virtual UTM Cyberoam Appliances Enterprise/MSSP Security-in-a-Box Security in a Virtual Office or Office-in-a-Box S e c u r i n g Y o u

Transcription

1 Cyberoam virtual UTM Appliances Security in Virtual Data Center Enterprise/MSSP Security-in-a-Box Security in a Virtual Office or Office-in-a-Box Take Control of Your Security Infrastructure! Virtualization is taking organizations beyond the boundaries of their physical network infrastructure, empowering them to leverage their resources better and more flexibly, while quickly responding to the changing needs of their business. While higher efficiencies and lower total cost are few benefits of virtualization, security in virtual environments is an issue that organizations are struggling with, in the wake of virtualization! Cyberoam Virtual UTM Appliances Get complete control of your security infrastructure with Cyberoam virtual UTM appliances that offer industry-leading network security for your virtualized environments. Cyberoam virtual UTMs give you the flexibility to deploy a mix of physical and virtual appliances in your network, which can be managed centrally. With the ability to scan all traffic in the virtual environment, Cyberoam virtual UTM protects virtual networks from attacks on hypervisor management console, hypervisor & Guest OS, virtualized web-facing applications and servers and allows organizations to secure Zero Trust Networks with its comprehensive security features in virtualized form. Get a complete virtual security solution with Cyberoam virtual UTM, virtual Cyberoam Central Console and Cyberoam iview Logging & Reporting software. S e c u r i n g Y o u If you are an MSSP, reduce your operational and capital expenditure, and serve your customers better and at reduced costs, by having elastic network infrastructure utilization with virtualization. If you are an SMB with virtual infrastructure, you can now extend your existing infrastructure to include security for your network without the need to add hardware security appliances, thus saving cost and time.

2 Benefits Security for dynamic virtual environments and Cloud Choice of individual or mixed virtual and physical network infrastructure Single virtual appliance to deploy and manage for comprehensive network security and single vendor to contact Easy scale-up of security infrastructure as business grows Deployment flexibility with licensing based on number of vcpus Management and display of regulatory compliance UTM Security features Stateful Inspection Firewall Gateway Anti-Virus and Anti-spyware Intrusion Prevention System Gateway Anti-spam Web Filtering Application Visibility & Control Web Application Firewall Virtual Private Network (VPN) IM Archiving & Controls Bandwidth Management On-Appliance Reporting Identity-based Security Take control of what you want, how much you want, how you want it, with Cyberoam virtual UTMs! WHAT you want Virtual Security solution: Cyberoam virtual UTM appliances give complete control of security in virtual data-centers, Security-in-a-Box and Office-in-a- Box set-ups to organizations. Get comprehensive security in virtualized environments without the need for deploying a hardware security appliance anymore. Support for infrastructure scale-up as the business grows: By providing a virtual network security solution to organizations and MSSPs, Cyberoam virtual UTMs allow security in virtual networks to be scaled up as the business needs of organizations/mssp customers grow. HOW MUCH you want Easy Upgrade: Cyberoam virtual UTM appliances can be upgraded in no time and with maximum ease, using a simple activation key, to match the growing business needs of organizations/mssp customers. Benefit of shared infrastructure: By capitalizing on lean and peak periods of activities in the networks, organizations and MSSPs can optimize the resource utilization in their own/customer networks, using Cyberoam s security in virtualized form. HOW you want Choice of Virtual and Physical Infrastructure: Organizations and MSSPs get the flexibility to choose between individual and a mix of physical and virtualized environments without worrying about security, with Cyberoam s security solution for both physical and virtualized environments. Deployment Flexibility: The licensing model for Cyberoam virtual UTM appliances is based on the number of vcpus, giving deployment flexibility to organizations and MSSPs, unlike most competitor models that are based on concurrent sessions and number of users. Cyberoam virtual UTMs allow organizations to get maximum benefits of Cyberoam s multi-core processing architecture by flexibly allotting vcpus from the virtual infrastructure to the virtual UTM appliance. No Hard Limits on Usage: If the number of network users in organizations or MSSP customer networks increase beyond the recommended number for a given model, Cyberoam virtual UTMs continue to secure these networks, allowing organizations and MSSPs to upgrade to a higher model only when they want to.

