Next Generation Firewall and IPS
•
3 gefällt mir•822 views
Data#3 discuss Cisco's Next Generation Firewall and IPS. Data#3 advise on how you can trial the ASA device via a proof of value.
Empfohlen
Weitere ähnliche Inhalte
Was ist angesagt?
Was ist angesagt? (20)
Ähnlich wie Next Generation Firewall and IPS
Ähnlich wie Next Generation Firewall and IPS (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
Next Generation Firewall and IPS
- 1. Next Generation Firewall and IPS “gain the upper hand”
- 2. Data#3 Security Practice – Cisco Security Outstanding Performance in FY15 – ANZ Security Partner 2015 Cisco ANZ Software Solution Partner of the Year Advanced Security Architecture • Advanced Malware Protection • Next Generation Firewall Identity Services Engine (ISE) • Bring Your Own Device (BYOD) • Mobile Device Management
- 3. Cisco Journey NAC addition Messaging and Web Security Appliance Cloud Security UTM Security Analytics NGIPS / Anti-Malware Sandbox 2004 2007 2009 2012 2013 2014 2015
- 4. The Security Problem Changing Business Models Dynamic Threat Landscape Complexity and Fragmentation
- 6. Breaches Happen in Hours…. Initial Compromise to Data Exfiltration Initial Attack to Initial Compromise Initial Compromise to Discovery Discovery to Containment/ Restoration Seconds Minutes Hours Days Weeks Months Years 10% 8% 0% 0% 75% 38% 0% 1% 12% 14% 2% 9% 2% 25% 13% 32% 0% 8% 29% 38% 1% 8% 54% 17% 1% 0% 2% 4% Timespan of events by percent of breaches – Source : Cisco Managed Threat Defense + In 60% of breaches, data is stolen in hours. 85% of breaches are not discovered for weeks. 6 But Can Go Undetected For Weeks/Months
- 8. Full Control HR ZoneIT ZoneSales Zone Network Zone DC Zone Internet Zone Mobile Zone
- 10. Point in Time Continuous Network Endpoint Mobile Virtual Cloud Detect Block Defend DURINGBEFORE Discover Enforce Harden AFTER Scope Contain Remediate
- 11. ASA + Sourcefire = Adaptive, Threat-focused Next Generation Firewall CISCO ASA Identity-Policy Control & VPN URL Filtering (subscription) FireSIGHT Analytics & Automation Advanced Malware Protection (subscription) Intrusion Prevention (subscription) Application Visibility & Control Network Firewall Routing | Switching Clustering & High Availability WWW Cisco Collective Security Intelligence Enabled Built-in Network Profiling
- 13. Context is Everything Event: Attempted Privilege Gain Target: 96.16.242.135 Event: Attempted Privilege Gain Target: 96.16.242.135 (vulnerable) Host OS: Blackberry Apps: Mail, Browser, Twitter Location: Whitehouse, US Event: Attempted Privilege Gain Target: 96.16.242.135 (vulnerable) Host OS: Blackberry Apps: Mail, Browser, Twitter Location: Whitehouse, US User ID: bobama Full Name: Barack Obama Department: Executive Office
- 15. Cisco FirePOWER
- 16. The New Security Model 16 After Determine Scope Contain & remediate Before Reduce attack surface Detect reconnaissance During Detect and prevent C O N T E X T U A L A W A R E N E S S EVENTHORIZON Retrospective security
- 17. The Data#3 Proof of Value
- 18. Introducing the Proof Of Value (POV)?
- 19. How does it work? Existing FW does not see malicious traffic
- 20. How does it work? Sourcefire identifies and reports malicious traffic This is not intrusive
- 21. What is the outcome of the engagement 1. Three Customised Reports • Advanced Malware Risk Report • Attack Risk Report • Network Risk Report 2. Risk Visibility 3. Summary Presentation
- 22. Calls to Action • Review Gateway Security Strategy • Look for opportunities to reduce security complexity • Engage Data#3 for a Proof of Value