DSS ITSEC Conference 2012 - Cyberoam Layer8 UTM

Securing You

Future-ready Security
Justinas Valentukevičius
Channel Manager Baltics

Unified Threat
Management

www.cyberoam.com © Copyright 2012 Elitecore Technologies Pvt. Ltd. All Rights Reserved.

Securing You

Agenda of Presentation

 Let’s meet - Brief introduction to Cyberoam

 Next generation firewall or maybe Next generation UTM

 Layer 8, WAF and other nice features in Cyberoam UTM

 Announcement of NG Series and Virtual UTM

 Technical live DEMO later today 15:15 PM


Securing You

About Cyberoam

Elitecore technologies founded in 1999

Cyberoam UTM introduced in 2006 (Baltics in 2010)

800+ Employees

Sales, Distribution Channel and Customers across 110+ Countries

Among the Top 3 UTM players in Gartner

Patent Pending Identity-based Management


Securing You

Cyberoam’s Holistic IT Security Portfolio

Unified Threat
Securing the IT network Management

Centralized security
management for remote
/branch offices & clients

Network Monitoring & & Open
Analysis Source

Virtual UTM (from
December 2012)


Securing You

Cyberoam pagal Gartner

2012
Magic Quadrant for Unified
Threat Management


Securing You

Evolution


Securing You
Seriously, is it enough??


Securing You

Evolution of Network Security
Trends in Security

 Basic security began with firewalls
 As threats increased, other solutions were introduced
 Virus attacks rose in number and intensity
 Spam rose
 Slammer fueled the need for Intrusion Detection & Prevention
 High number of employees start accessing the Internet
 Connectivity to branches, partners and remote workers
 Blended threats emerge to exploit extensive Internet usage

 Average spam messages per day – the
 6FirewallsHit on Saturday, January
 Slammer employeesinfected with
enjoyed a monopoly until
 starting of the 21stbe view onlineviruses
18.5business emails contained
%
 1 systems
25 % in 5 0030to century
– 25, pornography year– Forrester
IBM2003,
 Time spent deleting them – 2.8
Initial Firewalls at work
spyware by this were Stateless
 That’s a staggering cost of $281-$304
Lost revenue spilled over halfway
mintues. which could
 Firewallsnext weekin anot control are hit
per  % percentlostsay they – 51.8the
 into70companies adult day will invest in
65PC the
Average time of websites mts
initiation of communication
 Emailcost of 9toolsand 5 more than
anti-spywarethe bailout: pm
became am and upgrades
more prevalent
  Later Stateful became more prevalent
between
Total
 14 % spam recipients actually read
 $1 billion mails grew 5,000 % last year
Phishing
 Pharmingpercent an employees'
 today, makes of entry
 Till 30-40 no accountability has
spam
 been established advertised by spam
4 % buy products is not business
Internet activity
 21 % spam in Jan 2005 was porn
related


Securing You


Securing You

Where are Networks moving to?

• High speed Internet (Baltics among TOP countries)
• More devices per user – More devices connecting to
Internet (BYOD)
• More web-applications being accessed
• Increase in usage of data


Securing You

What is usual here, in Baltics?

Usually we are really well technologically
educated and so we understand the need of
Enterprise solutions – and we need the best !

However…

Usually we are relatively small in size

Usually we are quite limited with our budget

WHAT WE ARE LOOKING FOR IS BEST TECHNOLOGY FOR
THE AFFORDABLE PRICE !


Securing You

Next generation security


Securing You

Gartner's Definition of the Next Generation Firewall (NGFW)

“A wire-speed integrated network platform that performs deep inspection of
traffic and blocking of attacks”.
Next Generation Firewall indicates “the necessary evolution of a firewall”
to deal with the changing IT environment in businesses and the consequent
evolution in security threats posing to bring these very businesses down.

NGFW created a buzz in security circles
What is so different about them?


