Validate the performance and security of IPS/IDS, Firewall and Proxy - January 2009
|
|
|
- Ethelbert Beverly Brown
- 8 years ago
- Views:
Transcription
1 Validate the performance and security of IPS/IDS, Firewall and Proxy - January 2009 Gregory Fresnais gfresnais@bpointsys.com Director of International Business Development
2 BreakingPoint Systems Founded September 2005 Management track record Deep networking, security, & performance assurance expertise Breakthrough, award-winning products Privately held and based in Austin, TX Sales & Support: US, Canada, UK, France, Italy, Spain, Netherlands, Belgium, Israel, China, Japan, Korea, Taiwan, Malaysia, New Zeeland, Australia
3 What can BreakingPoint Offer? BreakingPoint provides comprehensive Layer 2-7 testing for network equipment and application servers through highperformance, compact, flexible and easy-to-use products. BreakingPoint testing tools provide realistic performance and security results using stateful application protocols and live security strikes. 3
4 What type of tests does BreakingPoint provide? Realistic Traffic Emulation: Layer 2-7 Bit Blaster - Generates Ethernet frames (L2 Tests) Routing Robot - Generates IP packets (L3 Tests) Session Sender - Generates valid TCP sessions (L4 Tests) App Sim Generates 70+ realistic application flows (L7 Tests) Capture and Recreate - Capture & Playback PCAP Layer 4-7 Malicious Traffic Simulation Layer 2-7 Security Module 3,700+ unique attacks, 80+ evasion types Stack Scrambler Protocol Fuzzing 4
5 BreakingPoint Systems Key Benefits New Generation of Hardware Architecture optimized for Layer 2-7 Testing: FPGA, Network Processor, Embedded Security Module High-Performance Traffic Simulation Layer 2-7: 80 Gbps L2/L3 Traffic Simulation 20 Gbps L4/L7 Traffic Simulation 1.5 Million New TCP Connections per Second 15 Million Concurrent TCP Connections Flexible and Easy to Use Interface Drag and drop GUI to run L2, L3, L4 and L7 traffic 5 Device Under Test (DUT) automation Possibility to mix in the same test on a single test port in same test L2/L3 Stateless and L4/L7 Stateful traffic Good and Malicious traffic
6 Layer 2 Test BitBlaster Module 6
7 Layer 2 Network Performance Validation BreakingPoint Bit Blaster analyzes a device s ability to handle high volumes of Layer 2 traffic without corrupting or dropping packets. Bit Blaster can simulate Frame Size from 64 to 9216 Bytes. 7
8 BreakingPoint Bit Blaster Layer 2 Testing 8
9 BreakingPoint Bit Blaster Layer 2 Testing (cont.) 9
10 Layer 3 Test Routing Robot Module 10
11 Layer 3 Network Performance Validation Routing Robot determines if a DUT can handle high volumes of Layer 3 traffic by sending traffic from one interface and monitoring the receiving interface to see if the traffic is successfully received. Routing Robot can simulate Frame Size from 64 to 9216 Bytes 11
12 BreakingPoint Routing Robot Layer 3 Testing 12
13 BreakingPoint Routing Robot Layer 3 Testing 13
14 Layer 4 Test Session Sender Module 14
15 Layer 4 Network Performance Validation The Session Sender test component measures the device s ability to handle a large number of new TCP session per second and concurrent TCP sessions Session Sender can simulate Segment Size until 9146 Bytes 15
16 BreakingPoint Session Sender Layer 4 Testing 16
17 BreakingPoint Session Sender Layer 4 Testing 17
18 BreakingPoint Session Sender Layer 4 Testing 18
19 BreakingPoint Session Sender Layer 4 Testing 19
20 Layer 7 Test Application Simulator Module 20
21 Layer 7 Application Performance Validation Application Simulator allows you to define 70+ applications protocols to make complex application protocol distributions to simulate real world traffic. Application Simulator allows you to define in depth each protocol using advanced protocol configuration SuperFlows. 21
22 70+ Client and Server Protocols Supported HTTP HTTPS POP3 IMAP Finger RTMP MAPI Yahoo Messenger Informix Database MSN Messenger Jabber ICQ QOTD Gopher DNS RTP SIP TCP/UDP SMTP RTSP SNMP FTP RLogin Rshell QQ Messenger RSync DB2 Database AOL IM BOOTPS DCE/RPC LDAP NFSD NTP SSH Postgres Database FIX FIXT CIFS SMB BitTorrent edonkey NetBIOS RADIUS Accounting RADIUS Access Gnutella Vmware Vmotion Telnet Sybase Database Echo Oracle Database Microsoft SQL Server World of Warcraft 22
23 BreakingPoint- Application Simulator Layer 7 Testing 23
24 BreakingPoint- Application Simulator Layer 7 Testing 24
25 BreakingPoint- Application Simulator Layer 7 Testing 25
26 BreakingPoint- Application Simulator Layer 7 Testing 26
27 BreakingPoint- Application Simulator Layer 7 Testing 27
28 Layer 4 Replay TCP/UDP Recreate Module 28
