2. 2
Target
» 40 million card numbers, 70 million records
Home Depot
» 56 million card numbers, 53 million records
Michaels
» 2.6 million card numbers
Staples
» 1.6 million card numbers
Goodwill Industries
» 868,000 card numbers
2014: Year of the Retail Data Breach
3. 3
New retail technologies
» Wireless POS, sales tablets,
guest Wi-Fi, smart digital signage,
presence analytics
Compliance requirements
» PCI, regional data privacy
compliance
Security threats
» Advanced Persistent Threats
Multiplied by many locations
Technology Demands on Retail Networks
4. 4
Fortinet Connect and Secure Solution
PoE Interfaces
Space & Energy Saving
FW & VPN Web Filtering
3G/4G connectivitySSL Inspection User/Device ID
IPS DLP
Application Control Vuln. Scanning
AV/Sandbox Anti-spam
Hybrid WAN
WiFi Controller
WAN Optimization
Endpoint Control
Token Service
SoftwareFeatures
HardwareFeatures
Wireless Net
WAN
3G/4G
Wired Net PoE
FortiGate
FortiAP
Management/
Reporting
FortiManager
FortiAnalyzer
FortiSwitch
WAN/VPN
FortiPresence
FortiExtender
5. 5
Retail Store Device Proliferation
Multiple
Management
Consoles
Inconsistent
Networking
Functions
Potential
Gap in Protection
Slower Threat
Response
WAN
Acceleration
Web
Filtering
IPS
Application
Control
WiFi Controller
Advanced
Threat
Protection
Antivirus
Firewall
Management
SaaS Gateway
VPN
INTERNET
6. 6
INTERNET
FortiGate Device Consolidation
FortiGate consolidates networking and security
technologies into a single high performance appliance
Firewall
VPN
Application Control
IPS
Web Filtering
Antivirus
WAN Acceleration
Data Leakage Protection
WiFi Controller
Advanced Threat Protection
SaaS Gateway
FortiGate
DCFW
NGFW
UTM
Management
Single
Management
Console
Integrated
Networking
& Security
Consolidated
Security Policy
Faster
Threat Response
7. 7
Performance&Scalability
FW <1G 1G – 2G 2G – 4G
NGFW <250Mbps 250MB – 1G 275MB – 1G
Ports 1 – 5 GE 1 – 10 GE 1 – 48 GE
FortiGate Entry Level Family
FG-30D/-POE
FWF-30D/-POE
FG-60D/-POE
FWF-60D/-POE
FG/FWF-60D-
3G4G
FG-80D
FG-94D-POE
FWF-90D/-POE
FG-70D
FG/FWF-92D
FG-90D/-POE
FGR-60D
CPU
CPU
SoC2
SoC2 SoC2
FG-98D-POE
10. 10
FortiWiFi Family
FWF-30D/30D-POE FWF-60D/60D-POE FWF-90D/90D-POE
Thick AP ✓ ✓ ✓
Number of radios 1 1 1
IEEE 802.11 standards a/b/g/n a/b/g/n a/b/g/n
802.11n support 2x2 MIMO 2x2 MIMO 2x2 MIMO
Max client association rate 300Mbps 300Mbps 300Mbps
Max number of SSIDs 8 8 8
Max Managed FortiAP
(Total/ Local Bridge)
2/2 10 / 5 32 / 16
13. 13
Wireless IDS
Rogue AP Suppression
Layer 7 Application Control
Integrated Guest Captive Portal
Fortinet Wireless Features for Retail
14. 14
PoENon-PoE
8 port 24 port 48 port
FortiSwitch Secure Access Family
FS-28C
FS-224D-POE
FS-348B
FS-324B-POE
FS-108D-POE
FS-124D-POE
FS-124D
FSR-112D-POE
FS-448B
15. 15
FortiGate Switch
Management
» Uses modified CAPWAP
protocol – like FortiAP
» View port speed,
status, etc.
» Apply security policy
» Authentication via
802.1x or captive portal
» Segment Network
Switch Segmentation for PCI Compliance
16. 16
Modems connected directly to CPE
CPE usually located in a wiring closet
Poorly located for optimal 3G/4G reception
Problems with 3G/4G WAN in Retail
17. 17
Houses a 3G/4G modem
Can be installed for optimal coverage
Connects to FortiGate via Ethernet cable
FortiExtender Wireless WAN Solution
18. 18
FortiExtender family
FortiExtender-20B
• Indoor w/ Security Lock
• USB Modem
• PoE or AC powered
FortiExtender-100B
• Outdoor, IP55 Rated
• USB Modem
• Ruggedized Construction
• PoE Powered
FortiExtender-100A-
VZW (Band 13)
• Outdoor, IP55 Rated
• Internal Verizon 4G Modem
Ruggedized Construction
• PoE powered
20. 20
Components:
» FortiAP or FortiWiFi: Detects
Wi-Fi signal from smartphones
» FortiGate: Aggregates signal
information from multiple APs
» FortiPresence: Processes data
and presents analytics on
dashboard
FortiPresence Solution Overview
FortiPresence
21. 21
Measure
» Total/New/Repeat
» Dwell time duration
» A/B store comparison
» VIP Alert
» Real-time Heat maps
» And more…
FortiPresence: Measure. Connect. Influence
Connect
» Social Wi-Fi Login
» Marketing Opt-in
» Push coupon
Influence
» Analyzes Wi-Fi traffic
» Detect product search
» API can trigger:
» Smart digital signs
» Instant price cuts
» Push Coupons
22. 22
Case Study - Bobbejaanland Theme Park
• Located in Flanders, Belgium
• 56 acres, 50 attractions, 750,000+ visitors per year
Challenge
Retail Theme Park
• Growing attendance and improving profitability
• Increasing utilization of rides and attractions
• Connecting wireless Point-of-Sale systems
• Enabling guest Wi-Fi for visitors
Solution
• FortiGate
– Deployed as Security Appliance and Wireless Controller
• 30+ FortiAP Access Points
• FortiPresence Analytics Service
23. 23
Contattaci gratuitamente…
In questi anni di partnership con la casa
madre, Lan & Wan Solutions ha ottenuto tutte
le specializzazioni previste nei vari iter di
certificazione, raggiungendo la qualifica di
Partner Of Excellence.
Certified experts in Fortimail and email
security
Certified experts in Fortiweb and web
application firewall protection
Certified experts in FortiAp, FortiWifi
and wireless security
Contacts
Tel. +39 049 8843198 DIGIT (5)
contacts@lanewan.it
www.lanewan.it