Comprehensive LAN Security for the Banking Financial Services and Insurance Industries

Transcription

1 Cmprehensive LAN Security fr the Banking Financial Services and Insurance Industries Nevis Netwrks Persistent LAN Security Slutins Nevis Netwrks LAN Security fr BFSI 1

2 Overview f the Banking Financial Services and Insurance (BFSI) Industry Financial segment cvers a cntinuum f institutins including banking, insurance, securities, reprting and s n. The challenges assciated with these institutins are unique and pssess increased ecnmical risk at every step f internal and external transactins. Specific challenges that shwed presence f internal rigins viz. a malicius user with intent f tampering with the finances r a new wrm entering the rganizatin's netwrk thrugh infected USB drive, can pse grave prblems fr the entire netwrk including ATMs, in additin t ptential cyber attacks. Therefre this segment f industry faces distinctive challenges like threat-limited netwrk availability, data access cntrl and security, acquiescence with industry standards, regulatins fr infrastructure and security, and 24 7 netwrk cnnectivity linked with external public r private netwrks. T address these challenges and prevent a pssible blemish t cmpany s brand image, it is imperative t adpt persistent LAN security thrugh advanced Netwrk Access Cntrl Technlgy. Typical Infrastructure Large number f cncurrent users ranging frm few thusands t hundreds f thusands Cnnectins acrss distant areas: Users cnnect frm varius branches ver WAN links crssing natinal and internatinal bundaries. Number f branches varies frm 10 t thusands depending upn the rganizatin scale. Netwrk speed varies depending upn the infrastructure. Authenticatin mechanisms like AD r LDAP which is distributed gegraphically. Patch management servers like WSUS, SCCM, LANDesk and s n. User machines typically use Windws perating system with all its flavrs, with a few Mac and Ubuntu laptps Users largely d nt have administrative rights t their hst machines. Critical servers are lcated at the Headquarters r at a Central Branch. HA infrastructure is present in the cre netwrk. Key Challenges Netwrk cntrl by limiting the access nly fr the rganizatinal assets. Cntrl n access by unknwn machines with reprting in real-time. User cmpliance as per rganizatinal plicies: Viz. Operating System patch versins, Antivirus DAT file versins, Registry values, and s n. Islatin f nn-cmpliant endpints by quarantining. Aut-remediatin t remediate the endpint withut user r administratr interventin. Mnitring fr detectin f malicius behavir (wrms, viruses and zer-day threats) within the traffic reaching critical resurces like Data Centre Servers. Subsequent blcking and ntificatin f detected threat in real-time. Centralized viewing and mnitring f the entire netwrk frm a single mnitring cnsle. Nevis Slutins fr the Pain Pints Transparent User Authenticatin Netwrk access restricted nly t successfully authenticated users. Organizatin s wned asset verificatin is perfrmed and nly verified machines are allwed access MAC address verificatin against a pre-cnfigured list befre prviding netwrk access. This ensures that persnal laptps d nt get access t critical business servers lcated at the Nevis Netwrks LAN Security fr BFSI 2

