Embed Size (px)
Citation preview
© 2009 WatchGuard Technologies
Securing the Future with WatchGuard XTM Network Security Solutions
© 2009 WatchGuard Technologies
Meeting Today’s Business Security Needs
IP Networking Technology is Converging
More clients, more traffic hits the network than ever before!
VoIP
Wireless LAN
PC Computing
PowerMobile Computin
g
Internet
New Applications
Network Speed is Accelerating
Broadband for Small Business (US)Comcast: 6 to 50 Mbps
16 Mbps for $99/mo.Quest: up to 20 MbpsVerizon: up to 50 Mbps
Threats are Rapidly Evolving!
Most Common “Child” MalwareMicrosoft Security Intelligence Report 2009
Bot Client (Trojan) Most Popular Payload
Most Common “Parent” MalwareMicrosoft Security Intelligence Report 2009
Malware Volume Out of Control
x3 x6 ???
Malware Delivery More Dynamic/Agile
Between their increased reliance on botnets and the introduction of new evasion techniques, the servers that deliver malware have become much more dynamic and agile
“European cyber-gangs target small US firms”
• Fortune 500 companies are not the only targets– Attackers use malware planted on corporate computers to
initiate fraudulent wire transfers– Cyber criminals stole $750,000 from a small school district
near Pittsburgh– Unique Industrial Product Co., a plumbing equipment
supply company in Texas, lost $1.2 million– JM Test, an electronics calibration co., lost over $90,000
Businesses are More Accountable Than Ever!
• Regulations get tough on irresponsible handling of Personally Identifiable Information (PII).– Hefty fines for non-disclosure– Legal fees
• Businesses can’t operate without adequate network security.– PCI-DSS: comply or lose ability to process credit card
transactions– HIPAA: comply or lose license.
• Direct losses can be massive.
Within This Environment, You Need the Best Solution!
“We’re extremely satisfied with the WatchGuard products…switching to a single provider has made our internal IT department’s work considerably easier.´ Martin Korn, Head of IT & Central Service, Novoferm GmbH
WatchGuard is Bringing New Solutions…
Featuring XTM Series Network Security Appliances
WatchGuard XTM 2 Series
WatchGuard XTM 5 Series
WatchGuard XTM 8 SeriesWatchGuard XTM 1050
14
The Best Protection…
Proactively blocks viruses, worms, spyware, trojans, and blended threats
Out of the box
Over 600,000 appliances shipped since 1996
At the Best Value!
From a Leader in the Industry
Gartner Magic QuadrantSMB Multifunction Firewalls
© 2009 WatchGuard Technologies
WatchGuard XTM Products
XTM Series Target Markets
XTM 2 Series
XTM 5 Series
XTM 8Series 1050
WatchGuard XTM 1050 Solution
10 Gbps Firewall Throughput
2 Gbps VPN Throughtput
XTM Security Platform
Powerful, Flexible Management Tools
Optional Fiber Module Dual hot swap power
supplies and fans Affordable Enterprise-
Grade Security!
WatchGuard XTM 8 Series Solution
• Up to 5 Gbps Firewall Throughput
• Up to 1.2 Gbps XTM Throughtput
• XTM Security Platform
Best Price for the Performance!
Investment Protection A natural fit!
XTM 1050 and 8 Series Speed and Power!
