Streamline your network security

Transcription

1 Streamline your network security Consolidated Dell SonicWALL Next-Generation Firewalls Integrated next-generation security appliances and services Highest performance Easy to set up, administer and use Central management and reporting Fewer components to buy and maintain One-stop vendor relationship Application intelligence, control and visualization Integrated SSL VPN and wireless capabilities with NGFW Virtual appliances

2 Origins of consolidated network security Firewalls need to evolve to be more proactive in blocking new threats, such as botnets and targeted attacks. 1 The security landscape Network security has evolved and point solutions have arisen to deal with them, ranging from content filtering to IPS to Integrated Next-Generation Firewalls. Management of multiple devices has become expensive and complex. Instead of buying, connecting and managing a loose patchwork of point solutions, now you can get all you need in one consolidated Next-Generation Firewall. Evolution of threats There has been a substantial increase in the volume, diversity and sophistication of threats, as attacks have evolved to a globally organized criminal activity. Vulnerabilities continue to expand as organizations adopt emerging technologies, buy or build new applications, and upgrade the ones they already have. Similarly, points of entry increase as businesses embrace user mobility, interconnectivity, and third-party access to networked systems. Organizations also must demonstrate compliance with the mounting collection of legislation and industry regulations. Industry definitions Gartner defines a Next-Generation Firewall as a wire-speed integrated network platform that performs deep inspection of traffic and blocking of attacks. 1 At minimum, Gartner states that it should provide: Non-disruptive, inline, bump-in-the-wire configuration Standard first-generation firewall capabilities, e.g., networkaddress translation (NAT), stateful protocol inspection (SPI), virtual private networking (VPN), etc. Integrated signature based IPS engine Application awareness, full stack visibility and granular control Capability to incorporate information from outside the firewall, e.g., directory-based policy, blacklists, white lists, etc. Upgrade path to include future information feeds and security threats SSL decryption to enable identifying undesirable encrypted applications Evolution of firewalls Over time, firewall technology has evolved from table-based stateful packet inspection to deep packet inspection of the entire packet payload. Early on, you would have needed to buy a firewall along with separate point solutions for other countermeasures. Eventually, consolidated Unified Threat Management firewalls emerged, which integrated features such as anti-virus, anti-spam and virtual private networking. Today, Next-Generation Firewalls take the process of network security consolidation even further, adding integrated capabilities for intrusion prevention, identity-based policy, and application intelligence and control. 1 Defining the Next-Generation Firewall, Gartner RAS Core Research Note G , John Pescatore, Greg Young, 12 October 2009, R

3 Consolidate your benefits Moving to an integrated Dell SonicWALL solution was very cost-advantageous for us. 2 A sum greater than its parts For most IT departments, consolidation is already a familiar concept. IT departments worldwide are doing more with less through consolidation, such as having fewer centralized data centers and using virtualization products to significantly reduce server count. Some organizations consider consolidation a business imperative. The same benefits apply to information security By consolidating network security functionality within integrated Next-Generation Firewall solutions, you can substantially reduce the cost and complexity of your security infrastructure while boosting effectiveness. Next-Generation Firewalls also free up resources to help address other emerging business-critical issues and projects. Consolidating with Next- Generation Firewalls can be remarkably beneficial, particularly when compared with traditional point product-based approaches to network security. Reduce infrastructure expense and complexity Secure internal and trans-gateway traffic Increase security Make security more efficient and effective Ease management and reporting Go green by using less power Activate features as needed to scale Dell SonicWALL helps consolidate network security more effectively What sets Dell SonicWALL Next-Generation Firewalls apart from other consolidated solutions is how well we enable you to maximize your gains. Specifically, we allow you to pursue a much greater degree of consolidation and, therefore, achieve a much greater return than would be possible with competing Next-Generation Firewall products by: Providing a broader set of countermeasures and related networking capabilities Ensuring the quality and robustness of the platform on which they operate Dell SonicWALL provides significant opportunity for consolidating several sets of capabilities within your Next- Generation Firewall appliance, including comprehensive gateway security, application intelligence and control, web content filtering, secure virtual private networking (VPN) and wireless security, as well as visualization and reporting. Dell SonicWALL also facilitates further consolidation benefits by offering additional security solutions that are deployable in virtual server environments. Cheap white box platforms cost way more in the long run. 2 Walter Woodward, network administrator at Lee s Summit R-7 School District 3

