Vodafone Secure Network Gateway

Transcription

1

2 Vodafone Secure Network Gateway Presented by 00 Month 0000 The future is exciting. Ready? Insert Confidentiality Level in slide footer

3 Digital business demands next generation connectivity Vodafone IP-VPN A single, secure and reliable WAN platform enabling your business to expand globally Optimise and prioritise your applications for maximum connectivity Scalable and cost-effective bandwidth whenever and wherever you need it Insert Confidentiality Level in slide footer 3

4 Creating new opportunities to fast-track your innovation Enabling cloudbased as-aservice delivery Supporting new ways to communicate and collaborate voice, video, messaging and file sharing Facilitating more mobile and remote working Helping to make new business models and partnerships a reality wherever you need it Allowing you to deliver exceptional digital-first customer experiences Insert Confidentiality Level in slide footer 4

5 New opportunities A single, secure and reliable WAN platform - enabling your business to expand globally Optimise and prioritise your applications for maximum connectivity Scalable and cost-effective bandwidth whenever and wherever you need it Bring new risks 34% of firms are likely to have malware in their clouds but don t know it Source: Netskope Non-compliance with the European Union s General Data Protection Regulation (GDPR), could attract fines of up to 4% of worldwide turnover Source: Gartner 75% of customers say they d move away from a company with a record of data breaches Source: FireEye Insert Confidentiality Level in slide footer 5

6 Securing your business is a challenge Highly complex Keeping track of a distributed IT environment Poor visibility Limited knowledge of how the network is being used and where the risks lie Lack of security staff/expertise A struggle to actively monitor and manage security Cost pressures High capex and opex costs relating to the need to deploy and manage multiple technologies User behaviour Workers unaware they may be compromising the business through poor practices Avoiding lock-in Concerns about backing the wrong technologies that soon become no longer fit for purpose Difficult to scale Ensuring a consistent approach across all geographies and securing new initiatives Insert Confidentiality Level in slide footer 6

7 What if you could proactively protect and defend your business and its users against new threats Without the need for any additional hardware, software or licencing? Without increasing the burden on your in-house team? Without the need for constant updates to keep you a step ahead of any security vulnerabilities? Insert Confidentiality Level in slide footer 7

8 Vodafone Secure Network Gateway Next generation, enterprise-class protection for your internet connection It embeds into your existing Vodafone WAN service Protects both inbound and outbound internet traffic, based on your corporate policy Insert Confidentiality Level in slide footer 8

9 Always-on protection Secure Network Gateway modules Secure Network Gateway Insert Confidentiality Level in slide footer 9

10 Always-on protection Secure Network Gateway modules Networkbased internet access Secure Network Gateway Insert Confidentiality Level in slide footer 10

11 Always-on protection Secure Network Gateway modules Networkbased internet access Secure Network Gateway Networkbased firewall Insert Confidentiality Level in slide footer 11

12 Always-on protection Secure Network Gateway modules Networkbased internet access Secure Network Gateway Networkbased firewall Intrusion detection and prevention Insert Confidentiality Level in slide footer 12

13 Always-on protection Secure Network Gateway modules Networkbased internet access Secure Network Gateway Networkbased firewall Secure remote user access Intrusion detection and prevention Insert Confidentiality Level in slide footer 13

14 Always-on protection Secure Network Gateway modules Web security* Secure Network Gateway Networkbased internet access Networkbased firewall Secure remote user access Intrusion detection and prevention Insert Confidentiality Level in slide footer 14

15 Always-on protection Secure Network Gateway modules security* Web security* Secure Network Gateway Networkbased internet access Networkbased firewall Secure remote user access Intrusion detection and prevention Insert Confidentiality Level in slide footer 15

16 Always-on protection Secure Network Gateway modules security* Web security* DDoS protection* (distributed denial of service) Secure Network Gateway Networkbased internet access Networkbased firewall Secure remote user access Intrusion detection and prevention Insert Confidentiality Level in slide footer 16

17 Network-based internet access Challenge: The complexity of operating with multiple internet perimeters, growing bandwidth needs and managing multiple service providers across different geographies Opportunity: To consolidate and centralise the provision of internet services globally Benefits: Global access point coverage Wherever you are we are Real bandwidth scalability Choice of capacity options from 64Mbps to 1Gbps* Control Real-time reporting Robust and resilient With high availability & geographic redundancy options Managed services Choice of support options Insert Confidentiality Level in slide footer 17

