Reinventing Network Security, One Firewall at a Time. Chris King Director, Product Marketing

Transcription

1 Reinventing Network Security, One Firewall at a Time Chris King Director, Product Marketing

2 Agenda About Palo Alto Networks The Evolving Nature of Applications Why Traditional Security Solutions No Longer Work How Next-Generation Firewalls are Reinventing Network Security Conclusions Learn More

3 About Palo Alto Networks Palo Alto Networks is the Network Security Company World-class team with strong security and networking experience - Founded in 2005 by security visionary Nir Zuk Builds next-generation firewalls that identify / control applications - Restores the firewall as the core of the enterprise network security infrastructure - Innovations: App-ID, User-ID, Content-ID Global footprint: 2,200+ customers in 60+ countries, 24/7 support

4 Applications Have Changed Firewalls Have Not The gateway at the trust border is the right place to enforce policy control SaaS Collaboration / Media Personal Sees all traffic Defines trust boundary But applications have changed Ports Applications IP addresses Users Headers Content Need to Restore Application Visibility & Control in the Firewall

5 Applications Carry Risk Applications can be threats P2P file sharing, tunneling applications, anonymizers, media/video Applications carry threats SANS Top 20 Threats majority are application-level threats Application-level threats result in major breaches Pfizer, VA, US Army

6 Enterprise 2.0 Applications and Risks Widespread Palo Alto Networks latest Application Usage & Risk Report highlights actual behavior of 1M+ users across more than 340 organizations - Enterprise 2.0 applications like Twitter, Facebook, and SharePoint continue to rise for both personal and business use. Facebook and Google extend dominance outside of core applications - Tunneling and port hopping are common - Bottom line: all had firewalls, and most had IPS, proxies, & URL filtering but none of these organizations could control what applications ran on their networks 100% M ostfrequently Detected Applications thatcan Hop Ports 80% 60% 40% 83% 78% 77% 73% 60% 60% 55% 54% 51% 42% 20% 0% Sharepoint itunes M S RPC Skype BitTorrent M SN Voice Ooyla M ediafire em ule Team view er

7 Circumvention Tools Get Around Security

8 Sprawl Is Not The Answer Internet Complex to manage Expensive to buy and maintain Firewall helpers have limited view of traffic Ultimately, doesn t solve the problem

9 The Right Answer: Make the Firewall Do Its Job New Requirements for the Firewall 1. Identify applications regardless of port, protocol, evasive tactic or SSL 2. Identify users regardless of IP address 3. Scan application content in real-time (prevent threats and data leaks) 4. Granular visibility and policy control over application access / functionality 5. Multi-gigabit, in-line deployment with no performance degradation

10 Redefine Network Security and Save Money! Capital cost replace multiple devices Legacy firewall, IPS, URL filtering device Cut by as much as 80% Hard operational expenses Support contracts Subscriptions Power and HVAC Cut by as much as 65% Save on soft costs too Rack space Deployment/integration, Headcount, training, help desk calls Varies by Company

11 Conclusions Applications have evolved but your security infrastructure has not Threats against the enterprise are increasingly targeted and use applications as conduits for attack Traditional network security solutions are unable to stop these threats Sprawl is not the answer Next-generation firewalls have emerged to redefine network security Compelling ROI

12 Learn More Attend our afternoon session Social Networking in the Enterprise: A Delicate Balance Between Security and Enablement See a product demo in our booth (#417) Visit us online: Call us for a complimentary network security assessment:

13 Thank You Chris King Director, Product Marketing