Securing You

Next Generation Firewall Cyberoam Next Generation UTM
FW with SI and integrated with IPS, VPN, Web/application
Standard first-generation firewall capabilities like Filtering, IM Controls and Web Application Firewall
packet filtering, NAT, stateful protocol inspection + Providing Anti Virus and Anti Spyware, Anti Spam,
and VPN capabilities Bandwidth Management, Multi Link Management, HA
and On-appliance Reporting.
IPS tightly integrated with FW.
Integrated, rather than merely collocated, Policy creation of multiple features in a single FW interface.
network intrusion prevention + All security modules are bound together keeping
User Identity as the base.
Granular application control
Real-time Visualization
Application awareness and full stack visibility
Secure Application Layer Vulnerabilities
Network Visibility based on users and not IP Addresses

Extra firewall intelligence Integration with AD, LDAP and RADIUS Servers.

Integrates hardware acceleration and automation into a wide
Support upgrade paths for integration of new range of packet processing and application-specific
information feeds and new techniques to functions
address future threats + Virtual UTM series consolidates network security in
virtualized environments


Securing You

Cyberoam Unified Threat Management
 Gateway Integrated security
over single platform
 Unique Identity-based Layer 8
approach penetrates through
each security module


Securing You

Human approach in Security

• Numbers – Hard & Boring

192.168.10.122
172.17.12.123
10.12.11.23
to remember!

 Names - Used daily!!!


Securing You

Cyberoam Layer 8 AAA Advantage

Cyberoam Cyberoam Cyberoam
Authenticates Authorizes Audits

User Login • User Name • Internet surfing quota • Identity - based
• IP Address • Schedule control Logs + Reports
• MAC Id • Security Policies • Compliance Reports
• Session Id • Web Filtering
• Application Visibility & Control
• QoS / Bandwidth Management
• IM Controls


Securing You

 Fusion Technology driven SI Firewall
- Interface for achieving Unified Security
 Rules for all security features from firewall page
 Identity-based policies enable security,
connectivity, productivity
- Easy to configure with Next-Gen UI
 Easy navigation, custom controls, intuitive
interface
- Fewer security errors - Increases security
- Enhances administrative productivity
- Shorter learning curves

: Indicates a feature that is either unique to Cyberoam or it was
first introduced in the Industry by Cyberoam

Securing You

 Virtual Private Network (VPN)
- Anywhere, any device secure remote connectivity
- Supports
 IPSec, L2TP, PPTP technologies
 SSL-VPN
- Client-type independent Web access mode
- Application access mode
- Client mode
 Threat Free Tunneling (TFT) Technology
 Scans traffic entering VPN tunnel for:
- Malware
- Spam
- Inappropriate content
- Intrusion attempts
- Maintains secure endpoint and network
environments

Securing You

Mobile VPN for iOS and Android devices

 Cyberoam’s Layer 8 Identity based security extended to mobile
devices
 Securely connect your iPhone, iPad and Android devices to your
corporate network through VPN

iOS Android

IPSec VPN (New) L2TP VPN (New)
L2TP VPN
PPTP VPN


Securing You

Cyberoam CISCO VPN for iOS


Securing You

SSL VPN user portal


Securing You

 Intrusion Prevention System
- Layer 8 and IPS Tuner driven Cyberoam IPS
Identity-based IPS policies per user or group
 Identity-based alerts and reports
- Visibility into applications usage
- User, Source, Destination, Usage
- Overview of threat status
- Top alerts, top attackers, top victims
 3500+ signatures – broadest security cover
 Internet Threat Response Team
 Allows multiple IPS policies


Securing You

 Gateway Anti-Malware
- 4 million+ signatures
- Bi-directional scanning of web & email
- Self-service Virus Quarantine
- Reduced window of vulnerability
 Broadest security cover against all malware Anti-Virus

- Scans
 HTTP, FTP, SMTP, POP3
 HTTPS, IMAP
 Instant Messenger traffic
- Layer 8 Impact Anti-Spyware

 Identity-based virus reports
- Instant visibility into attacker/victim
Indicates feature offered only by
 Identity-based Quarantine policies top-rated UTMs


Securing You

 Gateway Anti-Spam
- IP Reputation Filtering
 Blocks 85% of incoming messages at gateway Premium

