Navigate Securely with Check Point and FishNet Security

Transcription

1 Navigate Securely with Check Point and FishNet Security

2 Introductions Dan Thormodsgaard, VP of Solutions Architect for FishNet Security Dan Thormodsgaard, Director of Solutions Architecture. Dan Thormodsgaard has over two decades of experience in the information technology industry and engineering field. As the director of solutions architecture for FishNet Security, Thormodsgaard is a strategic advisor of Fortune 50, enterprise accounts and government institutions. He supports customers' long-term security infrastructure initiatives, evaluates security tools and provides technology recommendations for customers and FishNet Security's partner program. John Bloomer, Security Engineer for Check Point Software Technologies John Bloomer is the security engineer supporting the largest single US partner out of Kansas City, Missouri for Check Point Software Technologies, Inc. the world wide leader in securing the internet. For the past 16 years John has helped to design and implement cutting edge solutions for sharing information quickly and securely. From special projects for the United States Navy to the PCS network for Sprint, John has been a part of some of the most exciting advances in sharing data and has done so with a focus on securing that information. Having served in roles ranging from operations to CISO, John brings a perspective of not only technical acumen but also the concerns of management and the business to the table.

3 Agenda FishNet Security Overview MSSP Services Support Services Check Point Training Check Point Integration Services Check Point Enterprise Grade IPS DLP Active Directory Integration Q & A

4 FishNet Security Overview National Presence- Local Support 28 National Office Locations 1 Office in the UK

5 MSSP Services FishNet Security Check Point Managed Services Verticals Financial Services Retail Manufacturing Healthcare Education 50 Active Contracts MSSP Portal 7x24x365 MSSP P1 Environment

6 Support Services 30 full-time support engineers 25 are Check Point Certified 55 Check Point Certifications Proactive Meetings with clients 750 Support Customers 24x7x365 Support Ticketing Phone Web or Check Point Cases in 2010 CRM Integration with Ticketing System Internal and External View

7 Check Point Training Services 10 Check Point ATC Locations Customized Training 15 Different Check Point Classes Enroll online Training Credits

8 Check Point Integration Services 48 Certified Check Point Engineers National Coverage for Check Point Experienced Engineers on all Check Point Products Crossbeam Certified Engineers National Lab for testing and POC Performance testing tools Check Point Appliances Crossbeam X80 FN Appliances

9 Navigate Securely Through Uncharted Territory with Check Point John Bloomer, CISSP 2011 Check Point Software Technologies Ltd. [PROTECTED] All rights reserved.

10 Industry Leading IPS Check Point s New R75.20 Release Industry proven protection 2

11 Evolution of IPS 3

12 Too much noise! 4

13 Evolution of IPS 5

14 Swiss Cheese! 6

15 Evolution of IPS 7

16 How do we move forward? Given that the line between next-gen firewalls and UTM is heavily blurring, we anticipate a consolidation of firewalls and IPS to create an even more advanced multifunction security gateway. Forrester Research Inc. 8

17 Demands of the market As the firewall market continues to evolve, other security functions, such as network IPSs, will also be provided within a next-generation firewall. The next-generation firewall market will eventually subsume the stand-alone network IPS appliance market at the enterprise edge. March 15, Gartner, Magic Quadrant for Enterprise Network Firewalls 9

18 Evolution of IPS 10

19 Unifying Dedicated and Integrated IPS SmartCenter Single IPS Management and SmartEvent Integrated IPS Check Point IPS Engine IPS Software Blade IPS Software Blade Deploy on Power-1, UTM-1 and Open Server GWs IPS-1 Dedicated Blade Dedicated IPS Deploy dedicated appliances Integrated HW Bypass IDS via IPS-1 SPAN/TAP Open Signatures IPS Update Services IPS Protection Updates Flexibility to deploy IPS on a gateway or a dedicated IPS appliance! Single, unified IPS management and IPS Update Services increases security and reduces total costs! 11

20 But Don t take my word for it Check Point has completed testing by NSS Labs, excelling in the industry's most comprehensive third-party intrusion prevention (IPS) group testing to date - achieving 97.3% security effectiveness and NSS Labs' Recommended rating. 12

21 But Don t take my word for it In the recent NSS Labs 2011 Firewall Group Test, Check Point was the only vendor to achieve 100% in security effectiveness and pass all performance tests on the first try earning the only Recommend rating. 13

22 Industry Leading Threat Coverage! #1 in Microsoft application threat coverage in 2008, 2009 and 1H 2010! #1 in Adobe Reader and Acrobat threat coverage in 2009 and 1H 2010! 14

23 Managing & Controlling Security Incidents Graphically monitor only what is important in Real time Prevent critical security events associated with critical business assets Manage High Volume of IPS Events Analyze Easily isolate important, actionable information using powerful forensic analysis tools. Meet compliance and management information needs with unified reporting and real time activity graphs for IPS Detect 15

24 SmartEvent Intro Visibility & Control 16

25 Expanded Data Loss Prevention Check Point s New R75.20 Release Prevent data loss throughout the organization 17

26 Check Point Data Loss Prevention Inspect Sensitive data leaving organization in real time Prevent Data loss by involving user Check Point DLP Makes data loss prevention work 18

27 Inside the Organization Outside the Organization External DLP External and Internal DLP (With Exchange Integration) 19

28 User Decision Learning 20

29 Over 500 out-of-the-box data types Even easier to get started with over 500 of the box data types, including: PCI, HIPAA, GLBA, SEC related Over 150 new data types. 21

30 Examples new data types 22

31 Identity Access Blade Check Point s New R75.20 Release User level access control across all blades 23

32 Identity Awareness Software Blade Granular Security Policy per User, Machine and Location Identity awareness softwareblades 24

33 Best Practice Managed Assets Data Center Contractor Corporate Laptop Corporate Network IP: User: John Morgan HR / Server Finance_Group Machine: John_XP Finance Server Guest Internal Firewall IP: Guest Name: Anna Smith PDA / SmartPhones AD /Directory Perimeter Firewall IP: Web Server User: Pool Frank Gore / DMZ Marketing_Group Application: FaceBook Internet 25

34 Access Roles Easy to setup Users and Groups could be fetched from the AD directly Across all blades i.e. Firewall, Application Control 26

35 Different Users Have Different Needs Marketing needs to upload a product demo But IT wants to conserve bandwidth Should be allowed? Blocked? Support User Needs by Engaging End-Users 27

36 Identity Sources Clientless Captive Portal Light Agent Flexible options to obtain Users Identity 28

37 Identity Sources Clientless Captive Portal Light Agent IP to mapping Connections Active Directory Simple and Fast Deployment No agent required on endpoint and Active Directory 29

38 Identity Sources Clientless Captive Portal Light Agent Web Portal redirect Internet Data Center Restrict Guest access Provide secure access for non-domain endpoints 30

39 Identity Sources Clientless Captive Portal Light Agent User and Machine Authentication (SSO Kerberos) Stronger security with User and Machine Identity SSO and IP spoofing prevention 31

40 Taking the next step 32

41 Questions? 33

42 Thank you Check Point Software Technologies Ltd. [PROTECTED] All rights reserved.