3 headquarters. End-pint Cmpliance Restrict netwrk access fr machines cmpliant with rganizatinal plicies. Quarantine and aut-remediatin actins fr nn-cmpliant machines befre prviding the netwrk access. Ensures cmplete autmatin f this prcess withut any human interventin. Grup Membership Based Endpint Cmpliance Prvides cmpliance checks based n user rle with executive exemptin fr granular cntrl Smart Plicy Cntrl Mechanisms Cnfigurable plicies like pre-lgin, pst-lgin, threat-quarantine and cei-quarantine used t restrict user access based n end pint cmpliance and behavir Identity Based Plicy Enfrcement ensures users see nly thse netwrk resurces they are suppsed t access. Attempts t check the existence f prhibited netwrk resurces get drpped and ntified t the administratr. IPS ensures quick identificatin f infected machines and prvides their autmatic blcking. Traffic Anmaly (TA) ensures zer-day threats preventin actin. N:M redundancy ffering High Availability (HA) within the netwrk. Centralized mnitring, reprting and cnfiguratin using Appliance Management Server ensure that the netwrk administratr has full cntrl and visibility f every machine inside the netwrk. A list f all nn-cmpliant machines available in real-time Central cntrl fr enabling required patch levels Ntificatins with an ease t drill dwn t the end machine, user and IP address, t rt cause and clean up the end-hst. Benefits & Outcme f the Slutins fr Critical IT Needs Nevis netwrk security slutins equip the BFSI netwrks fr the access cntrl, transparency, visibility and the defense against malicius attacks which are the basic requirements f mdern enterprise netwrks. It prvides cmprehensive netwrk security, plicy enfrcement, and threat cntrl management slutins. It als prvides flexible deplyment methds with scalable slutins. The NAC slutins ffered by Nevis enable a bank, a financial service prvider r an insurance rganizatin t autmatically enfrce its security plicies at the distant endpint thrugh a netwrk f few thusands t millins f users and ATM machines acrss all natinal, internatinal r gegraphically distant lcatins. Effectively, every netwrk sessin is lgged fr frensic analysis and every packet is deep inspected fr ptential threats. In case f any malicius attack, the rgue system is islated and quarantined, besides generating an instant alarm. The whle slutin integrates with ther security cmpnents available at the institutin namely Patch Management, Anti-virus management, Security Infrmatin and Event Management. ROI frm Nevis Security Technlgy Critical custmer infrmatin safeguarded thrugh enhanced security psture Better netwrk availability and reliability - Attacks cannt bring dwn the netwrk easily. Imprved netwrk perfrmance Nevis Netwrks LAN Security fr BFSI 3

4 Reduced supprt calls - Faster nline transactins due t better hygiene f netwrk Autmatin f several manual tasks Higher custmer satisfactin Brand name and integrity assured Deplyment f Nevis Slutin The Nevis slutin is an in-line slutin cmprising f a Nevis LANenfrcer appliance (LE) and a LANsight management server (LS). The LANenfrcer Appliance is available in switch and appliance flavrs: Transparent Appliance N2000/N3000 series A bump-in-the-wire device Secure Access Switch N1000 series Similar t a standard access switch Fr the purpse f the BFSI segment where the critical servers are lcated at the headquarters and need t be prtected frm nn-cmpliant end-users and machines, the N2000 series appliance is recmmended. The Nevis LEs are deplyed near the cre switches befre the data center such that all the traffic frm end user machines necessarily passes thrugh these devices. Effectively LE frms the chke pint fr all traffic befre reaching the critical business servers (data center) f the rganizatin. The slutin can be deplyed in an N:M redundancy mdel depending n the requirement, where N is the number f active LEs and M is the number f standby LEs at any given pint in time. This ensures cmplete High Availability f the netwrk. If any f the active LE lses cnnectivity, the traffic and user sessins f this LE are switched t a secndary LE in the M pl. Active sessins are nt brken in this prcess, ensuring that the end user des nt see any impact f the cnnectivity failure. The Nevis Subnet Lad Balancer device can be deplyed t balance the lad between active LEs based n the subnets being used. Nevis Netwrks LAN Security fr BFSI 4

5 Abut Nevis Netwrks Nevis Netwrks prvides innvative LAN security systems designed t help crpratins prtect infrmatin privacy and integrity, ensure netwrk availability, and maintain regulatry cmpliance. Nevis LANenfrcer prduct family integrates NAC with the deepest threat cntainment at wirespeed t create a "Persnal DMZ" arund every user n the LAN. Nevis Netwrks Sai Trinity Unit 6, 6th Flr East Wing, Survey n 146/2/1A+2B/1 Pashan Circle, Pashan, Pune , INDIA Nevis Netwrks (India) Pvt. Ltd. All rights reserved. Nevis Netwrks, the Nevis lg, LANenfrcer and LANsight are trademarks r registered trademarks f Nevis Netwrks (India) Pvt. Ltd. All ther trade names are the prperty f their respective wners. Specificatins are subject t change withut ntice. Nevis Netwrks LAN Security fr BFSI 5