Future-ready Security

Transcription

1 Future-ready Security Justinas Valentukevičius Channel Manager Baltics Unified Threat Management

2 Agenda of Presentation Let s meet - Brief introduction to Cyberoam Next generation firewall or maybe Next generation UTM Layer 8, WAF and other nice features in Cyberoam UTM Announcement of NG Series and Virtual UTM Technical live DEMO later today 15:15 PM

3 About Cyberoam Elitecore technologies founded in 1999 Cyberoam UTM introduced in 2006 (Baltics in 2010) 800+ Employees Sales, Distribution Channel and Customers across 110+ Countries Among the Top 3 UTM players in Gartner Patent Pending Identity-based Management

4 Cyberoam s Holistic IT Security Portfolio Securing the IT network Unified Threat Management Centralized security management for remote /branch offices & clients Network Monitoring & Analysis & Open Source Virtual UTM (from December 2012)

5 Cyberoam pagal Gartner 2012 Magic Quadrant for Unified Threat Management

6 Evolution

7 Seriously, is it enough??

8 Evolution of Network Security Trends in Security Basic security began with firewalls As threats increased, other solutions were introduced Virus attacks rose in number and intensity Spam rose Slammer fueled the need for Intrusion Detection & Prevention High number of employees start accessing the Internet Connectivity to branches, partners and remote workers Blended threats emerge to exploit extensive Internet usage 6 Slammer Average Firewalls spam % business Hit enjoyed on messages s Saturday, a monopoly per contained January day until viruses the starting 25, 18.5 % 1 Time IBM 2003, systems of 5 employees the to be infected view online with spyware pornography spent deleting st century by this year at work them Forrester 2.8 That s Lost Initial mintues. revenue a Firewalls staggering spilled were cost over Stateless of halfway $281-$304 per Firewalls into Average 65 PC % 70 the companies percent next which time week could lost say not in a they control day will 51.8 invest the of adult websites are mts hit in initiation anti-spyware between became of communication 9 tools am more and and prevalent 5 upgrades pm Total 14 Phishing Later cost Stateful of the % spam mails recipients grew became bailout: 5,000 more more actually % last prevalent than $1 billion read year spam Pharming percent makes an of employees' entry Till today, no accountability has been 4 % Internet buy established products activity advertised not business by spam 21 % related spam in Jan 2005 was porn

9

10 Where are Networks moving to? High speed Internet (Baltics among TOP countries) More devices per user More devices connecting to Internet (BYOD) More web-applications being accessed Increase in usage of data

11 What is usual here, in Baltics? Usually we are really well technologically educated and so we understand the need of Enterprise solutions and we need the best! However Usually we are relatively small in size Usually we are quite limited with our budget WHAT WE ARE LOOKING FOR IS BEST TECHNOLOGY FOR THE AFFORDABLE PRICE!

12 Next generation security

13 Gartner's Definition of the Next Generation Firewall (NGFW) A wire-speed integrated network platform that performs deep inspection of traffic and blocking of attacks. Next Generation Firewall indicates the necessary evolution of a firewall to deal with the changing IT environment in businesses and the consequent evolution in security threats posing to bring these very businesses down. NGFW created a buzz in security circles What is so different about them?

14 Next Generation Firewall Standard first-generation firewall capabilities like packet filtering, NAT, stateful protocol inspection and VPN capabilities Integrated, rather than merely collocated, network intrusion prevention Application awareness and full stack visibility Extra firewall intelligence Support upgrade paths for integration of new information feeds and new techniques to address future threats Cyberoam Next Generation UTM FW with SI and integrated with IPS, VPN, Web/application Filtering, IM Controls and Web Application Firewall + Providing Anti Virus and Anti Spyware, Anti Spam, Bandwidth Management, Multi Link Management, HA and On-appliance Reporting. IPS tightly integrated with FW. Policy creation of multiple features in a single FW interface. + All security modules are bound together keeping User Identity as the base. Granular application control Real-time Visualization Secure Application Layer Vulnerabilities Network Visibility based on users and not IP Addresses Integration with AD, LDAP and RADIUS Servers. Integrates hardware acceleration and automation into a wide range of packet processing and application-specific functions + Virtual UTM series consolidates network security in virtualized environments

15 Cyberoam Unified Threat Management Gateway Integrated security over single platform Unique Identity-based Layer 8 approach penetrates through each security module

16 Human approach in Security Numbers Hard & Boring to remember! Names - Used daily!!!

17 Cyberoam Layer 8 AAA Advantage Cyberoam Authenticates Cyberoam Authorizes Cyberoam Audits User Login User Name IP Address MAC Id Session Id Internet surfing quota Identity - based Schedule control Logs + Reports Security Policies Compliance Reports Web Filtering Application Visibility & Control QoS / Bandwidth Management IM Controls

18 Fusion Technology driven SI Firewall - Interface for achieving Unified Security Rules for all security features from firewall page Identity-based policies enable security, connectivity, productivity - Easy to configure with Next-Gen UI Easy navigation, custom controls, intuitive interface - Fewer security errors - Increases security - Enhances administrative productivity - Shorter learning curves : Indicates a feature that is either unique to Cyberoam or it was first introduced in the Industry by Cyberoam