Intel Multi-Core Processor 10-12 Copper 1-Gb Interfaces 2 USB, 1 Serial DB9 2 Gb SDRAM Memory 1 GB Flash Memory 1U – 2U Rack Mounts Complies with NRTL/C, CB, RoHS, WEEE,
REACH Security Certifications in progress: ICSA,
FIPS 140-2, EAL4
Reaching New Heights is a Family Affair! XTM 810 XTM 820 XTM 830 XTM 1050
Firewall Throughput 3 Gbps 4 Gbps 5 Gbps 10 Gbps
XTM Throughput 900 Mbps 1.1 Gbps 1.3 Gbps >1.4 Gbps
1-Gig Interfaces 10 10 10 12
Concurrent Connections (bi-directional)
500,000 750,000 1,000,000 >1,250,000
BOVPN 1000 2000 6000 7000
MUVPN (IPSec) 600 to 2000 700 to 6000 800 to 8000 15,000
MUVPN (SSL) 1000 4000 6000 15,000
VLANs 200 300 400 500
Management with Logging/Reporting
WatchGuard System Manager
WatchGuard System Manager
WatchGuard System Manager
WatchGuard System Manager
Model Upgrade Yes Yes No No
Security Platform Fireware XTM Pro
Fireware XTM Pro
Fireware XTM Pro
Fireware XTM Pro
WatchGuard XTM 5 Series Solution
• Uncompromised performance with 2.3 Gb/s Firewall and 800 Mb/s XTM.
• 7 Ethernet ports including 6 GbE• 4 models from which to choose the best fit.• Runs Fireware XTM 11.2.1 or higher• Managed with WSM 11.2.1 or higher• Market leading value!
Not All Mid-Size Companies are the Same!
XTM 505* XTM 510 XTM 520 XTM 530Firewall Throughput 850 Mb/s 1.4 Gb/s 1.9 Gb/s 2.3 Gb/s
XTM Throughput 275 Mb/s 400 Mb/s 600 Mb/s 800 Mb/s
Concurrent Connections (bi-directional)
40,000 50,000 100,000 350,000
BOVPN 65 75 200 600
MUVPN (IPSec) 5/75 25/100 50/300 400/1000
MUVPN (SSL) 1/65 1/75 1/300 1/600
Local User Database Max. 500 500 1000 2500
Management with Logging/Reporting
WSM 11.2.1 WSM 11.2.1 WSM 11.2.1 WSM 11.2.1
Model Upgrade Yes Yes Yes No
Security Platform Fireware XTM 11.2.1
Fireware XTM 11.2.1
Fireware XTM 11.2.1
Fireware XTM 11.2.1
*XTM 505 is sold with bundled UTM only
Leading Value for Rack Mount Appliances!
5 Series Package Contents
• 1 XTM appliance• 1 rack mount kit• 2 ethernet cables• 1 management cable (RJ-45)• 1 power cord• Getting Started Guide• Hardware warranty card• LiveSecurity Service activation card• 4 rubber pads for the bottom of the device.
WatchGuard XTM 2 Series Solution
• Powerful tabletop appliance with XTM security – perfect for small business.
• 6 Ethernet ports total including 3 GbE
• Wireless-N dual-band (802.11 a/b/g/n)
• Performance to max out your pipe – up to 190 Mb/s firewall and 40 Mb/s XTM.
• Rich networking and management features!
The Network Edge has Range!
XTM 21 XTM 22 XTM 23Firewall Throughput 110 Mb/s 150 Mb/s 190 Mb/s
XTM Throughput 18 Mb/s 30 Mb/s 40 Mb/s
VPN Throughput 35 Mb/s 55 Mb/s 55 Mb/s
Concurrent Connections (bi-directional)
10,000 20,000 30,000
MUVPN (IPSec) 1/11 5/25 5/55
MUVPN (SSL) 1/11 1/25 55/55
Wireless 802.11 a/b/g/n (XTM 21-W)3G Extend Accessory
802.11 a/b/g/n (XTM 22-W)3G Extend Accessory
802.11 a/b/g/n (XTM 23-W)3G Extend Accessory
Management with Logging/Reporting
WSM 11.2.1 WSM 11.2.1 WSM 11.2.1
Model Upgrade Yes Yes No
Security Platform Fireware XTM 11.2.x Fireware XTM 11.2.x Fireware XTM Pro 11.2.x
A WatchGuard XTM Product for Everyone!
