2 Summary Tighter security requirements and ever-faster enterprise networks are placing extraordinary

More information

Delivering 160Gbps DPI Performance on the Intel Xeon Processor E5-2600 Series using HyperScan

Delivering 160Gbps DPI Performance on the Intel Xeon Processor E5-2600 Series using HyperScan SOLUTION WHITE PAPER Intel processors Pattern Matching Library Software Delivering 160Gbps DPI Performance on the Intel Xeon Processor E5-2600 Series using HyperScan HyperScan s runtime is engineered for

More information

Comparative Performance and Resilience Test Results - UTM Appliances. Miercom tests comparing Sophos SG Series appliances against the competition

Comparative Performance and Resilience Test Results - UTM Appliances. Miercom tests comparing Sophos SG Series appliances against the competition Comparative Performance and Resilience Test Results - UTM Appliances Miercom tests comparing SG Series appliances against the competition Overview Firewalls not only provide your first line of defense

More information

SonicWALL Corporate Design System. The SonicWALL Brand Identity

SonicWALL Corporate Design System. The SonicWALL Brand Identity SonicWALL Corporate Design System The SonicWALL Brand Identity 1 SonicWALL Corporate Vision Vision Dynamic Security for the Global Network Our vision is simple: we believe security solutions should be

More information

Content-ID. Content-ID enables customers to apply policies to inspect and control content traversing the network.

Content-ID. Content-ID enables customers to apply policies to inspect and control content traversing the network. Content-ID Content-ID enables customers to apply policies to inspect and control content traversing the network. Malware & Vulnerability Research 0-day Malware and Exploits from WildFire Industry Collaboration

More information

SonicWALL ECLASS Netw

SonicWALL ECLASS Netw SonicWALL ECLASS Netw NETWORK SECURITY SuperMassive E10000 Series Next-Generation Firewall The SonicWALL SuperMassive E10000 Series is SonicWALL s Next-Generation Firewall platform designed for large networks

More information

Dell SonicWALL product lines

Dell SonicWALL product lines Dell SonicWALL product lines Overview Secure your organization s systems, users and data with a deep level of protection that won t compromise network performance. Dell SonicWALL wired and wireless security

More information

Upsurge in Encrypted Traffic Drives Demand for Cost-Efficient SSL Application Delivery

Upsurge in Encrypted Traffic Drives Demand for Cost-Efficient SSL Application Delivery WHITE PAPER Cost-Efficient SSL Application Delivery Upsurge in Encrypted Traffic Drives Demand for Cost-Efficient SSL Application Delivery Always On SSL Since 1994, enterprises looking to protect the security

More information

Securing the Intelligent Network

Securing the Intelligent Network WHITE PAPER Securing the Intelligent Network Securing the Intelligent Network New Threats Demand New Strategies The network is the door to your organization for both legitimate users and would-be attackers.

More information

Clean VPN Approach to Secure Remote Access for the SMB

Clean VPN Approach to Secure Remote Access for the SMB Clean VPN Approach to Secure Remote Access for the SMB A clean VPN approach delivers layered defense-in-depth protection for the core elements of business communications. CONTENTS Extending Business Beyond

More information

Virtualized Security: The Next Generation of Consolidation

Virtualized Security: The Next Generation of Consolidation Virtualization. Consolidation. Simplification. Choice. WHITE PAPER Virtualized Security: The Next Generation of Consolidation Virtualized Security: The Next Generation of Consolidation As we approach the

More information

Cisco Application Networking for BEA WebLogic

Cisco Application Networking for BEA WebLogic Cisco Application Networking for BEA WebLogic Faster Downloads and Site Navigation, Less Bandwidth and Server Processing, and Greater Availability for Global Deployments What You Will Learn To address

More information

TIME TO RETHINK PERFORMANCE MONITORING

TIME TO RETHINK PERFORMANCE MONITORING TIME TO RETHINK PERFORMANCE MONITORING New requirements for application awareness and support for unified communications are challenging performance monitoring appliance vendors to reconsider their approach.