19 Virtual Private Network (VPN) - Anywhere, any device secure remote connectivity - Supports IPSec, L2TP, PPTP technologies SSL-VPN - Client-type independent Web access mode - Application access mode - Client mode Threat Free Tunneling (TFT) Technology Scans traffic entering VPN tunnel for: - Malware - Spam - Inappropriate content - Intrusion attempts - Maintains secure endpoint and network environments

20 Mobile VPN for ios and Android devices Cyberoam s Layer 8 Identity based security extended to mobile devices Securely connect your iphone, ipad and Android devices to your corporate network through VPN ios Android IPSec VPN (New) L2TP VPN PPTP VPN L2TP VPN (New)

21 Cyberoam CISCO VPN for ios

22 SSL VPN user portal

23 Intrusion Prevention System - Layer 8 and IPS Tuner driven Cyberoam IPS Identity-based IPS policies per user or group Identity-based alerts and reports - Visibility into applications usage - User, Source, Destination, Usage - Overview of threat status - Top alerts, top attackers, top victims signatures broadest security cover Internet Threat Response Team Allows multiple IPS policies

24 Gateway Anti-Malware - 4 million+ signatures - Bi-directional scanning of web & - Self-service Virus Quarantine - Reduced window of vulnerability Broadest security cover against all malware - Scans HTTP, FTP, SMTP, POP3 HTTPS, IMAP Instant Messenger traffic - Layer 8 Impact Identity-based virus reports - Instant visibility into attacker/victim Identity-based Quarantine policies Anti-Virus Anti-Spyware Indicates feature offered only by top-rated UTMs

25 Gateway Anti-Spam - IP Reputation Filtering Blocks 85% of incoming messages at gateway - Saves bandwidth - Near 98% spam detection - False Positive rate of 1 in a million Reduces fear of losing business s - Self-Service quarantine area - User-based Spam Digest Frees administrator time & management - Manage recipients Data leakage prevention and archiving Premium

26 Web Application Firewall Subscription Firewalls/IPS cannot protect a web application from unknown threats Cyberoam WAF Features include Positive protection model and No Signature Tables Intuitive website flow detector automatically adapts to website changes Protects against OWASP top 10 vulnerabilities SSL Offloading Monitoring & Reporting

27 Cyberoam iview On-Appliance Logging & Reporting - Ability to log and report activities - LAYER 8 - Identity-based logging and reporting Pinpoints the user - Security Management iview dashboard- Shows network attacks on single screen Drill-down reports 3rd level drill-down for attack details Reports - Log Management - Compliance Management HIPAA, PCI DSS, GLBA, and more - Forensic Analysis

28 Dual Dashboard Traffic and Security Dashboard Traffic Dashboard

29 Dual Dashboard Traffic and Security Dashboard Security Dashboard

30 Dual Dashboard Traffic and Security Dashboard Security Dashboard N/A: Private IP Others: Rest of records

31 Country Maps for Source/Destination Traffic Graphical overview of Data transfer and Risk level

32 Web & Content Filtering - Industry s most comprehensive URL database 82+ categories 44 million+ URLs Premium - On-appliance web category database Faster access Surfing pattern privacy - Controls access to HTTP & HTTPS hosted websites Increases productivity

33 Identity based Technology - The Reason Application Based Control. Username / IP Address

34

35 IM MANAGEMENT & CONTROL Allow or block Skype Control access to leading Instant Messengers (Yahoo, Windows Live) Control over Chat, Webcam, File Transfer Log & monitor chat Filter content over IM: Blacklist certain keywords or regular expressions to prevent data leakage

36 Best of Breed Bandwidth Management/QoS - Application and Identity-based bandwidth allocation - Category wise Bandwidth management - Restrict Bandwidth usage for a combination of source, destination and service/service group - Schedule-based bandwidth allocation - Committed and burstable bandwidth

37 Identity Based Policies

38 Cyberoam UTM Product Range Enterprise - CR 2500iNG - CR 1500i - CR 1000i - CR 750ia - CR 500ia SME - CR 300i - CR 200i - CR 100ia - CR 50ia Small offices - CR 35ia - CR 25ia - CR 15i - CR 15wi

39 The Cyberoam NG Series and Virtualization Powerful Hardware Future-Ready Security Superior Quality Performance Leap Value for Money All-New Firmware

40 Cyberoam Certifications Premium Premium Anti-Virus Anti-Spyware Anti-Spam URL Filtering Firewall VPN IPS/IDP UTM Level 5: Cyberoam holds a unique & complete UTM certification ICSA Certified Firewall IPv6 Ready Member of Internet Watch Foundation ICSA Certified High-Availability VPNC Certified for Basic VPN & AES Interoperability

41 Reviews and Awards Cyberoam CR35ia outshines competitors in SOHO UTM Group Test

42 THANK YOU! Cyberoam Online Demo: (Username: guest, Password: guest) Contact information: Skype: justinas.cyberoam

43