3 Cyberoam Offers 1.Protection for Virtualized networks Inter-VM traffic scanning External hardware security devices are incapable of scanning inter-vm traffic, creating blind spots in traffic within the virtualized environments. With their ability to scan Inter-VM traffic, Cyberoam virtual UTMs remove the network blind spots and allow granular firewall and security policies over inter-vm traffic. Hyperjacking & Hypervisor vulnerabilities In cases where the hypervisor management console is placed in live production virtual environment due to lack of segmentation within virtual environments, the virtual networks are prone to attacks that exploit vulnerabilities on software layers like the hypervisor management console, hypervisor & Guest OS, putting the security of entire virtual network at risk. Cyberoam virtual UTMs enable administrators to segment the hypervisor management console in DMZ and route all traffic through Cyberoam virtual UTM appliances. The Intrusion Prevention System on Cyberoam virtual UTMs scans Inter-VM traffic, VM to hypervisor traffic and ensures threat-free traffic. Web Application Firewall protection on Cyberoam virtual UTM blocks attacks that exploit vulnerabilities in the virtualized web applications. VM1 DMZ1 1 Port B VM2 Virtual Infrastructure VM3 VM5 Cyberoam virtual UTM DMZ2 Port C VM4 2 Port D 3 Hypervisor Management Console DMZ / SIZ (Secure Internal Zone) Separation of duties In case of external network security solutions, a level of Separation Of Duties (SOD) is achieved by default because the functions are hosted on separate physical systems that are managed and configured by separate teams. However, in case of collapsed DMZ, loss of SOD by default between security/network security and operations leads to security risks and potential conflict of interest between the roles. Role-based administrator controls in Cyberoam virtual UTM allow separation of administrator duties. Cyberoam offers logs of administrator events and audit trails with its Layer 8 identity-based security and on-appliance reporting. Zero Trust Networks In an office-in-a-box setup, since the virtual infrastructure hosts the entire user workgroup, User-Identity based control and visibility becomes even more important. Cyberoam s Layer 8 Identity-based security policies over user authentication, service authorization and reporting (AAA) secure the Zero Trust virtual networks. Deployed at the perimeter or within the virtual infrastructure, Cyberoam virtual UTMs offer visibility and user-based access control in the virtualized environment. Ensure consistent security policy across your network virtual and physical, with Cyberoam. 2.Comprehensive security: Cyberoam virtual UTMs simplify the security for your virtual environments by consolidating multiple security functions in a single virtual appliance. Get all security features found in Cyberoam s hardware appliances, viz. firewall, VPN, Gateway Anti-Spam, Gateway Anti-Virus, IPS, Web Application Firewall, Web Filtering, Application Visibility & Control and much more, to make your virtualized environments as secure as your physical network infrastructure. 3.Easy to deploy Cyberoam virtual UTMs are easy to deploy with a licensing model that provides the flexibility to allot the number of vcpus for Cyberoam virtual UTM based on your requirements. A simple key activation to upgrade to higher models and no hard limits on crossing recommended usage limits make Cyberoam virtual UTMs easy to deploy in your virtualized set-ups. 4.Compliance Management In case of collapsed DMZs that hold sensitive information and office-in-a-box setup, compliance and privacy requirements become difficult to achieve, especially in a virtual environment. By segregating and securing traffic and data between and around your virtual entities, Cyberoam virtual UTMs help you stay regulatory compliant. The integrated logging and reporting feature offers in-depth reports of activities in your virtual infrastructure to support your organization to display compliance. 5.Centralized Management of Hardware and Virtual appliances Centrally manage your physical and virtual infrastructure using a single interface with Cyberoam Central Console, available in hardware and virtual forms. Reduce the expense of separate management consoles for your physical and virtual environment needs as well as ensure centralized, consistent and quick security actions across your network.

