13
© Copyright Fortinet Inc. All rights reserved. Design og drift av trådløse nettverk, inklusiv sikkerhet January 2016, Brian Andersen, Systems Engineer

Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

  • Upload
    others

  • View
    33

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

© Copyright Fortinet Inc. All rights reserved.

Design og drift av trådløse nettverk, inklusiv sikkerhet

January 2016, Brian Andersen, Systems Engineer

Page 2: Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

2

A Global Leader and Innovator in Security & WiFi Fortinet Quick Facts

Founded in 2000, 1st shipment 2002, IPO 2009

HQ: Sunnyvale… 100+ offices worldwide

Employees: 3900+

255,000+ customers

Over 2 million devices shipped

#1 unit share worldwide in network security (IDC)

Market-leading tech… 257 patents, 228 pending

$16M

$1B+

Cash 2003 2014

$13M

$770M

Revenue 2003 2014

Consistent ,

accelerating

growth

Strong positive

cash flow

Profitable

Custom ASIC-based

scalable architecture FortiASIC

Custom, converged

Networking + Security OS FortiOS

Industry-leading, validated

Threat Research FortiGuard

Global Infrastructure &

Support FortiCare

Page 3: Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

3

Today’s Wi-Fi Infrastructure Trends Requires an Integrated Approach to End-to-End Security

Migration to 802.11ac

Mobile Protection

BYOD

Cloud Management

Beyond SMB

Cross Community

Authentication

Service Levels

Enforcement

Presence Analytics Integrated Security

Page 4: Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

4

Traditional IoT (Machine to Machine)

devices used Ethernet

Significant and growing use of

wireless-based technologies

Wi-Fi offers flexibility and speed of

deployment

Wi-Fi Infrastructure Trends Wi-Fi expected to play large part in IoT

4

© Infonetics, M2M Strategies by Vertical: N. American Enterprise Survey, January 2014

9%

7%

13%

35%

36%

0% 10% 20% 30% 40% 50%

Other

ZigBee

Bluetooth

Wi-Fi

Ethernet

Percent of Respondents

LA

N A

cce

ss

Te

ch

no

log

ies

2014

Page 5: Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

5

Wi-Fi Becoming Primary Access Medium

© Nemertes Research, August 2015

Page 6: Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

6

End-to-End Global Cybersecurity Platform Coverage from Endpoint to Edge to Core to Data Center to Cloud

Client

Security

Secure

Access Network

Segmentation

Application

Security Cloud

Security

Control & Visibility

Security Services & Framework

Page 7: Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

7

End-to-End Global Cybersecurity Platform Coverage from Endpoint to Edge to Core to Data Center to Cloud

Client

Security

Secure

Access Network

Segmentation

Application

Security Cloud

Security

Control & Visibility

Security Services & Framework

USERS

NETWORK

DATA CENTER

FortiGate

FortiManager FortiAnalyzer

FortiGate

for AWS

FortiGate

VMX

FortiClient

Page 8: Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

8

Segmenting the Internal Network Is Vital But Difficult

Internet

Cloud Home

Office

Internal

Network (100 Gbps+)

Branch

Office

Private

Cloud

NGFW

Data Center

ISFW

ISFW ISFW

ISFW ISFW

ISFW

WAN

Internal

External

UTM

DCFW

VFW

CCFW

CFW

Internal Segmentation Firewall (ISFW)

Next Generation Firewall (NGFW)

Data Center Firewall (DCFW)

Unified Threat Management (UTM)

Virtual or Cloud Firewall (CFW)

Carrier Class Firewall (CCFW)

EDGE

Segmentation Challenges

Higher internal network speeds

Ultra-low latency requirements

Protection required, not just

detection

Operational efficiency/

manageability

Inspecting traffic that stays within

the data center

Page 9: Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

Customer Stories How do we manage it?

Page 10: Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

10

• Manage 15,000+ APs with small IT staff

• Reliable high-performance access in high-

density areas

• Ability to add capacity without the cost and

trouble of re-engineering

K12 / School - Miami-Dade County Public Schools

Overview

Solution Benefits

• 4nd Largest U.S. school district

• 391,000 students, 415 schools

• 15,000+ access points

Page 11: Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

11

Bærum municipality, Norway

43 Schools

18 Nursing Homes

~25.000 students

and employees

2006 Pilot in one school Meru AP201

2007 Mobile medicine delivery project in nursing homes

2008 Expands wireless to all schools

2009 All new and renovated locations shall have wireless

2009 Guest networks in all locations exept schools

2011 MC5000 in Sandvika

2012 Starting the Centralization project

2013 Replace AP201 with AP332 in secondary schools

2013 Moving to 4 to 6 Virtual MC4200

2014 First 802.11ac location

2015 AP201 (11g) going to 11ac

2015 Install for Meru Connect on-boarding

Page 12: Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

12

Example: The Gathering

Her kommer video fra TG

Page 13: Design og drift av trådløse nettverk, inklusiv sikkerhetweb.idg.no/.../frokost/Presentasjoner/Fortinet.pdf · Fortinet Quick Facts ... Internal Segmentation Firewall (ISFW) Next

See you soon

Remember: With great power comes great responsibility