Embed Size (px)
Citation preview
© Copyright Fortinet Inc. All rights reserved.
Corporate OverviewQ2 2015
Network Security Expert ProgramNSE Level 1
2
CorporateOverview
NSE Level 1(Overview)
FortiGate Overview
NSE Level 2(Solution)
Enterprise NGFW
Data Center FW
DistributedEnterprise/SMB
Cloud and SDN
Carrier MSSP
WAF Secure Email Gateway
DDoS Protection
Advanced Threat
ProtectionWireless
6
1 2 3 4 75
21 3 4 5
FortiGuard Services
6
ADC
6
Identity
7
Client
8
NSE Level 3(AdvancedTechnologies)
Voice
9
Competitive Overview
9
Management Analytics
8
5 IndustryModules
1-5
Network Security Expert (NSE) will help you…
üValidate your network security skills and experience
üDemonstrate value to current and future employees
üLeverage Fortinet’s full range of network security products, consolidate solutions and reduce risk
üAs a partner, accelerate sales and offer new services
3
A Global Leader and Innovator in Network SecurityFortinet Quick Facts
Platform Advantage built on key innovations
• FortiGuard: industry-leading threat research• FortiOS: tightly integrated network + security OS
• FortiASIC: custom ASIC-based architecture
• Market-leading technology: 196 patents, 162 pending
Founded November 2000, 1st product shipped 2002, IPO 2009 HQ: Sunnyvale, California
Employees: 3000+ worldwideConsistent growth, gaining market shareStrong positive cash flow, profitable
$13M
$770M
$16M
~$1B
Cash
Revenue
2003 2014
2003 2014
Global presence and customer base
• Customers: 225,000+• Units shipped: 1.9+ Million• Offices: 80+ worldwide
Based on Q4 and FY 2014 data
4
A Global Leader and Innovator in Network SecurityFortinet Rapid Innovation Sets The Pace
§ Constant platform innovation - new ASICs, OS versions, integrations, and integrated functions
§ Rapidly expanding product portfolio§ Industry firsts, industry bests
Began Global Sales
FortiGate &FortiOS 1.0
1st FortiASICContentProcessor
FortiManager
FortiOS 2.0
Named WW UTM Leader
FG-5000(ATCA)
FortiOS 3.0
1st FortiASICNetworkProcessor
FortiWiFi FortiOS 4.0
IPO
1st FortiASICSystemOn A Chip
FortiAP FortiOS 5.0& SoC2
1M UnitsShipped
1st 40GbE Port Security Appliance
FortiASIC NP6
FortiSandbox
New HQ
1Tbps Firewall
AWS Utility Support
1st 100GbE Port Security Appliance
Fortinet Founded
2000 2002 2003 2004 2005 2006 2009 2010 2012 2013 2014
2.0
4.05.0
3.0
SoC
CP
NP6NP
2015
InternalNetworkFirewall(INFW)
5
Billings by Product Segment
Q1 2015
37%High-end
37%Entry Level
26%Mid-range 7 of Top 10
Global 100 Computer Services
9 of Top 10 Global 100
7 of Top 10 Global 100 Major Banks
9 of Top 10 Global 100 Aerospace & Defense
A Global Leader and Innovator in Network SecurityBalanced Revenue Across Product Segments
6
• Built to serve truly global customers• Follow-the-sun support• Balanced revenue across regions proves it
36%EMEA
43%Americas
21%APAC
Revenue by Region, Q1 2015
HQ & Development CenterDev. & Escalation CenterSupport CenterFDN server sitesSales OfficeIn-country Sales/Support
Fortinet’s Global InfrastructureBuilt To Support Enterprises Worldwide
7
#1 in Network Security Appliances Unit Share
Rethink Your Architecture
8
Too Many Ways In…
Endpoint
Multi-FunctionGateway
Data CenterCloud
WAN
External Network(Multi-Megabit)