4 Scenarios Cyberoam virtual UTMs offer security in the following set-ups: Virtual Data Center MSSP/ Enterprise Security-in-a-box Customer/BO n Customer/BO 2 Customer/BO 1 BO = Branch office Office-in-a-box Support for virtual platforms: VMware ESX/ESXi VMware Workstation VMware Player Hyper-V Model range CRiV-1C (Support upto 1 vcpu) CRiV-2C (Support upto 2 vcpu) CRiV-4C (Support upto 4 vcpu) CRiV-8C (Support upto 8 vcpu) CRiV-12C (Support upto 12 vcpu) Get a 30-day FREE evaluation of Cyberoam virtual UTM appliance.visit Awards & Certifications VPNC CERTIFIED VPNC CERTIFIED Basic Interop AES Interop Portal Exchange Firefox JavaScript Basic Network Extension Advanced Network Extension BEST BUY PC PRO RECOMMENDED EDITOR S C H O I C E RECOMMENDS Cyberoam Inc. 505 Thornall Street, Suite # 304, Edison, NJ Tel : Fax : India 901, Silicon Tower, Behind Pariseema Building, Off, C.G.Road, Ahmedabad , INDIA, Tel: Toll Free Numbers USA : India : APAC/MEA : Europe : S e c u r i n g Y o u sales@cyberoam.com Registered Trademark of Cyberoam Technologies Pvt. Ltd.

5 Cyberoam Virtual UTM Appliances Tech Sheet Take Control of Your Security Infrastructure! Cyberoam virtual UTM appliances give complete control of security in virtual data-centers, Security-in-a-Box or Office-in-a-Box set-ups, to organizations and MSSPs. With virtualized security appliance for virtual environments, Cyberoam enables scanning of inter-vm traffic, allowing granular firewall and security policies over inter-vm traffic, and offers comprehensive network security in virtualized environments to organizations without the need for deploying a hardware security appliance anymore. Cyberoam virtual UTMs allow organizations and MSSPs to optimize the resource utilization in their own/customer networks by capitalizing on lean and peak periods of activities in the networks. Cyberoam s licensing model for its virtual UTM appliances is based on the number of vcpus, that gives deployment flexibility to organizations and MSSPs, unlike most competitor models that are based on concurrent sessions and number of users. Organizations get maximum benefits of Cyberoam s multi-core processing architecture with virtual UTM appliances by flexibly allotting vcpus from the virtual infrastructure to the virtual UTM appliance. With an easy upgrade feature using a simple activation key, organizations and MSSPs can match the growing needs of their business and customers in no time. Feature Specifications Stateful Inspection Firewall - Layer 8 (User - Identity) Firewall - Multiple Security Zones - Access Control Criteria (ACC) : User-Identity, Source and Destination Zone, MAC and IP address, Service - UTM policies - IPS, Web Filtering, Application Filtering, Antivirus, Anti-spam and Bandwidth Management - Application (Layer 7) Control and Visibility - Access Scheduling - Policy based Source and Destination NAT - H.323, SIP NAT Traversal q VLAN Support - DoS and DDoS attack prevention - MAC and IP-MAC filtering and Spoof prevention Gateway Anti-Virus & Anti-Spyware - Virus, Worm, Trojan Detection and Removal - Spyware, Malware, Phishing protection - Automatic virus signature database update - Scans HTTP, HTTPS, FTP, SMTP, POP3, IMAP, IM, VPN Tunnels - Customize individual user scanning - Self Service Quarantine area - Scan and deliver by file size - Block by file types - Add disclaimer/signature Gateway Anti-Spam ## - Inbound/Outbound Scanning - Real-time Blacklist (RBL), MIME header check - Filter based on message header, size, sender, recipient - Subject line tagging - Redirect spam mails to dedicated address - Image-spam filtering using RPD Technology - Zero hour Virus Outbreak Protection - Self