4 A consolidated solution Dell SonicWALL provides an extremely high level of protection and performance. 3 Rest assured that your network is protected When it comes to helping you sleep at night, you can count on Dell SonicWALL Next-Generation Firewalls. Dell SonicWALL is committed to delivering you the latest, most comprehensive layered protection available, so that you can manage your network security with confidence. Enhanced security Another advantage that a consolidated Next-Generation Firewall has over point products is the potential to deliver superior stopping power. By internally sharing and correlating the findings of individual countermeasures and then facilitating a coordinated response, Next-Generation Firewall solutions can efficiently achieve a level of effectiveness that would otherwise require a substantial amount of manual integration among disparate products. Similarly, having integrated management means that all of the security settings pertaining to a given domain can be established and maintained in a single place. This characteristic inherently helps minimize an all-too-common occurrence with point products where miscommunication and/or misconfiguration allow threats to slip through the cracks. earn the highly coveted NSS Labs "Recommend" rating. Of the total of seven Next-Generation Firewalls evaluated in the assessment, only three vendor appliances earned NSS Labs highest rating of Recommend with the Dell SonicWALL SuperMassive E10800 achieving the highest overall protection among the three. Independent third-party testing conducted by Network World 4 found that Dell SonicWALL offers the best overall Next- Generation performance and best overall performance for SSL Decryption. Independently verified We don t expect you to just take our word for it. Recently evaluated in the NSS Labs 2012 Security Value Map, the Dell Dell SonicWALL SuperMassive E10800 (running SonicOS 6.0) is the highest-overall-protection Next-Generation Firewall to 3 Vikram Phatak, chief technology officer at NSS Labs 4 April 23,

5 A consolidated solution Stretch your investment It s met all of our needs from a security perspective and even allowed us to eliminate a couple of network devices, a switch and a router. 5 Consolidated Next-Generation firewalls can greatly reduce both the capital and operating expenses of your network security infrastructure. More for your money Purchase and maintain far fewer software components, systems and devices Simplify your network infrastructure (e.g., switches, routers, and load balancers) by plugging fewer devices into fewer ports Consume less data center space and power (for a greener solution) Reduce training requirements by using a consistent operating system Dedicate fewer resources for administrative tasks (e.g., policy configuration, event analysis and reporting) by using a single management interface Add or activate modular services as needed to scale Dell SonicWALL Next-Generation Firewalls can improve performance significantly by applying patented 6 Dell SonicWALL Reassembly-Free Deep Packet Inspection (RFDPI) technology which inspects the entire packet without buffering and packet reassembly. From a hardware perspective, they also maximize throughput by incorporating parallel processing over advanced multi-core architecture. Give your network the green light In order to get the highest return on your investment for bandwidth services while optimizing service levels and staff productivity, you need to ensure maximum security without slowing performance. To meet these requirements, multigigabit throughput rates have become standard for Next- Generation Firewalls. This makes them not only well suited for providing comprehensive protection at Internet boundaries, but also on internal networks as well (e.g., between different zones or as a gateway to a data center), reducing costs of ownership even further. 5 Robert Smith, director of information technology, Linda Hall Library 6 U.S. Patents 7,310,815; 7,600,257; 7,738,380; 7,835,361; 7,991,723 5