More information

Running head: Next Generation Firewalls 1

Running head: Next Generation Firewalls 1 Running head: Next Generation Firewalls 1 Next Generation Firewalls Rob Cavana East Carolina University ICTN 4040 Enterprise Information Security Dr Phil Lunsford and Mrs. Constance Boahn April 13 th 2015

More information

Firewalls and Network Defence

Firewalls and Network Defence Firewalls and Network Defence Harjinder Singh Lallie (September 12) 1 Lecture Goals Learn about traditional perimeter protection Understand the way in which firewalls are used to protect networks Understand

More information

Forefront Threat Management Gateway (TMG) Whitepaper The Solution.

Forefront Threat Management Gateway (TMG) Whitepaper The Solution. Forefront Threat Management Gateway (TMG) Whitepaper The Solution. Find out more about our business on www.exertismicro-psecurity.com Introduction Last year Microsoft announced changes to the roadmaps

More information

SonicWALL Clean VPN. Protect applications with granular access control based on user identity and device identity/integrity

SonicWALL Clean VPN. Protect applications with granular access control based on user identity and device identity/integrity SSL-VPN Combined With Network Security Introducing A popular feature of the SonicWALL Aventail SSL VPN appliances is called End Point Control (EPC). This allows the administrator to define specific criteria

More information

Enhance Service Delivery and Accelerate Financial Applications with Consolidated Market Data

Enhance Service Delivery and Accelerate Financial Applications with Consolidated Market Data White Paper Enhance Service Delivery and Accelerate Financial Applications with Consolidated Market Data What You Will Learn Financial market technology is advancing at a rapid pace. The integration of

More information

Windows Server on WAAS: Reduce Branch-Office Cost and Complexity with WAN Optimization and Secure, Reliable Local IT Services

Windows Server on WAAS: Reduce Branch-Office Cost and Complexity with WAN Optimization and Secure, Reliable Local IT Services Windows Server on WAAS: Reduce Branch-Office Cost and Complexity with WAN Optimization and Secure, Reliable Local IT Services What You Will Learn Windows Server on WAAS reduces the cost and complexity

More information

The Application Front End Understanding Next-Generation Load Balancing Appliances

The Application Front End Understanding Next-Generation Load Balancing Appliances White Paper Overview To accelerate download times for end users and provide a high performance, highly secure foundation for Web-enabled content and applications, networking functions need to be streamlined.

More information

Performance of Cisco IPS 4500 and 4300 Series Sensors

Performance of Cisco IPS 4500 and 4300 Series Sensors White Paper Performance of Cisco IPS 4500 and 4300 Series Sensors White Paper September 2012 2012 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 of

More information

Overcoming the Performance Limitations of Conventional SSL VPN April 26, 2006

Overcoming the Performance Limitations of Conventional SSL VPN April 26, 2006 Overcoming the Performance Limitations of Conventional SSL VPN April 26, 2006 NeoAccel, Inc. 2055 Gateway Place, Suite 240 San Jose, CA 95110 Tel: +1 (408) 274 8000 Fax: +1 (408) 274 8044 Web: www.neoaccel.com

More information

Blind as a Bat? Supporting Packet Decryption for Security Scanning

Blind as a Bat? Supporting Packet Decryption for Security Scanning Sponsored by VSS Monitoring Blind as a Bat? Supporting Packet Decryption for Security Scanning November 2012 A SANS Whitepaper Written by: Dave Shackleford Options for SSL Inspection Page 2 Implementing

More information

Scaling Objectivity Database Performance with Panasas Scale-Out NAS Storage

Scaling Objectivity Database Performance with Panasas Scale-Out NAS Storage White Paper Scaling Objectivity Database Performance with Panasas Scale-Out NAS Storage A Benchmark Report August 211 Background Objectivity/DB uses a powerful distributed processing architecture to manage