18 Network-based firewall Challenge: To enforce comprehensive security policy on both inbound and outbound Internet traffic, regardless of location Opportunity: Protect the organization by blocking malicious traffic at the internet access point while reducing cost and managing complexity of security technologies Benefits: Complete control Rapid and easy configuration of firewall rules to suit the traffic needs of your organisation Greater visibility With advanced threat analytics and reporting across global network Support compliance Option to enable more advanced security features in support of local regulations & standards Ruleset Migration From your current firewalls to Secure Network Gateway with an advanced firewall conversion tool Insert Confidentiality Level in slide footer 18

19 Intrusion detection & protection Challenge: Guarding business against increasingly sophisticated and stealthy threats Opportunity: To benefit from round-the-clock protection against network intrusions, vulnerability exploits and targeted attacks Benefits: Advanced intrusion protection Identifies and stops bad traffic before it can compromise your business Always up-to-date Protecting you from existing and new threats Comprehensive coverage Scans all traffic for your peace of mind Timely reporting From alerting your team in the event of an IDS event to regular reporting to keep you up to speed with what s going on across your network Enabled by 19

20 Secure Remote User Access Challenge: Enabling people to rapidly access business-critical information when they re working remotely without leaving your business or data exposed Opportunity: To provide flexible, reliable and secure global access to resources by staff - from and apps to your corporate intranet Benefits: Remote communications protection Prevents unauthorised access and only allows connection following user authentication and device compliance checks. Stay in control Block the use of unapproved applications and prevent downloads to reduce the risk of viruses and malware. Know how your users are behaving Gain insights into how individual users are using resources and enforce corporate policies Enabled by 20 Make access effortless Support multiple devices PCs, laptops, mobile and tablets giving your users choice and helping them to stay productive

21 Web Security Challenge: Growth in threats posed by malware on commonly accessed sites & use of cloud-based apps that bypass company policy by circumventing traditional firewall protection Opportunity: To better understand and control web browsing habits - and ensure continuous protection against Advanced Persistent Threats Benefits: Better protection against malware Uses cloud intelligence that draws on 40+ security feeds from leading sources to ensure you re always up-to-date and guarding against new risks Complete flexibility To prohibit access to unproductive or out of policy websites with flexibility to adapt by division, geography and user profile Extreme scalability Uses cloud intelligence to detect a threat once and then propagate across all data centers to protect your users globally Greater insights Know what types of web traffic and cloud services your users are accessing Enabled by 21

22 Secure Network Gateway One platform that delivers next-generation secure connectivity Easy to deploy Taking advantage of fully virtualised solutions on your IP-VPN No need for additional equipment means no CAPEX Quick click to add service features Easy to manage Single management console for reports, configuration changes and audit trails Integrated dashboard and reporting provides a single view into network and security activity Detailed reporting keeps you in the know Easy to scale One platform that can meet your needs globally Readily connect new locations with the same security policy & industry leading SLAs 24x7 helpdesk operations for support whenever you need it Choice of managed services to meet your needs Insert Confidentiality Level in slide footer 22

23 Secure Network Gateway Providing business value Improving productivity Enables your people to work at their best, wherever they are, while freeing your own security specialists to focus on business outcomes rather than 24x7 monitoring Supporting regulatory compliance Giving you the extra protection needed to help maintain the privacy of your data plus the levels of reporting and audit trails needed to simplify compliance Minimising business risk Helping you manage your highest value assets through visibility of network traffic with actionable security event detail - plus our go-to experts for incident handling. Insert Confidentiality Level in slide footer 23

24 Why Vodafone? Insert Confidentiality Level in slide footer 24

25 Cybersecurity is a key concern for organisations of all sizes. Protecting devices, networks, data and apps is an essential component of doing business. Vodafone provides security products and services to businesses of all sizes and we are trusted by organisations globally, including utilities, financial institutions and government agencies. Insert Confidentiality Level in slide footer 25

26 We help you secure your business anywhere because we are everywhere Clean and Secure endpoints devices, machines and things Securing the end-point itself and the data on it. Ensuring data, apps and things are not accessed by un-authorised people and things Clean and Secure connectivity fixed-line, mobile, WiFi and cloud Securing data in transit between people, places and things Clean and Secure data and apps Securing data and applications, either in the cloud or onpremises Insert Confidentiality Level in slide footer 26