AV Signature Only Protection
Less Trustworthy Networks/Subsidiary
Security out of your Control
Not every Security App switched on
Internet
More Customer/PartnerAccess
Security Becomes a Bottleneck
Too Many Point Solutions
No Security Agents
“FLAT” InternalNetwork Architecture
Internal Network(Multi-Gigabit)
9
Too Many Ways In… Rethink Your Architecture
Endpoint
Multi-FunctionGateway
Data CenterCloud
WAN
AV Signature Only Protection
Less Trustworthy Networks/Subsidiary
Security out of your Control
Not every Security App switched on
More Customer/PartnerAccess
Security Becomes a Bottleneck
No Security Agents
INFW
INFW
INFW
INFW External Network(Multi-Megabit)
Internal Network(Multi-Gigabit)
Internet
Too Many Point Solutions
Internal Network Firewallü 100G+ Performanceü Ease of Deployment
ü Protection
10
A Global Leader and Innovator in Network SecurityFortinet’s Proven Advantages
§ Accelerating your business à FAST» Custom ASICs radically increase throughput 5 – 10X other solutions» Security is no longer a bottleneck» Your critical information flows quickly, your users are satisfied
§ Protecting your business à SECURE» Our own global threat research team + all in-house security technologies = rapid and coordinated response to threats
» Independently validated as highly effective vs. today’s advanced threats
§ Simplifying your business à GLOBAL» Unmatched coverage for all deployment scenarios» Converged networking and security, consolidated security functions» One scalable and versatile security platform + one management console» Global presence and infrastructure to support customers everywhere» Faster deployment, lower admin burden, fewer security gaps… worldwide
11
Customer Challenge – PerformanceSecurity Needs To Keep Up With Growing Bandwidth Requirements
Source : IEEE 802.3 Industry Connections Ethernet Bandwidth Assessment July 2012
1,000,000,000
100,000
10,000
1,000
1001995 2000 2005 2010 2015 2020
100 Gigabit
10 Gigabit
Gigabit
Rate Mb/s
Server I/ODoubling ~24 mos
Core NetworkingDoubling ~18 mos
1 Terabit
• Network bandwidth requirements are doublingevery 18 months
• Drivers include rapid growth in connected devices, big data, virtualization, cloud storage and SaaS applications
• Network security solutions that cannot keep up will quickly become choke points and slow down critical business traffic
• Customer and userdissatisfaction
12
FW IPS
Base
line
CP 8NP 66Gbps2Gbps3.5Gbps
FW VPNIPS
40Gbps25Gbps
FWVPN
10Gbps9Gbps
IPS VPN
§ 10X data center firewall performance§ 5X NGFW performance§ Security that keeps up with growing bandwidth requirements
Fortinet Advantage – FASTFortiASICs Dramatically Boost Performance
13
Customer Challenge – SecurityStopping Today’s Advanced Threats
Increasing Damage
AppControl
WebFilter
Anti-Spam
AntiMalware
VPN IPSFIREWALL AdvancedThreat Protection
Hackers
Layer 1-2 Content & Application (Layer 3-7)
IntrusionsWorms
VirusesSpyware
BotnetsSpam
MaliciousURLs
MaliciousApps
AdvancedPersistentThreats
2005 2007 TodayTHREATTIMELINE
201120032000
Increasing Performance Requirements
§ Today’s sophisticated threats are causing more damage than ever, and a growing set of security technologies is needed to stop them.