- Saves bandwidth
- Near 98% spam detection
- False Positive rate of 1 in a million
 Reduces fear of losing business emails
- Self-Service quarantine area
- User-based Spam Digest
 Frees administrator time & management
- Manage Email recipients
 Data leakage prevention and archiving


Securing You

 Web Application Firewall Subscription
Firewalls/IPS cannot protect a web application from unknown threats

Cyberoam WAF Features include
– Positive protection model and No Signature Tables
– Intuitive website flow detector automatically
adapts to website changes

– Protects against OWASP top
10 vulnerabilities
– SSL Offloading
– Monitoring & Reporting


Securing You

 Cyberoam iView – On-Appliance Logging & Reporting
- Ability to log and report activities
- LAYER 8 - Identity-based logging and reporting –
Pinpoints the user
- Security Management
 iView dashboard- Shows network attacks on single screen
 Drill-down reports – 3rd level drill-down for attack details
 1000+ Reports
- Log Management
- Compliance Management
 HIPAA, PCI DSS, GLBA, and more
- Forensic Analysis


Securing You

Dual Dashboard – Traffic and Security Dashboard

 Traffic Dashboard


Securing You


 Security Dashboard


Securing You


 Security Dashboard

N/A: Private IP Others: Rest of records

Securing You

Country Maps for Source/Destination Traffic

 Graphical overview of Data transfer and Risk level


Securing You

 Web & Content Filtering

- Industry’s most comprehensive URL Premium

database
 82+ categories
 44 million+ URLs
- On-appliance web category database
 Faster access
 Surfing pattern privacy
- Controls access to HTTP & HTTPS
hosted websites
 Increases productivity


Securing You

Identity based Technology - The Reason

Application Based Control. Username / IP Address


Securing You

IM MANAGEMENT & CONTROL

 Allow or block Skype
 Control access to leading Instant Messengers
(Yahoo, Windows Live)
 Control over Chat, Webcam, File Transfer
 Log & monitor chat
 Filter content over IM: Blacklist certain keywords or
regular expressions to prevent data leakage


Securing You

 Best of Breed Bandwidth Management/QoS

- Application and Identity-based bandwidth allocation
- Category wise Bandwidth management
- Restrict Bandwidth usage for a combination of source,
destination and service/service group
- Schedule-based bandwidth allocation
- Committed and burstable bandwidth


Securing You

Identity Based Policies


Securing You

Cyberoam UTM Product Range
 Enterprise
- CR 2500iNG
- CR 1500i
- CR 1000i
- CR 750ia
- CR 500ia

 SME
- CR 300i
- CR 200i
- CR 100ia
- CR 50ia

 Small offices
- CR 35ia
- CR 25ia
- CR 15i
- CR 15wi

Securing You

The Cyberoam NG Series and Virtualization

 Powerful Hardware

 Superior Quality
Future-Ready
Security  Performance Leap

 Value for Money

 All-New Firmware


Securing You

Cyberoam Certifications

Premium Premium

Anti-Virus Anti-Spyware Anti-Spam URL Filtering Firewall VPN IPS/IDP

UTM Level 5: Cyberoam holds a unique & complete UTM certification

ICSA Certified Firewall IPv6 Member of ICSA Certified VPNC Certified for Basic
Ready Internet Watch High-Availability VPN & AES Interoperability
Foundation


Securing You

Reviews and Awards

Cyberoam CR35ia
outshines competitors in
SOHO UTM Group Test


Securing You

THANK YOU !

Cyberoam Online Demo:
http://livedemo.cyberoam.com
(Username: guest, Password: guest)

Contact information:
Email: justinas.v@cyberoam.com
Skype: justinas.cyberoam
+370 615 43623


DSS ITSEC Conference 2012 - Cyberoam Layer8 UTM

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (17)

En vedette

En vedette (8)

Similaire à DSS ITSEC Conference 2012 - Cyberoam Layer8 UTM

Similaire à DSS ITSEC Conference 2012 - Cyberoam Layer8 UTM (20)

Plus de Andris Soroka

Plus de Andris Soroka (20)

Dernier

Dernier (20)

DSS ITSEC Conference 2012 - Cyberoam Layer8 UTM