6 Savings scenario While the precise savings that can be achieved through consolidation can be difficult to predict due to the number of factors involved, aggregate recovery can be significant, as in the following example: Before: 4 consoles 12 appliances/servers 250 watts/appliance x 12 = 3,000 watts Training = 7 vendors x $2,500 = $17,500 QoS QoS Vendor 1 firewall Vendor 2 firewall IPSec/SSL VPN 1 Anti-virus 1 IPSec/SSL VPN 2 Anti-virus 2 Web/content filter 1 Web/content filter 2 Consoles QoS x 2 Firewall x 2 VPN x 2 Web/content filter x 2 IDS/IPS x 2 Anti-virus x 2 IDS/IPS 1 IDS/IPS 2 After: 2 x Dell SonicWALL NSA E x Dell SonicWALL UMA EM5000 (includes 10 nodes) 81 watts/ Dell SonicWALL NSA appliance x watts x 1 = 286 watts Training = 2 vendors x $2,500 = $5,000 NSA E5500 HF Link NSA E5500 WLAN Zone SonicPoint-N Universal Management Appliance n Wireless Capable 6

7 A consolidated solution Make your life easier It was up and running less than four hours following the catastrophic failure of our previous firewall, has been very reliable, and is a breeze to administer. 7 Imagine what you could do with the extra time you and your staff will save by simplifying security with Dell SonicWALL. Central deployment and administration The award-winning Dell SonicWALL Global Management System (GMS) provides you with a flexible, powerful and intuitive solution to rapidly deploy and centrally manage Dell SonicWALL firewall, anti-spam, backup and recovery, and secure remote access solutions. Using GMS, you can centralize, control and simplify all consolidated management functions. Policy development is straightforward, yet granular and flexible, and role-based administration is fully supported. Automate maintenance Dynamic threat protection, content filtering, and application control services are continually updated on a 24x7 basis to maximize your security and minimize your administrative effort. Stop the finger pointing It is always the other vendor s fault. Multiple point products from separate vendors create an environment of finger pointing when issues arise. By consolidating on a Next-Generation Firewall from Dell SonicWALL, you get a responsive one-stopshop for your solutions, service and support. 7 Robert Smith, director of information technology, Linda Hall Library 7

8 Consolidated Dell SonicWALL Next-Generation Firewalls You have a great opportunity to consolidate multiple capabilities with your Dell SonicWALL Next-Generation Firewall. Gateway intrusion prevention service Block application vulnerabilities, buffer overflows and blended threats that can open up your network to exploits. Going a step beyond traditional solutions, Dell SonicWALL scans all network traffic for worms, Trojans, software vulnerabilities, backdoor exploits, and other types of malicious attacks. Utilizing a comprehensive signature database, the Dell SonicWALL Intrusion Prevention Service engine protects your network against an array of application vulnerabilities and exploits. Gateway anti-virus and anti-spyware Inspect all file attachments, FTP downloads, and real-time applications, such as instant messaging and peer-to-peer, for total file-based threat control, eliminating or complementing separate point products with layered protection. Prevent zero-day attacks with dynamically updated databases and an extensive list of virus and malware signatures. And because all threats are blocked at the gateway, your endusers are completely prevented from downloading malware in the first place. In addition, you can prevent auto-installation of ActiveX components (one of the most common sources of spyware) and stop any existing spyware programs from communicating with their hosts. Enforced client anti-virus and anti-spyware Confirm that all computers have the latest version of antivirus and anti-spyware software installed and active before authorizing their access to the network, with gateway-enforced virus and spyware protection for desktops and laptops. You have the flexibility to deploy either McAfee or Kaspersky antivirus engines. Application intelligence and control Get granular control and real-time visualization of your applications, regardless of port or protocol, to guarantee bandwidth prioritization and ensure maximum network security and productivity. With a continuously expanding signature database currently recognizing over 3,000 applications and millions of malware threats, Dell SonicWALL Next-Generation Firewalls can maintain granular control over applications, prioritize or throttle bandwidth and deny web site access. The Dell SonicWALL Application Flow Monitor provides real-time graphs of applications, ingress and egress bandwidth, active web site connections and user activity. Content filtering/url filtering Block inappropriate content, reduce organizational liability and increase productivity with Dell SonicWALL Content Filtering Service. You can apply access or denial policies based upon over 59 URL categories, individual or group identity, or time of day. Easy-to-use web-based management enables flexible policy configuration and complete control over Internet usage. You can enforce multiple custom policies for individual users, groups or specific category types. Local URL filtering controls can allow or deny specific domains or hosts. You can also create or customize filtering databases. Comprehensive Anti-Spam Service 8 Get comprehensive protection from spam and viruses, instantly deployed over existing Dell SonicWALL firewalls. Dell SonicWALL Comprehensive Anti-Spam Service (CASS) speeds your deployment, eases administration and reduces overhead by consolidating solutions, providing one-click anti-spam services, with advanced configuration. CASS features complete inbound anti-spam, anti-phishing, anti-malware, GRID IP Reputation, Advanced Content Management, Denial of Service prevention, full quarantine and customizable per-user junk summaries. Outperforming RBL filtering, CASS offers greater than 99% effectiveness against spam, dropping more than 80% of spam at the gateway, and utilizes advanced anti-spam techniques like Adversarial Bayesian filtering on remaining . Clean VPN IPSec VPN technology is considerably less well-suited to enabling remote access by individual and mobile users than it is to establishing secure, site-to-site connectivity between multi-person offices. The problem lies in the effort required to pre-distribute, pre-install, and subsequently manage the requisite client component (i.e., VPN agent). Dell SonicWALL has addressed this shortcoming by provisioning its Next- Generation Firewall appliances with integrated SSL VPN capabilities that combine to create a Dell SonicWALL Clean VPN. 8 The Comprehensive Anti-Spam Service supports an unrestricted number of users but is recommended for 250 users or less. 8

