- Количество слайдов: 19
Fortinet Unified Threat Management Pro. Curve Open Network Ecosystem Add Presenter Name Here © 2009 Hewlett-Packard Development Company, L. P. The information contained herein is subject to change without notice.
Fortinet and HP Pro. Curve • The customer challenge − Increase network application security without increasing cost and complexity − Prevent inbound and outbound malicious or unauthorized traffic − Reduce utilization of valuable LAN and WAN resources − Improve policy compliance • The solution: Forti. Gate-One on HP Pro. Curve zl Blades − Single security blade with integrated firewall, antimalware, IPS, VPN, anti spam, application control, web filtering, and data loss prevention − Security-hardened, purpose build network and application solution − Integrated protection against dynamic security threats that simplifies the IT security infrastructure 2
UTM market • Fortinet is the Q 2 09 IDC Share leader in the UTM market − Fortinet leads revenue marketshare at 15. 4% − Juniper is in second place at 9. 0% • IDC 2008 estimation of Unified Threat Management Market − $2. 52 B – 2010 − $3. 08 B – 2011 − $3. 53 B – 2012 • Gartner places Fortinet in the 2009 Leader Quadrant − Fortinet, Sonic. Wall and Watch. Guard lead for SMB Multifunction firewalls − Fortinet also a strong challenger in Enterprise Network Firewalls • Fortinet continues to win multiple awards − SC Magazine Awards Australia − 2008 Global Market Leadership Award for UTM from Frost and Sullivan 3
Today’s blended attacks Require integrated multi-threat protection Problem PORT 80 Error message “Drops” copy of itself on system and attempts to propagate “Innocent” Video Link Redirects to malicious Web site or innocent site hosting infected content Solution “Out of date” Flash player error “Download” malware file FIREWALL Integrated Web Filtering Blocks access to malicious Website Network Antivirus Blocks download of virus Intrusion Protection Stops the worm from phoning home 4 WEB FILTERING ANTIVIRUS INTRUSION PROTECTION
What Fortinet and HP Pro. Curve? • Fortinet’s highly modular system lets organizations tune and customize their own multifunction security appliance on the Pro. Curve ONE Services zl Module • The Forti. Gate security solution provides: − Proven, integrated protection against sophisticated multi-threat attacks − Reduced TCO due to integration of stand-alone security technologies − Increased security without increased complexity due to a consolidated management console − Market-leading security with the convenience of a blade provides east of deployment, configuration, and management 5
HP Pro. Curve and Fortinet Security solutions © 2009 Hewlett-Packard Development Company, L. P. The information contained herein is subject to change without notice.
Customer requirements Stakeholder roles and concerns Benefits of Fortinet / HP Pro. Curve Solution CTO, CSO, CISO • Lower costs while increasing security Responsible for overall information security needs. Efficient use of budgets. • Reduce exposure to threats/outages cause by unprotected/infected networks and systems • Consolidate and integrate numerous stand-alone products while reducing cost of ownership Director of Information Security Must manage and implement the consolidated security purchase. Directly manages information security staff. • Minimize business risks by preventing application and network-based attacks • Reduce IT Op. Ex and Cap. Ex by reducing stand-alone technologies • Make existing IT resources more effective while improving overall security posture Security Architect Evaluates products/technologies to ensure they integrate with existing technologies • Certified by HP and compatible with the Pro. Curve ONE program • Easy to use GUI, CLI, and central management • Enterprise-grade class scalability and performance that does not affect applications, systems, and networks • Unparalleled breadth of features 7
Solution overview • Customer focus: Primarily Mid-Market and Enterprise ROBO • Specific use case: Customers want to increase the layers of protection they deploy in their network while reducing the number of stand-alone security solutions they have to manage to lower costs and IT management burden. • HP Pro. Curve products involved: − 5400 Series Switches − 8200 Series Switches − ONE Services zl Modules • Fortinet Products Involved: − Forti. Gate base multi-threat appliances with Firewall VPN, Anti-virus, IPS, Web Filtering, Anti-Spam, DLP, Application Control, SSL inspection, and Dynamic routing • 8 Launch Components: Data Sheets. Customer and Sales presentations
Forti. Gate capabilities • VPN (IPSec and SSL VPN): Protects the confidentiality of data in transit from remote offices and users to inside the network perimeter • Anti-virus: Advanced heuristic detection and continuously updated signature database provide multi-layers, real-time protection against new and evolving virus, spyware and other malicious code • Intrusion Prevention (IPS): Protection for the core or edge that prevents internal and external attacks on critical applications. IPS detects and blocks malicious traffic that can evade other security technologies, before the attack can succeed. • Web filtering: Blocks access to inappropriate, harmful, or malicious sites and content. It protects organizations by blocking users ability to access potentially harmful content. • Anti-spam: Forti. Gate-One detects, blocks, tags, and quarantines message spam. It provides maximum protection against sophisticated message-borne threats. 9 • Data loss prevention (DLP): Prevent the loss of sensitive, regulated, and propriety data through intentional and accidental means. Forti. Gate. One DLP uses a sophisticated patternmatching and regular expression engine to identify and prevent the loss of confidential information. • Application Control: Forti. Gate-One enables organizations to enforce application security policies regardless of the port or protocol used. It detects and blocks unapproved application traffic, reducing the risk of application-borne threats. • SSL-Encrypted Traffic Inspection: Forti. Gate. One provides visibility into SSL-encrypted data with its ability to intercept and inspect the data, before allowing it to reach its intended destination. SSL inspection applies to both client-oriented SSL traffic as well as inbound traffic intended for web and application servers. • Dynamic Routing: Forti. Gate-One supports BGP, OSPF , and RIP protocols for IPv 4 and IPv 6.