Throughput in Mb/s
WorldWide Certifications for All XTM Series
© 2009 WatchGuard Technologies
WatchGuard XTM Software and Services
WatchGuard XTM Ecosystemis Common to All XTM Series
Fireware XTM OS Security
All in one security for hassle-free, layered protection.– VPN– Authentication– Stateful Firewall– Deep Packet Inspection
(Proxy Architecture)– VoIP Security– Additional Content Security
Keys to WatchGuard Technology
Hardware
Dedicated, custom
hardware for max
performance and value
Full-Featured
Management
Proxy-based for
inspection at all OSI
layers
XTM Security enables layered
protection in a single
device
Fireware XTM OS Networking
Networking flexibility for easy implementation, consolidation and maximum uptime– Static IP, DynDNS, PPPoE, DHCP (server, client, relay)– NAT: Static, Dynamic, 1:1, IPSec NAT Traversal, Policy-based NAT,
Virtual IP– Static and Dynamic Routing (BGP, OSPF, RIP v1/v2)– QoS: 8 priority queues, diffserv, modified strict queueing– VLAN: bridging, tagging, routed– High Availability, active/active (FireCluster) and active/passive– Port independence– WAN failover– Load balancing– Transparent mode and drop-in mode.
Fireware XTM Pro
•Fireware XTM Pro includes advanced networking features•Fireware XTM Pro comes standard on XTM 23, XTM 8 Series and XTM 1050•An upgrade from Fireware XTM to Fireware XTM Pro is available for other XTM 2 Series and XTM 5 Series models.
WatchGuard System Manager
No hidden charges – rich management experience out-of-the-box or advanced multi-box management features for just a little more.– Rich reporting out of the box– Interactive realtime management– Log, report, quarantine, WebBlocker and management servers with self-
health monitoring.– Alarms and Notifications: SNMP, email,
system alerts– Role-based Access Control– Web-based report services– Drag-and-drop VPN creation saves hours
Top Client and Per-Client Reports
WatchGuard Servers
WatchGuard Gateway AntiVirus
• What it is:– Blocks Viruses, Worms, Trojans, Spyware, Adware
• Inbound and outbound coverage• HTTP, HTTPS, FTP, SMTP, POP3, TCP-UDP
– Signatures and Behavioral Techniques• Static and dynamic heuristics (code emulation)
• Value– Complements server and desktop solutions– Stop malware before it gets to the corporate network– Prevents corruption and loss of data
• Signature updates checked every hour
• Full compressed file support– ZIP, RAR, TAR, GZIP,
ARC, CAB etc.– Multiple levels
• WatchGuard System Manager and Web UI configuration– Status Dashboard
AntiVirus Features
43
•Securely, Simply, Detecting Mass Outbreaks in Real-time •How it works:
– Detects the repetitive component of each outbreak – Uniquely identifies the DNA of each outbreak– Compares incoming messages with spam DNA in real-time
RPD™ (Recurrent Pattern Detection) Patent Pending Technology
Analyzing Internet Traffic
DNA
Query
Classification
spamBlocker
Real time detection center
• What it is:– Unique, real time spam blocking service for Firebox X and
XTM appliances – Partnered with Commtouch, an industry leader in spam
prevention and mitigation
• Value:– Distinguishes legitimate communication from spam attacks,
blocking 98% of unwanted e-mails– Processing is done off the Fireware appliance so there is
minimal impact to other network traffic processing – Cost effective solution – no need for per user licensing or
separate hardware/appliance
Why WatchGuard spamBlocker
• Simple to setup
• WatchGuard System Manager
• Web UI
• Flexible enough to handle spam in several different ways
• Different Categories for mail
• Confirmed Spam
• Bulk
• Suspect
spamBlocker features
• Another layer of virus prevention– Uses RPD technology to detect email-borne malware outbreaks – Included with spamBlocker - Complements Gateway AntiVirus – New patterns are detected and added to the database in real-
time