29 Recreate Captured Traffic The BreakingPoint Recreate feature recreates multi-flow TCP/ UDP traffic based on data from PCAP. BreakingPoint does not use a raw playback, instead it will do stateful multi-flow allowing possibility to replay stateful TCP/UDP traffic with ability to amplify. 29
30 BreakingPoint Recreate: Exact Replay 30
31 BreakingPoint Recreate: Layer 4 Replay TCP/UDP 31
32 BreakingPoint Recreate: Amplify Replay 32
33 BreakingPoint Recreate: Layer 4 Replay TCP/ UDP 33
34 BreakingPoint Recreate: Layer 4 Replay TCP/ UDP 34
35 Security Test Security Module 35
36 Network Security Performance Validation BreakingPoint Security component can be used to test network security devices such as IPS, IDS, VPNs, and firewalls. It measures a device s ability to protect a host by sending 3,700+ Attacks under CVE-ID, BugTraqID, OSVDB and verifying that the device successfully blocks the attacks. 36
37 BreakingPoint Security Test Component 37
38 BreakingPoint: Security Test Module 38
39 BreakingPoint Security Test Component 39
40 BreakingPoint Security Test Component 40
41 BreakingPoint Security Test Component 41
42 BreakingPoint Security Test Component 42
43 BreakingPoint Security Test Component 43
44 Protocol Fuzzing Test Stack Scrambler Module 44
45 Protocol Fuzzing Stack Scrambler tests the integrity of different protocol stacks by sending malformed packets to the device under test. It uses a fuzzing technique, which modifies a part of the packet (checksum, protocol options, etc.) to generate the corrupt data. 45
46 46 Test Scenario
47 Mixing Layer 2-3 and Layer 4-7 Traffic BreakingPoint is the only solution able to send Layer 2-3 and Layer 4-7 traffic from a single test solution with single user interface on same test port. 47
48 BreakingPoint: Mixing L2/L3 and L4/L7 Traffic 48
49 Mixing Good and Malicious Traffic BreakingPoint properly tests high-performance security devices with the capability to mix good traffic and malicious traffic emulating real world test scenarios. 49
50 BreakingPoint: Mixing Good and Malicious Traffic 50
51 What kind of Network Equipment Validation? BreakingPoint testing tools are used to validate the following network equipments: Router L2 Switch L3 Switch UTM IDS/IPS QoS DPI Firewall Web Application Firewall Web Accelerator SSL Accelerator Traffic Shaper SMTP Relay Anti-SPAM Proxy URL Filter Content Filter Anti-Virus Anti-Malware and more 51
52 Validating Performance and Security of UTM, Firewall, IDS/IPS, Proxy and Anti-Virus Devices 52
53 Firewall Test 53
54 Firewall Test Gbps 54
55 Firewall + IDS/IPS Test 55
56 Firewall + IDS/IPS 2.6 Gbps 56
57 Firewall + IDS/IPS + Proxy Test 57
58 Firewall + IDS/IPS + Proxy 1.2 Gbps 58
59 Firewall + IDS/IPS + Proxy + Anti-Virus 59
60 Firewall + IDS/IPS + Proxy + Anti-Virus 558 Mbps 60
61 Type: Network Equipment Manufacturer Market Segment: Application Firewall (HTTP/HTTPS/ Database Protocols) Customer Test Scenario: Imperva protects online web applications and databases against sophisticated application-level attacks like SQL Injection and crosssite Scripting. Additionally, Imperva provides reporting for PCI-DSS and monitor user privilege for Sarbanes- Oxley compliance. 61
62 Type: Network Equipment Manufacturer Market Segment: QOS DPI Customer Test Scenario: Procera Networks provides deep packet inspection (DPI) capabilities that allow accurate identification of network traffic such as BitTorrent, YouTube, Skype and more, allowing accurate management and optimization of bandwidth. 62
63 Type: Service Provider Market Segment: Mobile Customer Test Scenario: T-Mobile validate performance of different network element radius server, router, firewall, load balancer, mobile content accelerator witch composed 10 Gigabit Mobile Silos between GGSN and Internet Services. 63
64 Device Under Test (DUT) Real-Time Monitoring 64
65 Real-Time Device Under Test Monitoring BreakingPoint offers the ability to connect to a DUT via Telnet, SNMP, SSH, or Serial to monitor the status of a DUT offering the ability to check CPU, Memory, New TCP connections per Second, Concurrent TCP Connections, Bandwidth and Packet per Second. Eliminates manual power-cycle reboots. 65
66 Device Under Test Monitoring 66
67 Device Under Test Monitoring 67
68 Device Under Test Monitoring 68
69 Automation using Drag and Drop GUI 69
70 GUI Automation: Run Multiple Layer 2-7 Tests 70
71 Global Reporting of Layer 2-7 Test Series 71
72 Automation using Script 72
73 Automation using Script Tcl Library Available for the Windows, UNIX, and MAC Define a Test Define DUT Profile Run Tests Generate Test Report 73
74 74 Reporting