27 Be confidently connected with Vodafone Vodafone has the largest global network with over 200 hub cities and 314 PoPs World-class leader in mobile, fixed-line, IoT and cloud networks Vodafone transported 2,000 petabytes of data across our network in 2016 End-to-end security architecture from networks to devices to the cloud Vodafone carries 10% of the world s internet traffic Presence in 74 countries gives us a unique global perspective and ability to monitor and react to threats as they emerge Insert Confidentiality Level in slide footer 27

28 Next Steps Schedule a design session To review your current network security controls with our Vodafone solution architect Where you can discuss security technologies in use today and considerations for the future growth of your organisation To talk over the technical components of the Secure Network Gateway, a how it works discussion And gather information to scope and price the project For timelines and next steps for a proposal Insert Confidentiality Level in slide footer 28

29 Technical View Insert Confidentiality Level in slide footer 29

30 Connecting your sites, locations and people Collaboration/ Instant messaging Video conferencing Mobility Business applications Security Third party/customers Insert Confidentiality Level in slide footer 30

31 Connecting your sites, locations and people Secure Network gateway Internet access Firewall Intrusion detection & prevention Secure remote user access Web security* security* DDoS protection* *Future SNG release Insert Confidentiality Level in slide footer 31

32 Network-based internet access Global internet access point coverage Vodafone presence in North America, Europe and Asia Global coverage allows you to select the internet breakout that best suits your needs Geo-redundancy and high availability failover options Expanding into new locations in the next 18 months Insert Confidentiality Level in slide footer 32

33 Network-based internet access How it works Core features: Globally available Default firewall to deny all inbound traffic Add-on to existing IP-VPN service 24x7x365 support Optional features: Reporting Geographic resiliency Public IP address space Granular bandwidths Virtual DMZ Insert Confidentiality Level in slide footer 33

34 Network-based firewall How it works Core features: Protection against advanced internet borne threats Enforce compliance with corporate policies and industry regulations Firewall policy customized to business requirements Reporting 99.9% availability as standard Integrates into existing authentication systems for seamless user access Application usage reporting Optional features: DMZ access control External syslog feed Traffic shaping (premium service) Geographic POP redundancy High availability Secure Remote User Access (2-factor authentication) Insert Confidentiality Level in slide footer 34

35 Network-based firewall versions available Items Standard Premium Inbound/outbound ruleset (More than 1000 will go through a non-standard delivery process) Change management (hard and soft changes) Yes Yes Application reporting Yes - SSL Certificate Inspection Yes - deep cloud app inspection and Full SSL Inspection Firewall event/logs 6 month retention 12 month retention Reporting via portal Yes predefined list Yes - Predefined list Reports frequency weekly/monthly Daily/weekly/monthly External syslog feed Yes - optional Yes - optional DMZ deployment Yes - optional Yes - optional Change management (hard and soft changes) Yes Yes User access policies with Active Directory Integration Not available Yes Enabled by 35

36 Intrusion detection and prevention How it works Core features: Protection from known Internet threats & exploits Advanced threat analytics across global network Ability to detect attacks in SSL traffic Anomaly based detection Alert notifications Comprehensive reporting 6 months retention on reports Service change requests accepted 8x5; implemented 24x7 Optional features: Create trusted zone (DMZ) External Syslog feed Traffic shaping (premium service) Geographic resiliency options (see note for SNG) Insert Confidentiality Level in slide footer 36

37 Intrusion detection and prevention versions available Items Standard Premium Policy protection Default Customisable Threat detection via SSL No Yes Anomaly based detection No Yes - comes with tuning support NIDs/NIPs events/logs 6 month retention 12 month retention Configurable alerting options Yes - based on severity or other parameters Change management Yes Yes Yes - based on severity or other parameters Reporting via portal Yes pre-defined list Yes Predefined list Reports frequency weekly/monthly Daily/weekly/monthly External syslog feed Yes - Optional Yes optional DMZ deployment Yes - optional Yes optional Enabled by 37

38 Secure remote user access How it works Enabled by Core features: Protection from known Internet Secure & flexible granular remote access by home workers & roaming users to internal company resources Client-based and clientless access 99.9% availability from a single gateway Supports multi-factor authentication Integration into customer authentication systems Comprehensive reporting DNS integration Optional features: Local Internet Breakout via split tunnelling function External logging Two-factor authentication (enabled by Gemalto) 38