§ Most security vendors outsource or lack critical pieces of the puzzle§ Customers try to piece together a solution on their own
14
§ Large global threat research team located around the world
§ Discovers new threats and delivers protective services across a rich array of in-house security technologies
§ Updates are delivered instantly, 24x365
§ Independentlyvalidated as highly effective versus today’s threats
Fortinet Advantage – SECUREFortiGuard Labs Threat Research
IntrusionPreventionService
AntivirusService
VulnerabilityManagement
Service
Anti-spamService
WebFilteringService
IP ReputationService
WebSecurityService
DatabaseSecurityService
ApplicationControlService
Global Fortinet DeviceFootprint
+ other threat intelligence sharing
initiatives
15
Awards & Certifications Partnerships & Industry
35 Awards
Founded by Fortinet additional members include Palo Alto Networks, McAfee and Symantec
Fortinet Advantage – SECUREFortiGuard Labs Is An Industry Leader in Threat Research
16
Per Minute25,000Spam emails intercepted
390,000Network Intrusion Attempts resisted
83,000Malware programs neutralized
160,000Malicious Website accesses blocked
59,000Botnet C&C attempts thwarted
39 millionWebsite categorization requests
Per Week47 millionNew & updated spam rules
100Intrusion prevention rules
2 millionNew & updated AV definitions
1.3 millionNew URL ratings
8,000Hours of threat research globally
Total Database170Terabytes of threat samples
17,500Intrusion Prevention rules
5,800Application Control rules
250 millionRated websites in 78 categories
173Zero-day threats discovered
Based on Q1 2015 dataImage: threatmap.FortiGuard.com
Fortinet Advantage – SECUREFortiGuard Labs Threat Research
17
VPNWANAcceleration
Web Filtering
IPS
Application Control
WiFi Controller
Advanced Threat
Protection
Antivirus
Firewall
ManagementSaaS Gateway
§ Over time, point solutions have been deployed in response to evolving threats
§ Platforms vary across deployment scenarios
§ Numerous management consoles
§ Inconsistent policy andnetworking function
§ Varying upgrade cycles
§ Slow and porous response to threats
§ Too many resources required to maintain
§ Poor user experience, complaints
Customer Challenge – ComplexityToo Many Point Solutions
18
Customer Challenge – Added Complexity of Cloud/SDN Dynamic & Multi-vendor Network Environments Create More Security Gaps
§ A large enterprise or service provider will support multiple hypervisor platforms
§ No standard orchestration APIs for SDN implementations
§ Enterprises are extending their infrastructure with the public cloud
§ SaaS usage is up dramatically within enterprises
Virtualization SDN Cloud (IaaS) Cloud (SaaS)
vSphere
XenServerHyper-V
NSX
ACI
19
Fortinet Advantage – GLOBAL PlatformFortiOS & Scalable High Performance Architecture Enable Deployment Across The Entire Enterprise
Data Center/SDN
Carrier Class Firewall (CCFW)
INTERNET
Distributed Enterprise& Small Business
Mobile Users
VirtualMachineFirewall
Cloud Firewall(CFW)
Client Firewall
Internal NetworkFirewall(INFW)
Carrier/MSSP/Cloud
Boundary
1
4
3
7
5
6
2
8
Internal Network(Ultra Low Latency)
Next Gen Firewall+ Advanced
Threat Protection(NGFW + ATP)
Unified Threat Management (UTM)
Data CenterFirewall(DCFW)
Enterprise Campus And Large Sites
20
Fortinet Advantage - GLOBAL PlatformFortiOS Enables Networking & Security Convergence, Security Consolidation
Firewall
VPNApplication Control
IPSWeb Filtering
Anti-malwareWAN Acceleration
Data Leakage ProtectionWiFi Controller
Advanced Threat ProtectionSaaS Gateway
Management
§ Single management console
§ Common platform across all size deployments
§ Deploy what you need, where you need it
§ Consistent, coordinated policy
§ Consolidated infrastructure
§ Faster and more robust response to threats, decreased risk exposure