75 Reporting Possibility BreakingPoint reports provide detailed information about each test including the testing environment, the purpose of the test, interface address information, and the results of the test Test Report can be exported in PDF, HTML, RTF, XLS, CSV and ZIP Test results can be ed upon the completion of a test. Results will be sent to the configured for the user account. The format in which the test is sent depends on the format that is selected for the Default Report Format option. 75
76 Layer 2-3 Test Report: Latency 76
77 Layer 2-3 Test Report: Packet Size 77
78 Layer 2-3 Test Report: Drop/Corruption 78
79 Layer 4 Test Report: TCP Response Time 79
80 Layer 7 Test Report: Mix Protocols 80
81 Security Test Report: High Level 81
82 Security Test Report: Details 82
83 83
84 Hardware Platform (Layer 2 - Layer 3) FPGA (Layer 4 - Layer 7) Network Processor (Security) Embedded 84
85 BreakingPoint BPS 1K: Gigabit Test Solution Hardware Information 4x Gigabit Ports Copper / 4x Gigabit Port SFP 1x Controller with Management Port and DUT Monitoring Port 85
86 BreakingPoint BPS 10K: 10 Gigabit Test Solution Hardware Information 4x 10 Gigabit Ports XFP SR or LR 1x Controller with Management Port and DUT Monitoring Port 86
87 BreakingPoint Elite: 8x 10 Gigabit Ports Hardware Information 2x Blades of 4x 10 Gigabit Ports XFP 1x Controller with Management Port and DUT Monitoring Port 87
88 BreakingPoint Systems Hardware Test Possibility BreakingPoint BPS 1K BreakingPoint BPS 10K BreakingPoint Elite Nb of Interface 4x 1 Gigabit 4x 10 Gigabit 8x 10 Gigabit Type of Interface 4 Copper / 4 Fiber 4x XFP 8x XFP L2 Test Yes Yes Yes L3 Test Yes Yes Yes L4 Test Yes Yes Yes L7 Test Yes Yes Yes Nb of L7 Protocols 70+ Protocols 70+ Protocols 70+ Protocols Security Test Yes Yes Yes Nb of Attacks 3,700+ 3,700+ 3,700+ Fuzzing Test Yes Yes Yes Recreate PCAP Yes Yes Yes 88
89 BreakingPoint Systems Hardware Performance BreakingPoint BPS 1K BreakingPoint BPS 10K BreakingPoint Elite L2/L3 Packet/Sec 6 Millions 60 Millions 120 Millions L2/L3 Bandwidth 4 Gbps (64 Bytes) 40 Gbps (64 Bytes) 80 Gbps (64 Bytes) L4/L7 TCP/SEC 500, ,000 1,5 Millions L4/L7 TCP OPEN 5 Millions 7.5 Millions 15 Millions L4/L7 Bandwidth 4 Gbps 10 Gbps 20 Gbps 89
90 90 Software Update
91 Software Updates 91
92 Summary of BreakingPoint Systems Testing Products 92
93 Summary of Test Possibilities 93
94 BreakingPoint Service & Support New Application Protocols Each Month Security Updates from the Industry s Top Security Researchers Product Releases, Enhancement Requests, and Exclusive Downloads Convenient Technical Support Options Technical Training, Test Plan Assessments, and Onsite Visits Education Online Tutorials: Screencast tutorials demonstrate how BreakingPoint products can be used to accelerate time to test. Test Methodologies: BreakingPoint test methodologies are provided in both video and text formats, and integrated into the product. Custom Training: Onsite, hands-on training helps your staff understand how to apply advanced testing techniques in your specific environment without endless classroom training and certifications For more information contact Gregory Fresnais: gfresnais@bpointsys.com 94
95 Thank You 95
Improving Web Application Firewall Testing (WAF) for better Deployment in Production Networks January 2009 OWASP Israel
Improving Web Application Firewall Testing (WAF) for better Deployment in Production Networks January 2009 OWASP Israel Gregory Fresnais Director of International Business Development Email: gfresnais@bpointsys.com,
A host-based firewall can be used in addition to a network-based firewall to provide multiple layers of protection.
A firewall is a software- or hardware-based network security system that allows or denies network traffic according to a set of rules. Firewalls can be categorized by their location on the network: A network-based
IxLoad - Layer 4-7 Performance Testing of Content Aware Devices and Networks
IxLoad - Layer 4-7 Performance Testing of Content Aware Devices and Networks IxLoad is a highly scalable solution for accurately assessing the performance of content-aware devices and networks. IxLoad
Considerations In Developing Firewall Selection Criteria. Adeptech Systems, Inc.
Considerations In Developing Firewall Selection Criteria Adeptech Systems, Inc. Table of Contents Introduction... 1 Firewall s Function...1 Firewall Selection Considerations... 1 Firewall Types... 2 Packet
PERFORMANCE VALIDATION OF JUNIPER NETWORKS SRX5800 SERVICES GATEWAY
APPLICATION NOTE PERFORMANCE VALIDATION OF JUNIPER NETWORKS SRX5800 SERVICES GATEWAY Copyright 2010, Juniper Networks, Inc. Table of Contents Introduction........................................................................................
