Ransomware and ATP attacks are typical threats to LAN security. XXLSEC MACsec solution is new method to implement IEEE802.1AE MACsec layer 2 authentication and encryption to enterprise network with low cost and easy maintenance.

1. RANSOMWARE AND APT
THREATS
in local area networks
How to prevent with MACsec

2. IP Camera Systems
‘made in CN’
VoIP system & PBX Normal Office
network
LAN Switch (L2)
Typical enterprise network has all services and applications in same LAN.
Network segmentation is typically based on VLAN and other adminstrative measures.
Critical network parts are not properly secured from ransomware or APT threats.
Production system
network
R&D and IPR
network

3. IP Camera Systems
‘made in CN’
VoIP system & PBX Normal Office
network
LAN Switch (L2)
Problem is this lateral movement in Layer 2 Ethernet network
RANSOMWARE or APT
THREAT
Production system
network
R&D and IPR
network

4. IP Camera Systems
‘made in CN’
VoIP system & PBX Normal Office
network
LAN Switch (L2)
Problem is this lateral movement in Layer 2 ethernet network
PROBLEM
Production system
network
R&D and IPR
network
RANSOMWARE or APT

5. IP Camera Systems
‘made in CN’
VoIP system & PBX Normal Office
network
LAN Switch (L2)
Problem is this lateral movement in Layer 2 ethernet network
PROBLEM
Production system
network
R&D and IPR
network
RANSOMWARE or APT

6. IP Camera Systems
‘made in CN’
VoIP system & PBX Normal Office
network
LAN Switch (L2)
How to prevent LATERAL MOVEMENT in LAN ?
Production system
network
R&D and IPR
network

7. IP Camera Systems
‘made in CN’
VoIP system & PBX Normal Office
network
LAN Switch (L2)
Problem is this lateral movement in Layer 2 ethernet network
SOLUTION
Isolate SUPER CRITICAL segments with
MACSEC layer2 LAN encryption.
macsec prevents lateral
movement with cryptography
Production system
network
R&D and IPR
network

8. IP Camera Systems
‘made in CN’
VoIP system & PBX Normal Office
network
LAN Switch (L2)
Problem is this lateral movement in Layer 2 ethernet network
SOLUTION
Isolate SUPER CRITICAL segments
with MACSEC layer2 LAN encryption.
macsec prevents lateral
movement with cryptography
Production system
network
R&D and IPR
network