39 Web security How it works Core features: Full inline inspection of web traffic on all ports and protocols Corporate policy controlled from a single point Detailed insights into the types of web services being accessed Flexible policy for separating users by division or geographic location Over 120k security updates every day Scalable and elastic Detailed reporting Real time detailed reporting & logging Designed to help accelerate cloud adoption Insert Confidentiality Level in slide footer 39

40 Web security versions available Suites Advanced Threat Protection Page risk and content analysis of malware, calls backs cross-site scripting, cookie stealing & anonymizers Cloud Application Visibility & Control Discover monitor & control access to web applications Data Loss Prevention Inline scanning to identify confidential data leaving the organisation Bandwidth Control Ensure business apps like Office 365 get the highest priority Cloud platform SLA for high availability and latency Policy follows the user anywhere in the world Multiple auth methods (SAML, secure LDAP, Kerberos, hosted etc Zscaler Application (Z-App) for mobile traffic IPSec encrypted tunnels to the cloud Available as a managed service Content filtering Filter across 6 classes, 30 super-categories, 90 categories Granular policy by users, groups, locations, time and quota Inline anti-virus and anti-spyware Signature based anti-malware protection for any size Full inbound/outbound file inspection with near-zero latency 40 Essential (Professional) X X X X X X Standard (Business) X X X Premium (Enterprise)

41 Before SNG: complex networks, internet access and security Insert Confidentiality Level in slide footer 41

42 With SNG: consolidated and centralised internet security Insert Confidentiality Level in slide footer 42

43 Cyber Portfolio Overview Insert Confidentiality Level in slide footer 43

44 Cyber Security embedded and attached across our portfolio Mobility SecureNet Vodafone User Authentication Mobile Threat Defence Enterprise Mobility Management Cloud Connectivity Secure Network Gateway: Network Based Internet Access Network Based Firewall Intrusion Detection and Prevention Secure Remote User Access Security Web Security DDoS IoT Cloud Access Security Broker Hosted Firewall and IDS Hosted VPN Managed Proxy Security DDoS IoT Network IoT Managed Service Platform Insert Confidentiality Level in slide footer 44

45 Cyber security : Mobility Product Description SME Large SecureNet Malware & phishing protection on Vodafone s 4G network Mobility Vodafone User Authentication (Gemalto) Enterprise Mobility Management (AirWatch, MobileIron, Blackberry/Good) 2-factor authentication, replacing costly physical tokens Visibility & control of mobile devices accessing corporate resources, including app & content management Insert Confidentiality Level in slide footer 45

46 Cyber security : Connectivity Product Description SME Large Connectivity Secure Network Gateway Fortinet, 7 locations Modules: Network Based Internet Access Network Based Firewall Secure Remote User Access Intrusion Detection and Prevention Web Security (Zscaler) Security (late 2017) (BAe) DDoS (late 2017) (Arbor) Scalable, cloud-based protection for IP-VPN. Delivered as a network feature with no additional hardware or software, charged as-used, deployment simplified Secure Internet connection for IP-VPN customers Low latency protection against network attacks For employees connecting to corporate network Added protection from more sophisticated attack types Protection from malicious web content Protection from threats to traffic Protects network from deliberate attempts to impair performance (Distributed Denial of Service) Insert Confidentiality Level in slide footer 46

47 Cyber security : Cloud Cloud DDoS Protection (Arbor) Security (MessageLabs) Managed Proxy (BlueCoat) Hosted VPN (Cisco) Product Hosted Firewall & IDS (Cisco,Checkpoint) Cloud Access Security Broker (early 2018) (CASB) Description SME Large Protection for connectivity & hosting in customer or Vodafone data centre Protection for connectivity & hosting in customer or Vodafone data centre Web security hosted in Vodafone data centre Secure connectivity to corporate networks via the Internet for remote workers, hosted in Vodafone data centre Managed firewalls & intrusion detection within Vodafone data centre Discovery of cloud usage and control of cloud applications to allow organisations to safely adopt cloud services and meet compliance obligations Insert Confidentiality Level in slide footer 48

48 Cyber security : IoT Product Description SME Large IoT Network Closed-group, monitored IoT network with security embedded in the platform providing end to end protection for connected devices IoT IoT Managed Services Platform Closed-group, monitored IoT network with security embedded in the platform providing end to end protection for connected devices Insert Confidentiality Level in slide footer 48

49 Thank you Contact your account manager or call Or visit Insert Confidentiality Level in slide footer 49