More information

SonicWALL Unified Threat Management. Alvin Mann April 2009

SonicWALL Unified Threat Management. Alvin Mann April 2009 SonicWALL Unified Threat Management Alvin Mann April 2009 Agenda Who is SonicWALL? Networking Drivers & Trends SonicWALL Unified Threat Management (UTM) Next Generation Protection SonicWALL CONFIDENTIAL

More information

Achieve deeper network security

Achieve deeper network security Page title appears here Achieve deeper network security This is placeholder body copy. Ebit doloreici te quo volupta denestoria verem del erumquidit, sumquia nulparum num sandites es as exeratur sum aliqui

More information

Check Point taps the power of virtualization to simplify security for private clouds

Check Point taps the power of virtualization to simplify security for private clouds Datasheet: Check Point Virtual Systems Check Point taps the power of virtualization to simplify security for private clouds Looking for ways to reduce complexity and simplify network security in your private

More information

Achieve deeper network security and application control

Achieve deeper network security and application control Achieve deeper network security and application control Page title appears here This is placeholder body copy. Ebit doloreici te quo volupta denestoria verem del erumquidit, sumquia nulparum num sandites

More information

Securing the Virtualized Data Center With Next-Generation Firewalls

Securing the Virtualized Data Center With Next-Generation Firewalls Securing the Virtualized Data Center With Next-Generation Firewalls Data Center Evolution Page 2 Security Hasn t Kept Up with Rate Of Change Configuration of security policies are manual and slow Weeks

More information

Optimizing and Defending Enterprise Networks

Optimizing and Defending Enterprise Networks Source Brief Enterprise Networking Solutions based on Intel Architecture Optimizing and Defending Enterprise Networks Networked application performance and security are closely intertwined, which poses

More information

Clean VPN Approach to Secure Remote Access

Clean VPN Approach to Secure Remote Access Clean VPN Approach to Secure Remote Access A clean VPN approach delivers layered defense-in-depth protection for the core elements of business communications. CONTENTS Extending Business Beyond the Perimeter

More information

Networking for Caribbean Development

Networking for Caribbean Development Networking for Caribbean Development BELIZE NOV 2 NOV 6, 2015 w w w. c a r i b n o g. o r g N E T W O R K I N G F O R C A R I B B E A N D E V E L O P M E N T BELIZE NOV 2 NOV 6, 2015 w w w. c a r i b n

More information

Chapter 15. Firewalls, IDS and IPS

Chapter 15. Firewalls, IDS and IPS Chapter 15 Firewalls, IDS and IPS Basic Firewall Operation The firewall is a border firewall. It sits at the boundary between the corporate site and the external Internet. A firewall examines each packet

More information

Deliver More Applications for More Users

Deliver More Applications for More Users HARDWARE DATASHEET Deliver More Applications for More Users F5 BIG-IP Application Delivery Controller (ADC) platforms can manage even the heaviest traffic loads at both layer 4 and layer 7. By merging

More information

Managing Latency in IPS Networks

Managing Latency in IPS Networks Application Note Revision B McAfee Network Security Platform Managing Latency in IPS Networks Managing Latency in IPS Networks McAfee Network Security Platform provides you with a set of pre-defined recommended

More information

Deploying Silver Peak VXOA with EMC Isilon SyncIQ. February 2012. www.silver-peak.com

Deploying Silver Peak VXOA with EMC Isilon SyncIQ. February 2012. www.silver-peak.com Deploying Silver Peak VXOA with EMC Isilon SyncIQ February 2012 www.silver-peak.com Table of Contents Table of Contents Overview... 3 Solution Components... 3 EMC Isilon...3 Isilon SyncIQ... 3 Silver Peak

More information

IBM Proventia Network Intrusion Prevention System With Crossbeam X80 Platform

IBM Proventia Network Intrusion Prevention System With Crossbeam X80 Platform IBM Proventia Network Intrusion Prevention System With Crossbeam X80 Platform September 2008 pg. 1 Executive Summary The objective of this report is to provide performance guidance for IBM s Proventia

More information

WHITE PAPER. Extending Network Monitoring Tool Performance

WHITE PAPER. Extending Network Monitoring Tool Performance WHITE PAPER Extending Network Monitoring Tool Performance www.ixiacom.com 915-6915-01 Rev. A, July 2014 2 Table of Contents Benefits... 4 Abstract... 4 Introduction... 4 Understanding Monitoring Tools...