APV9650. Application Delivery Controller
APV9650 D a t a S h e e t Application Delivery Controller Array Networks APV Series of Application Delivery Controllers optimizes the availability, user experience, performance, security and scalability
IBM. Vulnerability scanning and best practices
IBM Vulnerability scanning and best practices ii Vulnerability scanning and best practices Contents Vulnerability scanning strategy and best practices.............. 1 Scan types............... 2 Scan duration
Firewall Testing Methodology W H I T E P A P E R
Firewall ing W H I T E P A P E R Introduction With the deployment of application-aware firewalls, UTMs, and DPI engines, the network is becoming more intelligent at the application level With this awareness
SonicWALL Unified Threat Management. Alvin Mann April 2009
SonicWALL Unified Threat Management Alvin Mann April 2009 Agenda Who is SonicWALL? Networking Drivers & Trends SonicWALL Unified Threat Management (UTM) Next Generation Protection SonicWALL CONFIDENTIAL
FortiGate-3950B Scores 95/100 on BreakingPoint Resiliency Score (Security, Performance, & Stability)
FortiGate-3950B Scores 95/100 on BreakingPoint Resiliency Score (Security, Performance, & Stability) Overview Fortinet FortiGate -3950B enterprise consolidated security appliance has achieved a BreakingPoint
Gateway Security at Stateful Inspection/Application Proxy
Gateway Security at Stateful Inspection/Application Proxy Michael Lai Sales Engineer - Secure Computing Corporation MBA, MSc, BEng(Hons), CISSP, CISA, BS7799 Lead Auditor (BSI) Agenda Who is Secure Computing
Network Simulation Traffic, Paths and Impairment
Network Simulation Traffic, Paths and Impairment Summary Network simulation software and hardware appliances can emulate networks and network hardware. Wide Area Network (WAN) emulation, by simulating
SonicWALL Clean VPN. Protect applications with granular access control based on user identity and device identity/integrity
SSL-VPN Combined With Network Security Introducing A popular feature of the SonicWALL Aventail SSL VPN appliances is called End Point Control (EPC). This allows the administrator to define specific criteria
Cisco Integrated Services Routers Performance Overview
Integrated Services Routers Performance Overview What You Will Learn The Integrated Services Routers Generation 2 (ISR G2) provide a robust platform for delivering WAN services, unified communications,
Firewall Firewall August, 2003
Firewall August, 2003 1 Firewall and Access Control This product also serves as an Internet firewall, not only does it provide a natural firewall function (Network Address Translation, NAT), but it also
ZEN LOAD BALANCER EE v3.04 DATASHEET The Load Balancing made easy
ZEN LOAD BALANCER EE v3.04 DATASHEET The Load Balancing made easy OVERVIEW The global communication and the continuous growth of services provided through the Internet or local infrastructure require to
Advanced Network Security Testing. Michael Jack
Advanced Network Security Testing Avalanche Unified Security Testing Michael Jack Agenda The need for Defense In-depth Security Performance Issues Unified Testing Spirent User Quality of Experience Products
APV x600 Series. Application Delivery Controller APV1600, APV2600, APV4600, APV5600, APV6600, APV8600, APV9600
APV x600 Series D a t a S h e e t Application Delivery Controller APV1600, APV2600, APV4600, APV5600, APV6600, APV8600, APV9600 Array Networks APV Series of Application Delivery Controllers optimizes the
Colasoft Capsa Technical White Paper. Maximize Network Value
Colasoft Capsa Technical White Paper Maximize Network Value Content Content BACKGROUND... 3 OVERVIEW... 3 CONCEPT AND PRINCIPLE... 4 HOW TO WORK... 4 DATA CAPTURE... 4 DATA ANALYSIS... 5 EXPORTING DATA...
IxLoad TM Adobe HDS Player Emulation
IxLoad TM Adobe HDS Player Emulation HTTP Dynamic Streaming (HDS) is a solution developed by Adobe Systems to playback high quality live and on-demand content. The playback uses HTTP for streaming fragmented
Basic Network Configuration
Basic Network Configuration 2 Table of Contents Basic Network Configuration... 25 LAN (local area network) vs WAN (wide area network)... 25 Local Area Network... 25 Wide Area Network... 26 Accessing the
Load Balancing Security Gateways WHITE PAPER
Load Balancing Security Gateways WHITE PAPER Table of Contents Acceleration and Optimization... 4 High Performance DDoS Protection... 4 Web Application Firewall... 5 DNS Application Firewall... 5 SSL Insight...
Firewalls. Chapter 3
Firewalls Chapter 3 1 Border Firewall Passed Packet (Ingress) Passed Packet (Egress) Attack Packet Hardened Client PC Internet (Not Trusted) Hardened Server Dropped Packet (Ingress) Log File Internet Border
SOLUTION GUIDE. Radware & CyberGuard Complete Security Solutions offering Load Balancing, High Availability and Bandwidth Management.
