Post on 02-Nov-2014
description
transcript
2. IronPort Gateway Security Products Web Security |Email Security |Security Management | Encryption EMAIL Security Appliance WEB Security Appliance Security MANAGEMENT Appliance IronPort SenderBase APPLICATION-SPECIFIC SECURITY GATEWAYS CLIENTS BLOCK Incoming Threats PROTECT Corporate Assets Data Loss Prevention Encryption CENTRALIZE Administration Internet ENCRYPTION Appliance 3. IronPort + Cisco Market Leadership
4. The IronPort SenderBase Network Global Reach Yields Benchmark Accuracy
IronPort EMAIL Security Appliances IronPort WEB Security Appliances IronPort SenderBase Combines Email & Web Traffic Analysis
5. IronPort Consolidates the Network PerimeterFor Security, Reliability and Lower Maintenance After IronPort Groupware Firewall IronPort Email Security Appliance Internet Users Before IronPort Anti-Spam Anti-Virus Policy Enforcement Mail Routing Internet Firewall Groupware Users Encryption Platform MTA DLP Scanner DLP Policy Manager 6. IronPort ArchitectureMulti-Layered Email Security MANAGEMENT TOOLS THE IRONPORT A SYNC OS EMAIL PLATFORM SPAM DEFENSE VIRUS DEFENSE DATA LOSS PREVENTION EMAIL ENCRYPTION 7. IronPort AsyncOSUnmatched Scalability and Security IronPort AsyncOS is a scalable and secure operating system, optimized for messaging Advanced Email Controls protect reputation and downstream systems Standards-based Integration replaces legacy systems with ease MANAGEMENT TOOLS THE IRONPORT A SYNC OS EMAIL PLATFORM SPAM DEFENSE VIRUS DEFENSE DATA LOSS PREVENTION EMAIL ENCRYPTION 8. Multi-layer Spam Defense Best-of-Breed Protection at the Gateway IronPort Reputation Filters: the outer layer defense IronPort Anti-Spam :stops the broadest array of threats spam, phishing, fraud and more MANAGEMENT TOOLS THE IRONPORT A SYNC OS EMAIL PLATFORM SPAM DEFENSE VIRUS DEFENSE DATA LOSS PREVENTION EMAIL ENCRYPTION 9. SenderBase Data Makes the Difference Complaint Reports Spam Traps Message Composition DataGlobal Volume Data URL Lists CompromisedHost Lists Web Crawlers IP Blacklists& Whitelists Additional Data SenderBase Data Data Analysis/ Security Modeling SenderBase Reputation Scores -10 to +10 Parameters Threat Prevention in Realtime 10. Introducing IronPort Spam Defense
Reputation Worlds first and best sender based reputation service - Blocks 80% of spam at gateway - World class accuracy SBRS IPAS Who? How? What? Where? Worlds most accurate content based spam engine - 98% catch rate - World class accuracy 11. IronPort Anti-Spam Accuracy Powered By Context Adaptive Scanning Engine WHAT? HOW? WHO? WHERE?
Verdict BLOCK
12. IronPort Reputation Filters Dell Case Study
IronPort has increased the quality and reliability of our network operations, while reducing our costs. -- Tim Helmsetetter Manager, Global Collaborative Systems Engineering and Service Management, DELL CORPORATION 13. Multi-layer Virus Defense Best-of-Breed Protection at the Gateway IronPort Virus Outbreak Filters : stop outbreaks 13 hours ahead of traditional signatures McAfee and Sophos Anti-Virus: signature-based solutions with industry leading accuracy MANAGEMENT TOOLS THE IRONPORT A SYNC OS EMAIL PLATFORM SPAM DEFENSE VIRUS DEFENSE DATA LOSS PREVENTION EMAIL ENCRYPTION 14. IronPort Outbreak Filters Close the Reaction Time Gap 15. How Virus Outbreak Filters Work Dynamic Quarantine In Action
T = 5 mins -zip (exe) files -Size 50 to 55 KB.