Several options for Detected viruses
Virus Outbreak Detection
47
How it works
Real People around the globe
Researching the latest internet scams, spyware, and malicious sites
Global URL database - English, German, Spanish, French, Italian, Dutch, Japanese, Traditional Chinese, and Simplified Chinese sites
24 x 7 x 365 worldwide Internet scanning with people and automation
Reduces malicious Web content entering the network through 30 million blocked URLs and Reduces unproductive Web surfing and potential liability
Blocks access to IM/P2P download sites, WebMail and over 9,000+ spyware sites
Artificial Intelligence
Tracking URL/IP changes, new site content, and retired sites
+
Daily Incremental Updates
Fast and scheduled using minimal bandwidth
+
Block new scams and threats
Within hours=
WebBlockerWebBlocker
• What it is:
– URL filtering with 54 categories
– Incremental updates to increase productivity and ensure the latest URL filtering protection
– Configurable Exceptions (Whitelist / Blacklist)
– Reports of web access, attempted policy violations, and Internet usage
• Value:– Increase employee productivity and limit liability– Flexibility to block the specific site categories you require– Increased legal and regulatory protection– Pricing based on “Per Box” vs. “Per Seat”
Why WatchGuard WebBlocker
49
User must type the password to get access to the destination
WebBlocker – Local Override
• What is it:– Signature protection against known vulnerabilities– Signatures updated on regular basis
• Value:– Protects against SQL injection, cross-site scripting (XSS),
buffer overflows, remote file inclusions, worms– Protects against spyware– Prevents attackers from running system code, crashing, or
assuming control of systems behind Firebox or XTM appliance
Intrusion Prevention Service
• Specify action to take when signature matches
• Optional spyware signatures
• Option to scan http headers only to improve performance
• Signatures can be added to exclusion list
IPS Features
LiveSecurity® for XTM Series
Standard Plus Gold
XTM 1050XTM 8 SeriesXTM 5 Series
Appliance bundles and renewals
Security bundles and
renewals
NEW – single box coverage
avail. soon
XTM 2 Series Appliance bundles plus renewal SKUs
Not offered Not offered
Hours 12 x 5* 24 x 7 24 x 7
Incidents per year 5 5 No Limit
Target response time 4 hours 4 hours 1 Hour
Advanced Hardware Replacement
Software upgrades and patches
LiveSecurity® Alerts and Broadcasts
* (6 AM - 6 PM in your local time zone)
Purchase Together for Layered Security
• Free trials available• Individual Subscriptions• Security Bundle
– Best Value– Includes all 5 services– 1, 2, or 3 year bundles or renewals
Best Price for Performance in the
industry!Dedicated
appliances tuned for high throughput
Fireware XTM Pro with advanced
networking
LiveSecurity Service with 24/7 Technical Support
High Availability with FireCluster, VPN and
WAN Failover features
Fireware XTM OS with VPN, Auth, Proxy-driven DPI and XTM Services
(GAV, IPS, spamBlocker, WebBlocker)
You’re Ready to Answer Tomorrow’s Needs with WatchGuard XTM Series
WatchGuard XTM 2 SeriesWatchGuard
XTM 5 Series
WatchGuard XTM 8 Series
WatchGuard XTM 1050
New Threats?
More Traffic?Greater Network Complexity?
Productivity Losses?
Inexperienced IT Staff?
Shrinking IT Budgets?
Best Price for Performance in the
industry!Dedicated
appliances tuned for high throughput
Fireware XTM Pro with advanced
networking
LiveSecurity Service with 24/7 Technical Support
High Availability with FireCluster, VPN and
WAN Failover features
Fireware XTM OS with VPN, Auth, Proxy-driven DPI and XTM Services
(GAV, IPS, sB, WB)
You’re Ready to Answer Tomorrow’s Needs with WatchGuard XTM Series
WatchGuard XTM 2 SeriesWatchGuard
XTM 5 Series
WatchGuard XTM 8 Series
WatchGuard XTM 1050
Questions?
© 2009 WatchGuard Technologies
Thank You!