SOLUTION GUIDE Radware & CyberGuard Complete Security Solutions offering Load Balancing, High Availability and Bandwidth Management. North America Radware Inc. 575 Corporate Dr Suite 205 Mahwah, NJ 07430
Hosting more than one FortiOS instance on. VLANs. 1. Network topology
Hosting more than one FortiOS instance on a single FortiGate unit using VDOMs and VLANs 1. Network topology Use Virtual domains (VDOMs) to divide the FortiGate unit into two or more virtual instances of
Spirent Avalanche AVALANCHE LOAD TESTING APPLIANCE
Inspired Innovation Spirent Avalanche In today s digital world, it s essential that the performance of your network infrastructure, security systems, and Web applications are carefully tested to ensure
CSE331: Introduction to Networks and Security. Lecture 12 Fall 2006
CSE331: Introduction to Networks and Security Lecture 12 Fall 2006 Announcements Midterm I will be held Friday, Oct. 6th. True/False Multiple Choice Calculation Short answer Short essay Project 2 is on
Firewall VPN Router. Quick Installation Guide M73-APO09-380
Firewall VPN Router Quick Installation Guide M73-APO09-380 Firewall VPN Router Overview The Firewall VPN Router provides three 10/100Mbit Ethernet network interface ports which are the Internal/LAN, External/WAN,
Application Delivery Testing at 100Gbps and Beyond
Application Delivery Testing at 100Gbps and Beyond The Need for Speed 10 Gigabit Ethernet (GE) rapidly became the technology of choice for high speed connections to servers and network devices. Advancements
REAL-TIME WEB APPLICATION PROTECTION. AWF SERIES DATASHEET WEB APPLICATION FIREWALL
REAL-TIME WEB APPLICATION PROTECTION. AWF SERIES DATASHEET WEB APPLICATION FIREWALL AWF Series Web application firewalls provide industry-leading Web application attack protection, ensuring continuity
How to (passively) understand the application layer? Packet Monitoring
How to (passively) understand the application layer? Packet Monitoring 1 What to expect? Overview / What is packet monitoring? How to acquire the data Handling performance bottlenecks Analyzing the transport
Firewalls. Basic Firewall Concept. Why firewalls? Firewall goals. Two Separable Topics. Firewall Design & Architecture Issues
CS 155 May 20, 2004 Firewalls Basic Firewall Concept Separate local area net from internet Firewall John Mitchell Credit: some text, illustrations from Simon Cooper Router All packets between LAN and internet
Less Guessing, More Facts. How to survive or avoid a DDoS Attack. Simulate Large Scale Cyber Attacks. Andy Young Snr Systems Engineer
Less Guessing, More Facts There is a better way How to survive or avoid a DDoS Attack. Simulate Large Scale Cyber Attacks. Andy Young Snr Systems Engineer The Network Has Evolved Application landscape
1 Data information is sent onto the network cable using which of the following? A Communication protocol B Data packet
Review questions 1 Data information is sent onto the network cable using which of the following? A Communication protocol B Data packet C Media access method D Packages 2 To which TCP/IP architecture layer
For IT Infrastructure, Mobile and Cloud Computing - Why and how
For IT Infrastructure, Mobile and Cloud Computing - Why and how Will you fear me... First, who is this group called Anonymous? Put simply, it is an international cabal of criminal hackers dating back to
Gigabit SSL VPN Security Router
As Internet becomes essential for business, the crucial solution to prevent your Internet connection from failure is to have more than one connection. PLANET is the ideal to help the SMBs increase the
Cisco ACE 4710 Application Control Engine
Data Sheet Cisco ACE 4710 Application Control Engine Product Overview The Cisco ACE 4710 Application Control Engine (Figure 1) belongs to the Cisco ACE family of application switches, used to increase
Bro at 10 Gps: Current Testing and Plans
U.S. Department of Energy Bro at 10 Gps: Current Testing and Plans Office of Science Brian L. Tierney Lawrence Berkeley National Laboratory Bro s Use at LBL Operational 24 7 since 1996 Monitors traffic
Security+ Guide to Network Security Fundamentals, Fourth Edition. Chapter 6 Network Security
Security+ Guide to Network Security Fundamentals, Fourth Edition Chapter 6 Network Security Objectives List the different types of network security devices and explain how they can be used Define network
PIOLINK, Inc. PIOLINK, Inc. commissioned The
PIOLINK, Inc. Layer 4/7 Load Balancer, Firewall Performance and Worm Attack Protection Evaluation Premise: Deploying intelligent Layer 4-7 application switch with firewall functionality is not uncommon
Configure a Microsoft Windows Workstation Internal IP Stateful Firewall
70 Lab #5 Lab #5 Assessment Spreadsheet A Review the default settings for Windows Firewall on your student workstation and indicate your settings below: GENERAL Recommended (Firewall On/Off) Don t Allow
Best of Breed of an ITIL based IT Monitoring. The System Management strategy of NetEye
Best of Breed of an ITIL based IT Monitoring The System Management strategy of NetEye by Georg Kostner 5/11/2012 1 IT Services and IT Service Management IT Services means provisioning of added value for
Boston Area Windows Server User Group April 2010
Boston Area Windows Server User Group April 2010 Hey Jack, don t you have a new job? Yes, unbelievably, my job is better than ever. After working in our outstanding Support Engineering team for the past
Network Security. Chapter 3. Cornelius Diekmann. Version: October 21, 2015. Lehrstuhl für Netzarchitekturen und Netzdienste Institut für Informatik
Network Security Chapter 3 Cornelius Diekmann Lehrstuhl für Netzarchitekturen und Netzdienste Institut für Informatik Version: October 21, 2015 IN2101, WS 15/16, Network Security 1 Security Policies and
Troubleshooting LANs with Wirespeed Packet Capture and Expert Analysis
Application Note Troubleshooting LANs with Wirespeed Packet Capture and Expert Analysis Introduction This application note is one in a series of local area network (LAN) troubleshooting papers from JDSU
Load Balance Router R258V
Load Balance Router R258V Specification Hardware Interface WAN - 5 * 10/100M bps Ethernet LAN - 8 * 10/100M bps Switch Reset Switch LED Indicator Power - Push to load factory default value or back to latest
PerfectStorm 100GbE, High- Performance Application and Security Load Modules
PerfectStorm 100GbE, High- Performance Application and Security Load Modules Ixia s PerfectStorm family of 100GbE load modules delivers the industry s most scalable solution for testing converged multi-play
SOFTWARE ENGINEERING 4C03. Computer Networks & Computer Security. Network Firewall
SOFTWARE ENGINEERING 4C03 Computer Networks & Computer Security Network Firewall HAO WANG #0159386 Instructor: Dr. Kartik Krishnan Mar.29, 2004 Software Engineering Department of Computing and Software
Cisco PIX vs. Checkpoint Firewall
Cisco PIX vs. Checkpoint Firewall Introduction Firewall technology ranges from packet filtering to application-layer proxies, to Stateful inspection; each technique gleaning the benefits from its predecessor.