9 The SonicWALL Mobile Connect unified client apps for Apple ios and Google Android provide mobile smartphone and tablet users with superior network-level access to corporate, academic and government resources over encrypted SSL VPN. Deployed with a Dell SonicWALL Next-Generation Firewall solution (featuring Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service), Mobile Connect establishes a Clean VPN by decrypting remote traffic and removing intrusions and malware from android traffic tunneled over SSL VPN before they enter your network. Clean wireless Make deploying wireless WLANs secure, simple and costeffective with the first total security solution to integrate universal a/b/g/n wireless with an enterprise-class firewall/vpn gateway. Whether you are adding wireless into an existing network infrastructure or deploying a wireless network from the ground up, the extensible Dell SonicWALL Clean Wireless solution scales to virtually any network deployment. By combining advanced security features such as WiFiSec, Virtual APs (VAPs), and wireless intrusion detection services (WIDS) with support for industry standards including IPSec, WPA, and i, Dell SonicWALL protects your wireless network from malicious attacks. Management and reporting Create and manage security policies, provide real-time monitoring and alerts, and deliver intuitive compliance and usage reports, all from a single management interface. Flexibly deployed as software, hardware in the form of the Universal Management Appliance (UMA) or a virtual appliance, Dell SonicWALL GMS also provides centralized real-time monitoring, and comprehensive policy and compliance reporting to drive down the cost of owning and managing Dell SonicWALL security appliances. Dell SonicWALL Scrutinizer is a multi-vendor, application traffic analytics visualization and reporting tool to measure and troubleshoot network performance and utilization while increasing productivity for enterprises and service providers. Scrutinizer supports a wide range of routers, switches, firewalls, and data-flow reporting protocols, providing unparalleled insight into application traffic analysis from IPFIX/NetFlow data exported by Dell SonicWALL Next-Generation Firewalls. Scrutinizer easily identifies top applications, conversations, flows, protocols, domains, countries, subnets and alerts on suspicious behavior. Scrutinizer also provides historical and advanced reporting, role-based administration, advanced analysis and thresholdbased alerts, in addition to numerous special features for MSPs and ISPs. Dell SonicWALL Analyzer is an affordable, easy to use web-based traffic analytics and reporting tool that provides real-time and historical insight into the health, performance and security of the network. Analyzer supports Dell SonicWALL and secure remote access solutions. Discover the Dell Appliance Advantage at: 07/13 DS 0507