Service Quarantine area - IP address Black list/white list - Spam Notification through Digest - IP Reputation-based Spam filtering Intrusion Prevention System - Signatures: Default (4500+), Custom - IPS Policies: Multiple, Custom - User-based policy creation - Automatic real-time updates from CRProtect networks - Protocol Anomaly Detection - DDoS attack prevention Web Filtering - Inbuilt Web Category Database - URL, keyword, File type block - Web Categories: Default(82+), Custom - Protocols supported: HTTP, HTTPS - Block Malware, Phishing, Pharming URLs - Category-based Bandwidth allocation and prioritization - Block Java Applets, Cookies, Active X - CIPA Compliant - Data leakage control via HTTP, HTTPS upload - Schedule-based access control - Custom block messages per category Application Filtering - Inbuilt Application Category Database Application Categories e.g. Gaming, IM, P2P, Proxy - Schedule-based access control - Block - P2P applications e.g. Skype - Anonymous proxies e.g. UItra surf - Phone home activities - Keylogger - Layer 7 (Applications) & Layer 8 (User - Identity) Visibility Web Application Firewall - Positive Protection model - Unique "Intuitive Website Flow Detector" technology - Protection against SQL Injections, Cross-site Scripting (XSS), Session Hijacking, URL Tampering, Cookie Poisoning etc. - Support for HTTP 0.9/1.0/1.1 - Extensive Logging and Reporting - Back-end servers supported: 5 to 200 servers Virtual Private Network - IPSec, L2TP, PPTP - Encryption - 3DES, DES, AES, Twofish, Blowfish, Serpent - Hash Algorithms - MD5, SHA-1 - Authentication: Preshared key, Digital certificates - IPSec NAT Traversal - Dead peer detection and PFS support - Diffie Hellman Groups - 1,2,5,14,15,16 - External Certificate Authority support - Export Road Warrior connection configuration - Domain name support for tunnel end points - VPN connection redundancy - Overlapping Network support - Hub & Spoke VPN support VPN - TCP & UDP Tunneling - Authentication - Active Directory, LDAP, RADIUS, Cyberoam (Local) - Multi-layered Client Authentication - Certificate, Username/Password - User & Group policy enforcement - Network access - Split and Full tunneling - Browser-based (Portal) Access - Clientless access - Lightweight VPN Tunneling Client - Granular access control to all the enterprise network resources - Administrative controls - Session timeout, Dead Peer Detection, Portal customization - TCP-based Application Access - HTTP, HTTPS, RDP, TELNET, SSH Instant Messaging (IM) Management - Yahoo and Windows Live Messenger - Virus Scanning for IM traffic - Allow/Block: Login, File Transfer, Webcam, One-to-one/group Chat - Content-based blocking - IM activities Log - Archive files transferred - Custom Alerts Bandwidth Management - Application and User Identity based Bandwidth Management - Category-based Bandwidth restriction - Guaranteed & Burstable bandwidth policy - Application & User Identity based Traffic Discovery - Multi WAN bandwidth reporting User Identity-based and Group-based Controls - Access time restriction - Time and Data Quota restriction, P2P and IM Controls - Schedule-based Committed and Burstable Bandwidth Networking - Automated Failover/Failback, Multi-WAN - WRR based Load balancing - Policy routing based on Application and User - IP Address Assignment - Static, PPPoE, L2TP, PPTP & DDNS Client, Proxy ARP, DHCP server, DHCP relay - Supports HTTP Proxy, Parent Proxy with FQDN - Dynamic Routing: RIP v1& v2, OSPF, BGP, Multicast Forwarding * High Availability - Active-Active - Active-Passive with state synchronization - Stateful Failover - Alerts on Appliance Status change Administration and System Management - Web-based