UNIFIED PERFORMANCE MANAGEMENT
UNIFIED PERFORMANCE MANAGEMENT VISIBILITY CONTROL OPTIMIZATION COMPLETE WAN OPTIMIZATION Increase the speed and efficiency of your wide area network. Exinda s Unified Performance Management (UPM) solution
Linux MDS Firewall Supplement
Linux MDS Firewall Supplement Table of Contents Introduction... 1 Two Options for Building a Firewall... 2 Overview of the iptables Command-Line Utility... 2 Overview of the set_fwlevel Command... 2 File
Cisco Meraki MX products come in 6 models. The chart below outlines MX hardware properties for each model: MX64 MX64W MX84 MX100 MX400 MX600
MX Sizing Guide DECEMBER 2015 This technical document provides guidelines for choosing the right Cisco Meraki security appliance based on real-world deployments, industry standard benchmarks and in-depth
IBM Security Network Intrusion Prevention System
IBM Security Network Intrusion Prevention System Comprehensive protection from today s evolving threats Highlights Achieve unmatched levels of performance without compromising breadth and depth of security
Cisco Meraki MX products come in 6 models. The chart below outlines MX hardware properties for each model: MX60 MX60W MX80 MX100 MX400 MX600
MX Sizing Guide MARCH 2014 This technical document provides guidelines for choosing the right Cisco Meraki security appliance based on real-world deployments, industry standard benchmarks and in-depth
EXPLORER. TFT Filter CONFIGURATION
EXPLORER TFT Filter Configuration Page 1 of 9 EXPLORER TFT Filter CONFIGURATION Thrane & Thrane Author: HenrikMøller Rev. PA4 Page 1 6/15/2006 EXPLORER TFT Filter Configuration Page 2 of 9 1 Table of Content
Virtual Server and DDNS. Virtual Server and DDNS. For BIPAC 741/743GE
Virtual Server and DDNS For BIPAC 741/743GE August, 2003 1 Port Number In TCP/IP and UDP networks, a port is a 16-bit number, used by the host-to-host protocol to identify to which application program
Firewall Introduction Several Types of Firewall. Cisco PIX Firewall
Firewall Introduction Several Types of Firewall. Cisco PIX Firewall What is a Firewall? Non-computer industries: a wall that controls the spreading of a fire. Networks: a designed device that controls
QuickSpecs. Models. Features and benefits Application highlights. HP 7500 SSL VPN Module with 500-user License
Overview Models JD253A Key features High performance hardware encryption Thin client and browser based access Multiple access authentication methods Remote security status checking Low Running Cost Product
IxLoad-Attack: Network Security Testing
IxLoad-Attack: Network Security Testing IxLoad-Attack tests network security appliances determining that they effectively and accurately block attacks while delivering high end-user quality of experience
Flow Analysis Versus Packet Analysis. What Should You Choose?
Flow Analysis Versus Packet Analysis. What Should You Choose? www.netfort.com Flow analysis can help to determine traffic statistics overall, but it falls short when you need to analyse a specific conversation
Cisco RV180 VPN Router
Data Sheet Cisco RV180 VPN Router Secure, high-performance connectivity at a price you can afford. Figure 1. Cisco RV180 VPN Router (Front Panel) Highlights Affordable, high-performance Gigabit Ethernet
Multi-Homing Dual WAN Firewall Router
Multi-Homing Dual WAN Firewall Router Quick Installation Guide M73-APO09-400 Multi-Homing Dual WAN Firewall Router Overview The Multi-Homing Dual WAN Firewall Router provides three 10/100Mbit Ethernet
Application Service Testing Enabling scalable delivery of layer 4-7 services
WHITE PAPER Application Service Testing Enabling scalable delivery of layer 4-7 services www.ixiacom.com 915-1735-01 Rev. C January 2013 2 Table of Contents Introduction... 4 Industry Drivers... 4 Multiplay
Transport and Network Layer
Transport and Network Layer 1 Introduction Responsible for moving messages from end-to-end in a network Closely tied together TCP/IP: most commonly used protocol o Used in Internet o Compatible with a
Chapter 5. Figure 5-1: Border Firewall. Firewalls. Figure 5-1: Border Firewall. Figure 5-1: Border Firewall. Figure 5-1: Border Firewall