More information

First Line of Defense to Protect Critical Infrastructure

First Line of Defense to Protect Critical Infrastructure RFI SUBMISSION First Line of Defense to Protect Critical Infrastructure Developing a Framework to Improve Critical Infrastructure Cybersecurity Response to NIST Docket # 130208119-3119-01 Document # 2013-044B

More information

Active Visibility for Multi-Tiered Security // Solutions Overview

Active Visibility for Multi-Tiered Security // Solutions Overview Introduction Cyber threats are becoming ever more sophisticated and prevalent. Traditional security approaches such as firewalls and anti-virus protection are not equipped to mitigate and manage modern

More information

The Dirty Secret Behind the UTM: What Security Vendors Don t Want You to Know

The Dirty Secret Behind the UTM: What Security Vendors Don t Want You to Know The Dirty Secret Behind the UTM: What Security Vendors Don t Want You to Know I n t r o d u c t i o n Until the late 1990s, network security threats were predominantly written by programmers seeking notoriety,

More information

Meeting budget constraints. Integration and cooperation between network operations and other IT domains. Providing network performance

Meeting budget constraints. Integration and cooperation between network operations and other IT domains. Providing network performance ESG Lab Review Fast and Efficient Network Load Balancing from KEMP Technologies Date: February 2016 Author: Tony Palmer, Senior Lab Analyst, Vinny Choinski, Senior Lab Analyst, and Jack Poller, Lab Analyst

More information

Achieving Nanosecond Latency Between Applications with IPC Shared Memory Messaging

Achieving Nanosecond Latency Between Applications with IPC Shared Memory Messaging Achieving Nanosecond Latency Between Applications with IPC Shared Memory Messaging In some markets and scenarios where competitive advantage is all about speed, speed is measured in micro- and even nano-seconds.

More information

Next Generation Firewalls and Sandboxing

Next Generation Firewalls and Sandboxing Next Generation Firewalls and Sandboxing Joe Hughes, Director www.servicetech.co.uk Summary What is a Next Generation Firewall (NGFW)? Threat evolution Features Deployment Best practices What is Sandboxing?

More information

NetScaler VPX FAQ. Table of Contents

NetScaler VPX FAQ. Table of Contents NetScaler VPX FAQ Table of Contents Feature and Functionality Frequently Asked Questions... 2 Pricing and Packaging Frequently Asked Questions... 4 NetScaler VPX Express Frequently Asked Questions... 5

More information

VDI s Fatal Flaw V3 Solves the Latency Bottleneck

VDI s Fatal Flaw V3 Solves the Latency Bottleneck VDI s Fatal Flaw V3 Solves the Latency Bottleneck A V3 Systems White Paper Table of Contents Executive Summary... 2 Section 1: Traditional VDI vs. V3 Systems VDI... 3 1a) Components of a Traditional VDI

More information

Silver Peak The WAN Optimization Vendor of Choice for Offsite Data Replication

Silver Peak The WAN Optimization Vendor of Choice for Offsite Data Replication Silver Peak The WAN Optimization Vendor of Choice for Offsite Data Replication Why is Silver Peak the leader in data center WAN optimization? Silver Peak has a variety of architectural advantages that

More information

Securing Virtualization with Check Point and Consolidation with Virtualized Security

Securing Virtualization with Check Point and Consolidation with Virtualized Security Securing Virtualization with Check Point and Consolidation with Virtualized Security consolidate security gateways with full power of Software Blades with Check Point Virtual Systems (VSX) secure virtualized

More information