§ Lower admin burden, easier to maintain infrastructure
§ Frees up IT resources to be reallocated to strategic projects
§ Fewer user complaints
21
Fortinet Advantage – GLOBAL Platform …continuedComprehensive Platform Extends to Cloud & SDN
On-Demand, Utility-Based Security-as-a-Service
Scale-Out Elasticity for Hypervisors & Clouds
Agile Platform Orchestration & Automation
Single Pane-of-Glass Across Hybrid Clouds
Four Key Pillars
22
• Built to serve truly global customers• Follow-the-sun support• Full suite of support and professional services offerings
HQ & Development CenterDev. & Escalation CenterSupport CenterFDN server sitesSales OfficeIn-country Sales/Support
Fortinet Advantage - GLOBAL InfrastructureBuilt To Support Enterprises Worldwide
23
The Fortinet Cyber Security PlatformSpeed, Security and Scale… From Client to Cloud
USERS NETWORK DATA CENTER
COREACCESS
APPS &DATA
THREATINTELLIGENCE
GLOBALMANAGEMENT
24
The Fortinet Cyber Security PlatformSpeed, Security and Scale… From Client to Cloud
USERS NETWORK DATA CENTER
THREATINTELLIGENCE
GLOBALMANAGEMENT
FortiClientFortiGate VM
FortiGuard FortiManagerFortiAnalyzer
FortiGate PlatformFortiAP
FortiSandbox
FortiWebFortiMailFortiADC
25
FortiGate Industry’s Most Scalable Network Security Platform
Performance & Scalability
Entry Level Mid-Range High-End Virtual Machine
FortiGate 100 – 800(Edge NGFW)
FortiGate 30 – 90(Access)
FortiGate 1000 – 5000(Edge NGFW or Core DC)
FortiGuard
FortiOS
FortiGate VM(Data Center)
26
The Fortinet Secured NetworkBroad Complementary Security Portfolio
FortiDBDatabaseProtection
FortiClientEndpoint Protection, VPN
FortiTokenTwo Factor Authentication
FortiSandboxAdvanced ThreatProtection
FortiClientEndpoint Protection
FortiGateNGFW
FortiAuthentica torUser Identity Management
FortiManagerCentralized Management
FortiAnalyzerLogging, Analysis,Reporting
FortiADCApplicationDelivery Control
FortiWebWeb Application Firewall
FortiGateDCFW FortiGate
Internal NGFW
FortiDDoSDDoS Protection
FortiMailEmail Security
FortiGate VMXSDN, Virtual Firewall
FortiAPSecure Access Point
DATA CENTER
BRANCHOFFICE
CAMPUS
FortiGateCloud
FortiWiFiUTM
FortiGateTop-of-Rack
FortiCameraIP Video Security
FortiVoiceIP PBX Phone System
FortiGateNext Gen IPS
FortiExtenderLTE Extension
27
Unparalleled Independent 3rd Party Certification
Description Fortinet Check Point Cisco Palo AltoNetworks Juniper FireEye
NSS - Firewall NGFW Recommended Recommended Recommended& Neutral Caution Caution x
NSS - Firewall DC Recommended x x x x x
NSS - Breach Detection Recommended x Recommended x x Caution
NSS - WAF Recommended x x x x x
NSS – Next Gen IPS Recommended x Recommended Neutral x x
NSS - IPS (DC) ✔ ✔ x x Caution x
BreakingPoint Resiliency RecordHigh - 95 x x Poor - 53 x x
ICSA Firewall ✔ ✔ x ✔ ✔ x
ICSA IPS ✔ ✔ x x x x
ICSA Antivirus ✔ x x x x x
ICSA WAF ✔ x x x x x
VB 100 ✔ Caution x x x x
AV Comparative ✔ x x x x x
Common Criteria ✔ ✔ ✔ ✔ ✔ ✔
FIPS ✔ ✔ ✔ ✔ ✔ ✔
Contains results from the latest published NSS Labs reports X = did not participate, not certified
28
NGFW
NSS Labs Validates Our Advantage
§Fortinet is “Recommended” while top competitors are not
X-axis = TCO per protected Mbps Y-axis = Security Effectiveness Upper right quadrant = “Recommended” Lower left quadrant = “Caution”
Breach Detection
29
NSS Labs Validates Our Advantage… continued
§Fortinet is “Recommended” while top competitors are not
X-axis = Value as measured by TCO per protected Mbps Y-axis = Security Effectiveness Upper right quadrant = “Recommended” Lower left quadrant = “Caution” Other quadrants “Neutral”
Next Gen IPS Web Application Firewall
30
FortiCare Enhanced Support § Technical support available 8X5 local time via web, chat or telephone
§ Advanced exchange replacement of defective products
§ FortiOS updates and upgrades