Messages Scanned & Deleted Fine-grained Rules, Multiple Parameters: Attachment Type, Attachment Size, URLs, Filenames & More 16. Industry Leading Signatures from Sophos and McAfee Anti-Virus
17. IronPort Data Loss Prevention Inbound/Outbound Policy Enforcement Integrated Scanning makes DLP deployments quick & easy Integrated Remediation eases work flow burden MANAGEMENT TOOLS THE IRONPORT A SYNC OS EMAIL PLATFORM SPAM DEFENSE DATA LOSS PREVENTION VIRUS DEFENSE EMAIL ENCRYPTION 18. Data Loss Prevention Multi-Faceted Problem
19. PCI Applies to Nearly Every Industry PCI Not Just for Retail Utilities E-Commerce Transportation Restaurant Financial/ Insurance Retail Service Provider Healthcare Federal Mobile Universities Sports and Entertainment State Agencies 20. The Payment Card Industry (PCI)Data Security Standard
Source: pcisecuritystandards.org Not Published yet Latin American CEMEA 2008 TBD 2008 TBD 2008 TBD Canada DEC 2009 DEC 2009 DEC 2009 Asia MAR-DEC 2008 MAR-DEC 2008 Negotiated individually Western Europe DEC 2008 DEC 2007 SEP 2007 US Level 3 Level 2 Level 1 Theater 21. Data Loss Prevention Foundation Integrated Scanning Users
Outbound Mail Weighted Content Dictionaries Compliance Dictionaries Attachment Scanning Custom Content Filters Smart Identifiers 22. Data Loss Prevention Foundation Integrated Remediation Users
Outbound Mail Remediation:Quarantine Remediation Notification Remediation:Reporting Encrypt The Message 23. IronPort Email Encryption Dont RemediateAccelerate MANAGEMENT TOOLS THE IRONPORT A SYNC OS EMAIL PLATFORM SPAM DEFENSE DATA LOSS PREVENTION VIRUS DEFENSE EMAIL ENCRYPTION 24. Encryption Market Evolution The Technical View Encryption technology is the foundation forbusiness class email Secure Envelopes S/MIME, PGP, Secure Webmail
IronPort PXE Legacy Encryption Solutions 25. IronPort PXE: Sending a Message Instant Deployment, Zero Management Costs IronPort Hosted Keys Gateway encrypts message User opens IronPort PXE in browser User authenticates & gets message key Password Decrypted message displayed Messagepushed to Recipient Key Stored 26. IronPort PXE: Receiving a Message Seamless End-User Experience View message Enter password Open Attachment 27. Management for Organizations of All Sizes
MANAGEMENT TOOLS THE IRONPORT A SYNC OS EMAIL PLATFORM SPAM DEFENSE VIRUS DEFENSE DATA LOSS PREVENTION EMAIL ENCRYPTION 28. IronPort Email Security Manager Single view of policies for the entire organization IT SALES LEGAL
Email Security Manager serves as a single, versatile dashboard to manage all the services on the appliance. -- PC Magazine 2/22/05 Categories: by Domain, Username, or LDAP 29. Cisco Self-Defending Network (SDN)
30. The Portfolio at a Glance Content and Application Security
31. Systems Approach to Stop Malware: Visibility and Control Intrusion Prevention
Content Security
Endpoint Security
Firewall and VPN
Centralized Policy Management and Monitoring 32. Ciscos Security Portfolio Offers End-to-End Compliance with PCI Requirements 33. Cisco Data Loss Prevention Solution NAC, CSA, IronPort, and TrustSec IronPort NAC Appliance ASA printer
TrustSec
Internet Internet Internet Internet Hi Joan,Could you send those files over? SureBob,Ill find a way to get those files to you! 34. Preventing Data Leakage and DisclosureSelf-Defending Network Applied Data Center Employees Network Edge Tape Devices Application Server CiscoMDS 9000 C-Series E-Mail Security Appliance Internet Corporate Network
Partners Customers Remote Employees
35. Self-Defending Network in the Campus
Gateway and Internet Services
Policy Enforcement and Endpoint Protection Threat Management and Policy Control Cisco Security Management Suite Cisco ASA 5500 Firewall, VPN, and IPS Cisco IPS 4200 Series Sensors Network Admission Control FWSM and Cisco ASA 5500 Series Cisco IronPort Cisco ASA 5500 CSC Cisco Security Agent Endpoint Security Policy and Posture Centralized Policy and Threat Management Traffic and Admission Control Targeted Attack Protection Web and Mail Malware Scan Intra-LAN Policy Enforcement Internet Public WAN 36. Self-Defending Network in the Data Center Cisco ASA ACS Cisco Security MARS Cisco WAAS WebServers Cisco ACE Cisco Security Agent Cisco Security Agent Cisco Security Agent Application Servers DatabaseServers AXG(Web Applications) Cisco Security Agent Cisco Security Agent Cisco MDSwith SME Tier 1/2/3Storage Tape/OffsiteBackup AXG (B2B) CSM Cisco Security Agent-MC CW-LMN
Cisco Catalyst 6000 FWSM
Cisco IronPortE-Mail Security AXG(DHTMLto XML) Cisco IronPortWeb Security Cisco IronPortWeb Security 37. Access to the presentations
38. New Horizons' Partners