configuration wizard - Role-based Access control - Firmware Upgrades via Web UI - Web 2.0 compliant UI (HTTPS) - UI Color Styler - Command line interface (Serial, SSH, Telnet) - SNMP (v1, v2, v3) - Multi-lingual support: Chinese, Hindi, French, Korean - Cyberoam Central Console (Optional) - NTP Support User Authentication - Internal database - Active Directory Integration - Automatic Windows Single Sign On - External LDAP/RADIUS database Integration - Thin Client support - Microsoft Windows Server 2003 Terminal Services and Citrix XenApp - RSA SecurID support - External Authentication - Users and Administrators - User/MAC Binding - Multiple Authentication servers Logging and Monitoring - Graphical real-time and historical Monitoring - notification of reports, viruses and attacks - Syslog support - Log Viewer - IPS, Web filter, Anti-Virus, Anti-Spam, Authentication, System and Admin Events On-Appliance Cyberoam - iview Reporting - Integrated Web-based Reporting tool - Cyberoam-iView drilldown reports Compliance reports - Historical and Real-time reports - Multiple Dashboards - Username, Host, ID specific Monitoring Dashboard - Reports - Security, Spam, Virus, Traffic, Policy violations, VPN, Search Engine keywords - Multi-format reports - tabular, graphical - Exportable formats - PDF, Excel - Automated Report Scheduling 1 IPSec VPN Client - Inter-operability with major IPSec VPN Gateways - Supported platforms: Windows 2000, WinXP 32/64-bit, Windows bit, Windows /64-bit, Windows Vista 32/64- bit, Windows 7 RC1 32/64-bit, Windows 8 RC1 32/64-bit - Import Connection configuration Certification - ICSA Firewall - Corporate - Checkmark UTM Level 5 Certification - VPNC - Basic and AES interoperability - IPv6 Ready Gold Logo 1 Additional Purchase Required * Needs e1000/e1000e drivers emulation Cyberoam VIEW TM I sales@cyberoam.com

6 Techsheet Cyberoam Virtual UTM Appliances CRiV-1C CRiV-2C CRiV-4C CRiV-8C CRiV-12C Technical Specifications Hypervisor Support vcpu Support (Min / Max) # Network Interface Support (Min / Max ) Memory Support (Min / Max) Vmware ESX/ESXi 4.0/4.1/5.0, VMware Workstation 7.0/8.0/9.0, VMware Player 4.0/5.0, Microsoft Hyper-V 2008/ / 1 1 / 2 1 / 4 1 / 8 1 / 12 System Performance* Firewall Throughput (UDP) (Mbps) Firewall Throughput (TCP) (Mbps) New sessions/second Concurrent sessions IPSec VPN Throughput (Mbps) No. of IPSec Tunnels VPN Throughput (Mbps) WAF Protected Throughput (Mbps) Anti-Virus Throughput (Mbps) IPS Throughput (Mbps) UTM Throughput (Mbps) Authenticated Users/Nodes 1,500 1,200 25, , ,000 2,500 30, , , , ,500 3,000 40,000 1,200, , ,000 1,200 1,000 4,000 3,500 50,000 1,500, , ,400 2,200 1,800 1,400 4,000 4,000 60,000 1,750, , ,550 2,450 1,900 1,550 Scenarios Virtual Data Center MSSP/ Enterprise Security-in-a-box Customer/BO n Customer/BO 2 Customer/BO 1 BO = Branch office Office-in-a-box Get a 30-day FREE Evaluation of Cyberoam virtual UTM. Visit Actual performance may vary depending on the real network traffic environments. Performance values given above were observed using server with Intel Xeon E5645 (2.4 GHz) and E1000E Ethernet Drivers, running VMware version ESXi 5.0 (Update 1) with 4 GB vram assigned to CR Virtual UTM Appliance. # The Number depends on the Hypervisor you are using. *Antivirus, IPS and UTM performance is measured based on HTTP traffic as per RFC 3511 guidelines. Actual performance may vary depending on the real network traffic environments. ## Inbound and Outbound Spam filtering cannot be used simultaneously. Toll Free Numbers USA : India : APAC/MEA : Europe : Unified Threat Management I sales@cyberoam.com Copyright Cyberoam Technologies Pvt. Ltd. All Rights Reserved PL