Fortinet environment use model 10
Product and support information Product SKU Description Forti. Gate-One software FG-One Forti. Gate-One System Firmware for HP Pro. Curve 8 x 5 Enhanced Support FG-One-BDL Bundle - Forti. Gate-One Fortinet Software • Includes all functions--No additional modules to purchase • No per-user licensing • Bundle includes 12 months of 8 x 5 support • For more information on support options: − www. fortinet. com/support/forticare_support/ • Fort more information on subscription services for dynamic content updates: − www. fortinet. com/support/fortiguard_services/ 11
Solution differentiation versus Cisco HP versus other Cisco Fortinet versus Cisco • Lower purchase price for infrastructure • Cisco is complex to deploy and manage in diverse environments - Fortinet deploys quickly • Proven reliability backed by our lifetime warranty • Cisco requires additional license fee per user for the appliance - Fortinet has no per-user pricing • Certified green means lower power costs in your data center • Cisco IPS requires additional hardware – Fortinet does not • Dramatically lower maintenance • Cisco antivirus requires a Content Security costs Module and licensing per user fee & support – Fortinet does not • Cisco does not offer breadth of security services offfered by Fortinet , inlcuding antivirus/antispyware, antispam, VPN-SSL, and web filtering 12
Why HP Pro. Curve and Fortinet Supporting details © 2009 Hewlett-Packard Development Company, L. P. The information contained herein is subject to change without notice.
About HP Pro. Curve Networking Division of HP, the #1 IT vendor • 26 years of continued investment and innovation in networking • Second largest provider of managed switched Ethernet ports in the world • Fastest-growing provider of Layer 3 -7 Ethernet switching • Leader in Gartner Magic Quadrant (Campus LAN) • Open, standards-based networking leadership • 14
Fortinet corporate overview Global presence with 30+ offices worldwide − 5, 000+ channel partners − 75, 000+ customers (including the majority of the Fortune Global 100) • 1, 150+ employees • Shipped over 450, 000 appliances in its history • 2008 sales of ~$212 MM (36% Yo. Y growth) − Cash flow positive and GAAP profitable • World class management team GR • Fortinet Revenue CA Founded in 2000 74. 8% •
FAQs 1. Can Fortinet handle my support requirement needs? • • Yes. Fortinet’s Forti. Care global support team offers a range support options, including 24 x 7 support, 8 x 5 support, premium support with technical account management, and professional services. Premium support is offered in three packages, which enables customers to determine the exact level of premium support they need. Fortinet supports some of the largest and most successful companies in the world: − Seven of Top 10 Fortune 500 in US − Five of Top 10 Global 500 in EMEA − Seven of Top 10 Global 500 in APAC Fortinet also delivers world-class threat research and dynamic product updates through Fortinet’s Forti. Guard Global Threat Research Team. Their research forms the basis of the Forti. Guard Security Subscription Service, which deliver continuous, automated updates of antivirus, intrusion prevention, web filtering, antispam, vulnerability management and compliance management, application control, and database security services. 2. How does this integrate with my existing Pro. Curve infrastructure • Fortinet has optimized the installation of the Forti. One software for the Pro. Curve infrastructure. 3. I have a Cisco core solution and it is much easier to extend to the edge using Cisco switches. • As the number 2 Ethernet Vendor, Pro. Curve has a long history of integrating within a Cisco environment and we have successfully done so many times. The following link provides more detail on how to integrate into the core: http: //www. procurve. com/solutions/enterprise/security/network-infrastructure. htm 16
Support © 2009 Hewlett-Packard Development Company, L. P. The information contained herein is subject to change without notice.
Fortinet support • Fortinet will provide level 2 and level 3 support through its partners − Customer contacts partner technical support • If partner technical support cannot resolve issue, partner will escalate to Fortinet/HP support • Fortinet offers regional support as follows: − Americas, EMEA, and APAC (including support in Japanese and Mandarin) • www. fortinet. com/support/contact_support. html − Fortinet Certified Network Security Professional (FCNSP) certification receive access code for immediate Level 3 support 18
Technology for better business outcomes