FortiCare Comprehensive Support§ Technical support available 24X7, 365 days a year via web, chat or telephone
§ Advanced exchange replacement of defective products
§ FortiOS updates and upgrades
FortiCare Support Services
31
Assigned technical expert§ We understand your network§ We understand your business§ Quarterly reviews
Single point of contact § No phone queues, no hassle § Focused case management
Flexible Services § Version migration planning and assistance § Remote installation § Architecture review § Performance tuning § Best practice recommendations
Custom escalation management § Flows from TAM to support team lead, TAC manager, VP § Management is notified of support cases and proactively monitors resolution process
FortiCare Premium SupportTechnical Account Manager (TAM)
32
FortiCare Professional Services
Professional Services§ Traditional SOW-based services
Packaged offerings§ Fixed priced, fixed deliverable offerings designed to solve specific problems
§ Based on tested, repeatable methodologies § Delivered onsite or remotely by Fortinet experts § No SOW, no negotiating legal terms § Channel-ready, easy to sell, easy to buy
Staff augmentation services § An extension of your network security team§ Design, management, support § Fixed term or annual agreements
33
Training and CertificationFortinet Network Security Expert
Level Description Coursework/Modules Requirement/Mode
NSE 1 Network Security Technology Foundations
Must complete: all 5 industry modules and Fortinet Study & Exams: Self-paced, online
Solutions & Sales Training
NSE 2 Network Security Core SolutionsMust complete: Must complete 5 of 9 industry modulesStudy & Exams: Self-paced, online
NSE 3Associate
Network Security Advanced Solutions
Must complete: Must complete 4 of 9 modulesStudy & Exams: Self-paced, online
NSE 4Professional
Network Security Systems Configuration and Administration Complete FortiGate Security Systems I & II classes
Must complete: both classesStudy options: Self-paced or Instructor-led , online or in-classExams: Proctored
TechnicalTraining
NSE 5Analyst
Network Security SystemsManagement and Analysis FortiManager & FortiAnalyzer classes
Must complete: both classesStudy options: Self-paced (as available) or Instructor-led , online or in-classExams: Self-paced, online
NSE 6Specialist
Network Security Advanced Products Configuration and Administration
Must complete: any 4 classesStudy options: Self-paced (as available) or Instructor-led, online or in-classExams: Self-paced, online
NSE 7Troubleshooter
Network Security Systems Diagnostics and Troubleshooting FortiGate Trouble-shooti ng class
Study options: Instructor-led, in-classExam: Lab based assessment (as available)
NSE 8EXPERT Network Security Expert Experiential learning, no formal coursework
Must complete: both examsExams: Proctored, computer based & Hands-on practical exam
§ FortiGate Overview§ Enterprise Edge/Branch§ Data Center
§ Distributed Enterprise/SMB§ Cloud & SDN§ FortiGuard Services
§ Carrier/MSSP§ Management§ Competitive Overview
§ Web Application Firewall§ Secure Email Gateway§ DDoS Protection
§ Advanced Threat Protection§ Wireless LAN/WAN§ Application Delivery
§ Authentication§ Endpoint Protection§ Voice/Telephone
§ FortiWeb (WAF)§ FortiMail
§ FortiDDoS§ FortiSandbox§ FortiAuthenticator
§ FortiAP§ FortiADC
§ Data Center Firewall§ Next Gen Firewall
§ UTM§ Application Security
§ Management & Analytics§ Fortinet Overview
§ New 8-level training and assessment program§ For customers, partners and employees§ Levels 1 - 3: Solutions and Sales training (online, self-paced)§ Levels 4 - 8: Technical training (online and instructor-led)§ Develop mastery of complex network security concepts
Please proceed to the Fortinet Learning Center to take the assessment for this NSE Program module.
Thank you.
