McAfee NGFW V8.0

McAfee Confidential—Internal Use Only

McAfee Firewall Enterprise

Next Generation Firewall

Ramy Muhammad Ahmad

Regional Systems Engineer

Middle East & North Africa


Agenda

• Firewall Concept.

• McAfee Firewall History.

• McAfee Unique Features.

• Offered Models.

• Live Demo.


• Firewall Concept.


Firewall Concept

About the Course 4


• McAfee Firewall History.


McAfee Firewall History

• Strong Pedigree and 30 years of Continued Investment

1984: Mastering the art of

Secure Operating Systems as part of Honeywell for the

National Security Agency (NSA) Integrated

1994: Released

first firewall version 1.0

2002: Acquired Gauntlet Firewall

Integrated

2003: Acquired

N2H2 Web Filtering

Integrated

2005: Acquired

CyberGuard Firewall

Integrated

2006: Acquired

CipherTrust Email

Security Integrated

2008: Acquired by

McAfee “World’s largest

dedicate Security

Company”

• High Assurance Brand and Reputation Protection

- Allowing you to connect globally and expand your business securely

2010: Next

Generation Application

Control Integrated


• McAfee Unique Features.


Networking and Security Service Integration

Comprehensive Firewall

• Secure OS

• Packet filter

• Application Layer

• App Prism

• Stateful inspection

• SSL Inspection

Comprehensive Firewall

• NAT

• PAT

• High Availability

• Quality of Service

• VLAN

• Advanced Routing

Flexible Deployments

• Standalone Appliances

• Multi-Firewall

Appliances

• Virtual Firewall for

VMware

• Riverbed Steelhead

Management

McAfee Firewall

Enterprise Profiler

McAfee Firewall Enterprise

Control Center

Firewall VPN Application

Discovery & Control GTI: TrustedSource GTI: Geo-location

Encrypted Filtering Intrusion Prevention

System

Anti-Virus and

Anti-Spyware

Web Filtering

Anti-Spam

McAfee Product Portfolio


Unique Features

9

1- Secure OS:

• Modified Unix OS

• Remove the concept of super user to secure our OS.

• OS that never been hacked.

• Trusted from the most secure entity world wide such as US MOD.


Unique Features

10

2- Packet Filter Firewall:

• Control the traffic based on network layer

& data link layer protocols such as

IP , Port & Protocol .

• Legacy and not enough technology

because 80% percent of our traffic

is going throw port 80.


Unique Features

11

3- Application Layer Firewall:

• Control the traffic based on application layer

protocols such as HTTP , SSL , DHCP , DNS

FTP ..etc. .

• Legacy and not enough technology

because 80% percent of our traffic

is going throw port 80.


Unique Features

12

4- Next Generation Firewall:

• Control the traffic based on application

identity such as Facebook , twitter ,

YouTube , Skype ..etc.

• Not only this but also we can allow

specific functions and disable others based

on your business needs.


Unique Features

13

5- User aware:

• Rule can be applied

Zones.

IP Address.

IP Rang.

Subnet.

User Identity.

Group in AD.


Unique Features

14

6- GTI:

• GTI is McAfee Unique technology used to

stop the known and unknown attacks.

• McAfee proactive and predictive technology

to stop zero day attacks.

• Its consisting from:

Artemis (File Reputation).

Trusted Source (IP Reputation)


Unique Features

15

7- SSL Inspection:

• One of the very important

Rule as I will decrypt the

traffic to be able to

inspect it.

• Without the decryption we

will only be able to apply the

Rule on the packet header

IP , Port & Protocol.


Unique Features

16

8- IPS inspection.

• Signature based IPS.

• Can be used with Access

Control rule to inspect the

traffic

• Can take actions such as:


Unique Features

17

9- Smart Filter :

• Add on feature without

Any additional license.

• It can be used to make

URL filtering and

apply policy on user

or AD group.

• You can create your

custom category and

apply it.


Unique Features

18

9- DOS & DDOS Protection :

• Can be done using the IPS

Signatures .

• Also can be done by the

application defense rules

using the connection

limiting policy.


Unique Features

19

10- AV/AS:

• Used to protect the end

user from being infected

by any malware when

he access any malicious

website.


Unique Features

20

11- Web Application Firewall to protect your web application:

• Using the application defense rule we can comply with up to 95%

of the dedicated WAF.

• Using these predefined profile will help us to control the

commands sent and received between the users and your web

servers.


Unique Features

21


Unique Features

22


Unique Features

23


Unique Features

24


Unique Features

25

12- QOS:

• We can build QOS and assign it to an interface, protocol & port.


• Offered Models.


Offered Models

27


28

Offered Models


• Demo & Uses Cases


Live Demo

30


31

Documents

McAfee NGFW V8.0