Figure 5-1: Border s Chapter 5 Revised March 2004 Panko, Corporate Computer and Network Security Copyright 2004 Prentice-Hall Border 1. (Not Trusted) Attacker 1 1. Corporate Network (Trusted) 2 Figure
EAGLE EYE IP TAP. 1. Introduction
1. Introduction The Eagle Eye - IP tap is a passive IP network application platform for lawful interception and network monitoring. Designed to be used in distributed surveillance environments, the Eagle
TCP/UDP # General Name Short Description
This appendix is designed to provide general information about service ports that are discovered on IP networks. Outlined are ports 1-80, along with many other common higher ports and specific ports found
Data Sheet. VLD 500 A Series Viaedge Load Director. VLD 500 A Series: VIAEDGE Load Director
Data Sheet VLD 500 A Series Viaedge Load Director VLD 500 A Series: VIAEDGE Load Director VLD : VIAEDGE Load Director Key Advantages: Server Load Balancing for TCP/UDP based protocols. Server load balancing
CSE 4482 Computer Security Management: Assessment and Forensics. Protection Mechanisms: Firewalls
CSE 4482 Computer Security Management: Assessment and Forensics Protection Mechanisms: Firewalls Instructor: N. Vlajic, Fall 2013 Required reading: Management of Information Security (MIS), by Whitman
Intrusion Detection Systems (IDS)
Intrusion Detection Systems (IDS) What are They and How do They Work? By Wayne T Work Security Gauntlet Consulting 56 Applewood Lane Naugatuck, CT 06770 203.217.5004 Page 1 6/12/2003 1. Introduction Intrusion
Log Audit Ensuring Behavior Compliance Secoway elog System
As organizations strengthen informatization construction, their application systems (service systems, operating systems, databases, and Web servers), security devices (firewalls and the UTM, IPS, IDS,
ZEN LOAD BALANCER EE v3.02 DATASHEET The Load Balancing made easy
ZEN LOAD BALANCER EE v3.02 DATASHEET The Load Balancing made easy OVERVIEW The global communication and the continuous growth of services provided through the Internet or local infrastructure require to
EdgeRouter Lite 3-Port Router. Datasheet. Model: ERLite-3. Sophisticated Routing Features. Advanced Security, Monitoring, and Management
EdgeRouter Lite 3-Port Router Model: ERLite-3 Sophisticated Routing Features Advanced Security, Monitoring, and Management High-Performance Gigabit Ports Advanced 3-Port Router Introducing the EdgeRouter
Proxy Server, Network Address Translator, Firewall. Proxy Server
Proxy Server, Network Address Translator, Firewall 1 Proxy Server 2 1 Introduction What is a proxy server? Acts on behalf of other clients, and presents requests from other clients to a server. Acts as
ANNEXURE TO TENDER NO. MRPU/IGCAR/COMP/5239
ANNEXURE TO TENDER NO. MRPU/IGCAR/COMP/5239 Check Point Firewall Software and Management Software I. Description of the Item Up gradation, installation and commissioning of Checkpoint security gateway
CTS2134 Introduction to Networking. Module 8.4 8.7 Network Security
CTS2134 Introduction to Networking Module 8.4 8.7 Network Security Switch Security: VLANs A virtual LAN (VLAN) is a logical grouping of computers based on a switch port. VLAN membership is configured by
The Bro Network Intrusion Detection System
The Bro Network Intrusion Detection System Robin Sommer International Computer Science Institute, & Lawrence Berkeley National Laboratory robin@icsi.berkeley.edu http://www.icir.org System Philosophy Bro
E-GOVERNANCE MISSION MODE PROJECT (MMP) CRIME & CRIMINAL TRACKING NETWORK & SYSTEMS (CCTNS) IMPLEMENTATION OF CCTNS IN GOA
E-GOVERNANCE MISSION MODE PROJECT (MMP) CRIME & CRIMINAL TRACKING NETWORK & SYSTEMS (CCTNS) IMPLEMENTATION OF CCTNS IN GOA RFP FOR SELECTION OF SYSTEM INTEGRATOR CORRIGENDUM RELEASED BY: Goa Police Government
Firewalls, IDS and IPS
Session 9 Firewalls, IDS and IPS Prepared By: Dr. Mohamed Abd-Eldayem Ref.: Corporate Computer and Network Security By: Raymond Panko Basic Firewall Operation 2. Internet Border Firewall 1. Internet (Not
Course Overview: Learn the essential skills needed to set up, configure, support, and troubleshoot your TCP/IP-based network.
