Identity Awareness Software Blade Check Point Software Technologies Ltd. [Unrestricted] For everyone

Transcription

1 Identity Awareness Software Blade 2010 Check Point Software Technologies Ltd. [Unrestricted] For everyone

2 Agenda 1 Introduction 2 Solution Overview 3 Identity Awareness Features 4 Selling Strategy 2

3 Agenda 1 Introduction 2 Solution Overview 3 Identity Awareness Features 4 Selling Strategy 3

4 Identity awareness Identity Awareness Software Blade Granular Security Policy per User, Machine and Location softwareblades 4

5 Best Practice Managed Assets Data Center Contractor Corporate Laptop Corporate Network IP: User: John Morgan HR / Server Finance_Group Machine: John_XP Finance Server Guest Internal Firewall IP: Guest Name: Anna Smith PDA / SmartPhones AD /Directory Perimeter Firewall IP: Web Server User: Pool Frank Gore / DMZ Marketing_Group Application: FaceBook Internet 5

6 Agenda 1 Introduction 2 Solution Overview 3 Identity Awareness Features 4 Selling Strategy 6

7 Identity Awareness At-A-Glance Security Gateway ability to identify users and machines passing through the gateway User and Machine Awareness Available for multiple Software Blades Firewall (R75) Application Control (R75) DLP, URLF, IPS (in the future) Across All Software Blades Scalable for up to 25,000 concurrent users on Power-1 series Security Gateways IA Software Blade 7

8 Identity Awareness Use Cases Identity-Based Access Policy Internal Security Perimeter Security Security Management 8

9 Identity Awareness Use Cases Identity-Based Access Policy Internal Security User-Based Access Policies Perimeter Security Security Management 9

10 Internal Security Why Is Identity Required on The Internal Firewall? Control user-based access to internal resources and applications Validate endpoint compliance accessing sensitive information Strengthen authentication capabilities to different resources 10

11 Identity Awareness Use Cases Identity-Based Access Policy Internal Security User-Based Policies for All Software Blades App Control Perimeter Security Security Management IPS* URL Filter* DLP* * To be available in

12 Identity Awareness Use Cases Identity-Based Access Policy Internal Security User and Machine Visibility in Logs Perimeter Security Security Management 12

13 Agenda 1 Introduction 2 Solution Overview 3 Identity Awareness Features 4 Selling Strategy 13

14 Access Roles Easy to setup Users and Groups could be fetched from the AD directly Across all blades i.e. Firewall, Application Control 14

15 Identity Sources Clientless Captive Portal Light Agent Flexible options to obtain Users Identity 15

16 Identity Sources Clientless Captive Portal Light Agent IP to mapping Connections Active Directory Simple and Fast Deployment No agent required on endpoint and Active Directory 16

17 Identity Sources Clientless Captive Portal Light Agent Web Portal redirect Internet Data Center Restrict Guest access Provide secure access for non-domain endpoints 17

18 Identity Sources Clientless Captive Portal Light Agent User and Machine Authentication (SSO Kerberos) Stronger security with User and Machine Identity SSO and IP spoofing prevention 18

19 Competitors Overview Clientless Access Cisco Juniper Not supported Not supported Clientless Identity Awareness Palo Alto Networks Requires agent installation on AD or separate Windows PC Check Point Unique No agent installation No additional server No license is required Fortinet Requires agent installation on every AD and separate Windows server 19

20 Competitive Overview Clientless Machine ID Agent with SSO Integrated on the Gateway Large Scale Deployment Requires agent on each AD Requires agent on domain PC Citrix / TS Planned Identity Integrity 20

21 Agenda 1 Introduction 2 Solution Overview 3 Identity Awareness Features 4 Selling Strategy 21

22 Identity awareness Pricing and Licensing Model Free of Charge! Required in R75.10 Included in new appliances Included in new pre-defined systems No support costs IA Blade is available via User Center Identity Awareness IA Offering Granular security per user and machine across the $1500 security gateway Promotion : $0! 22

23 Identity awareness R75.10 Upgrade Strategy Free Upgrade! From NGX Licensing Software Blade Licenses (R70/R71) FREE Included in free SW blade licensing migration Free IA blade and license from User Center R75 GA Required in R75.10, free via User Center 23

24 Check Point Application Control Software Blade 2010 Check Point Software Technologies Ltd. [Unrestricted] For everyone

25 Internet Applications in the Work Place Internet Applications an integral part of today s business John and Support Andy Mike Jeff Sue Julie David is (HR) sending posting team work watching Web searching updating new pictures progress the helping conferencing a to recap on his of with for corporate his personal customer Gmail Dan from last Facebook night branch candidates Twitter account on Skype office NBA status profile results IT staff lack strong visibility into this activity 25

26 The Problem with Internet Applications Malware Threats Bandwidth Hogging Productivity Loss 26

27 Introducing Check Point Application Control Software Blade Detect and control application usage AppWiki Industry s largest library with over 50,000 applications Educate users on corporate policies Available Q Available on EVERY gateway 27

28 Introducing Check Point AppWiki Unparalleled Application Control Over 4,500 applications Over 50,000 social-network widgets Grouped in over 150 categories (including Web 2.0, IM, P2P, Voice & Video, File Share) World s largest Application Classification Library 28

29 Granular Application Categorization Application Type IM Web conferencing Gaming. Advanced Properties Share files High bandwidth Use stealth techniques Security Risk Measures the potential risk 29

30 User and Machine Awareness Includes User Identification Corporate Active Directory Security Gateway User- and group-aware Machine-aware User identification with both agent-based and seamless, agentless Active Directory integration 30

31 Application Detection and Usage Controls Application Detection and Usage Controls Enable access for support team Identify, allow, block or limit usage of applications at user or group level 31

32 Check Point UserCheck Technology Ask Understand usage needs, while enforcing policy Application Usage Alert You are trying to use Skype. Corporate application use policy does not allow the use of Skype. If you require Skype access for business, please click Explain blow. Makes application control more practical Corporate Proper Use Policy Asks users to explain reasons for application usage 32

33 Check Point UserCheck Technology Inform Inform and educate, while allowing application usage Alerts users in real-time Educates users on risk and usage policies 33

34 Check Point UserCheck Technology Limit Use to preserve resources (bandwidth) or control acceptable use Application Usage Alert You are trying to access Facebook Games. Corporate application use policy allows access to non-business related activities such as Facebook Games only during these times: 12:30-14:00 19:30-8:30 Corporate Proper Use Policy 34

35 Practical Implementation Involve end-users using multiple policy actions Accept / Drop Traditional security policies are suitable for clear-cut cases Inform Allow but inform the user about the risks Ask Learn usage patterns to create better policies Limit Use to preserve resources (bandwidth) or control acceptable use 35

36 Easy Deployment Available on All Security Gateways Application Control Identify and control usage of thousands of applications based on user and machine identity. One-click activation on any Check Point security gateway 36

37 Central Policy and Event Management Centralized Management Manage application policies, users and events from a single console 37

38 Summary Check Point Application Control Software Blade Detect and control application usage AppWiki Industry s largest library with over 50,000 applications Educate users on corporate policies Available on EVERY gateway 38

39 Perguntas? 2010 Check Point Software Technologies Ltd. [Unrestricted] For everyone