Course Name: TCP/IP Networking Course Overview: Learn the essential skills needed to set up, configure, support, and troubleshoot your TCP/IP-based network. TCP/IP is the globally accepted group of protocols
Computer Networks CS321
Computer Networks CS321 Dr. Ramana I.I.T Jodhpur Dr. Ramana ( I.I.T Jodhpur ) Computer Networks CS321 1 / 22 Outline of the Lectures 1 Introduction OSI Reference Model Internet Protocol Performance Metrics
NEFSIS DEDICATED SERVER
NEFSIS TRAINING SERIES Nefsis Dedicated Server version 5.2.0.XXX (DRAFT Document) Requirements and Implementation Guide (Rev5-113009) REQUIREMENTS AND INSTALLATION OF THE NEFSIS DEDICATED SERVER Nefsis
Secure and Optimize Application Delivery, Performance, and Reliability
Secure and Optimize Application Delivery, Performance, and Reliability Alteon Application Switch The Alteon Application Switch is a multi-application switching system designed to allow enterprises to prepare
Computer Security CS 426 Lecture 36. CS426 Fall 2010/Lecture 36 1
Computer Security CS 426 Lecture 36 Perimeter Defense and Firewalls CS426 Fall 2010/Lecture 36 1 Announcements There will be a quiz on Wed There will be a guest lecture on Friday, by Prof. Chris Clifton
High Performance 10Gigabit Ethernet Switch
BDCOM S3900 Switch High Performance 10Gigabit Ethernet Switch BDCOM S3900 is a standard L3 congestion-less switch series, which are capable of multi-layer switching and wire-speed route forwarding. Its
IMPLEMENTATION OF INTELLIGENT FIREWALL TO CHECK INTERNET HACKERS THREAT
IMPLEMENTATION OF INTELLIGENT FIREWALL TO CHECK INTERNET HACKERS THREAT Roopa K. Panduranga Rao MV Dept of CS and Engg., Dept of IS and Engg., J.N.N College of Engineering, J.N.N College of Engineering,
CT522-128 LANforge WiFIRE Chromebook 802.11a/b/g/n WiFi Traffic Generator with 128 Virtual STA Interfaces
1 of 8 Network Testing and Emulation Solutions http://www.candelatech.com sales@candelatech.com +1 360 380 1618 [PST, GMT -8] CT522-128 LANforge WiFIRE Chromebook 802.11a/b/g/n WiFi Traffic Generator with
1. Built-In SPI Firewall to Protect Your Enterprise Network 2. Multi-Spam-Filtering Function Providing High Spam-Filtering Accuracy
1. Built-In SPI Firewall to Protect Your Enterprise Network BroadScan UTM core design is based on its Stateful Packet Inspection ( SPI ) firewall, providing complete firewall protection. By default, the
F5 BIG-IP V9 Local Traffic Management EE0-511. Demo Version. ITCertKeys.com
F5 BIG-IP V9 Local Traffic Management EE0-511 Demo Version Question 1. Which three methods can be used for initial access to a BIG-IP system? (Choose three.) A. Serial console access B. SHH access to the
Next Generation Firewalls and Sandboxing
Next Generation Firewalls and Sandboxing Joe Hughes, Director www.servicetech.co.uk Summary What is a Next Generation Firewall (NGFW)? Threat evolution Features Deployment Best practices What is Sandboxing?
TCP/IP Protocol Suite. Marshal Miller Chris Chase
TCP/IP Protocol Suite Marshal Miller Chris Chase Robert W. Taylor (Director of Information Processing Techniques Office at ARPA 1965-1969) "For each of these three terminals, I had three different sets
Table of Contents. 1 Overview 1-1 Introduction 1-1 Product Design 1-1 Appearance 1-2
Table of Contents 1 Overview 1-1 Introduction 1-1 Product Design 1-1 Appearance 1-2 2 Features and Benefits 2-1 Key Features 2-1 Support for the Browser/Server Resource Access Model 2-1 Support for Client/Server
Virtual Private Servers
Virtual Private Servers Application Form Guide Internode Pty Ltd ACN: 052 008 581 150 Grenfell St Adelaide SA 5000 PH: (08) 8228 2999 FAX: (08) 8235 6999 www.internode.on.net Internode VPS Application
Cisco IOS Firewall. Scenarios
Cisco IOS Firewall Common Deployment Scenarios http://www.cisco.com/go/iosfirewall com/go/iosfirewall Presentation_ID 2007 Cisco Systems, Inc. All rights reserved. 1 Cisco IOS Firewall Feature Overview
Cisco Intrusion Prevention System Advanced Integration Module for Cisco 1841 and Cisco 2800 and 3800 Series Integrated Services Routers
Cisco Intrusion Prevention System Advanced Integration Module for Cisco 1841 and Cisco 2800 and 3800 Series Integrated Services Routers The Cisco Intrusion Prevention System Advanced Integration Module
Copyright 2006 Comcast Communications, Inc. All Rights Reserved.
ii Copyright 2006 Comcast Communications, Inc. All Rights Reserved. Comcast is a registered trademark of Comcast Corporation. Comcast Business IP Gateway is a trademark of Comcast Corporation. The Comcast
CT505-30 LANforge-FIRE VoIP Call Generator
1 of 11 Network Testing and Emulation Solutions http://www.candelatech.com sales@candelatech.com +1 360 380 1618 [PST, GMT -8] CT505-30 LANforge-FIRE VoIP Call Generator The CT505-30 supports SIP VOIP
Buyer s Guide For Intrusion Prevention Systems (IPS)
Buyer s Guide For Intrusion Prevention Systems (IPS) Table of Contents Introduction... 3 Executive Summary... 5 Quick Checklist... 8 Detailed Buyer s Checklist... 10 Introduction Security has long been
Network Security. Protective and Dependable. Pioneer of IP Innovation
Network Protective and Dependable Pioneer of IP Innovation Why PLANET Network Solution? With the growth of the threats, network security becomes the fundamental concerns of home and enterprise network.
UTM FIREWALL SPECS HARDWARE SPECIFICATIONS
UTM FIREWALL SPECS HARDWARE SPECIFICATIONS ASIC-Based Standalone Appliance GbE RJ45 Ports 42 Internal Storage 64 GB SYSTEM PERFORMANCE Firewall Throughput (1518 / 512 / 64 byte UDP packets) 4 / 4 / 4 Gbps