Pr Next Generation Firewall Customer

7/23/2019 Pr Next Generation Firewall Customer

http://slidepdf.com/reader/full/pr-next-generation-firewall-customer 1/34

Speaker Name | Title

McAfee Next GenerationFirewalland the Security Connected Eco y tem



!r"ani#ational Security Concern

Network !peration• Availability & Scalability

Minimi#e network downtime

and add capacity ea ily.• Performance

Maximi#e network uptime%throu"hput and u er

ati faction.• Centralized Management

Simplify control of &Tinfra tructure.

Executi'e (C&S!• Business Continuity

Security mu t cale ea ily

and not impede producti'ity.• Optimize IT Spend

)educe Capex(!pex to freeup other re ource .

• isibility & Compliance *a ecurity audit on timeto a'oid penaltie .

Security !pe• Advanced T!

Fa t +lockin

#ero,day atta• "ata #$%ltrat

-etect and +loteal en iti

• Analysis & Simplify poliwork ow a



Co t,e/ecti'e ecurity that cale ea ily with your +u ineExecuti'e(C&S! 0ene1t

0u ine Continuity

'ni%ed Soft(areCore pro'ide 'alue%exi+ility and

cala+ility to "row withyour +u ine .

!ptimi#e &T Spend

Advanced Securityand Connectivityfeature included to

pro'ide 'alue andimplify licen in".

3i i+ility 4

McAfee Managemenena+le ccollection

correlation data% pro'i

aud



McAfee Security Mana"ement Center 5SMC6

7ni1ed Software Core pro'ide exi+ility and cala+ility to upport "rowth plan0u ine Continuity

McAfee NGF9 7ni1ed Software Core

*hy ical

3irtual

Software

:$F9F9(3*N &*S Singepane,of,"la

) di/erent functirole and depoption



• :icen in"• Maintenance• Support

Simpli1ed

• E'a ion *re'ention• Anti'iru 4 Anti,Spam• Application Control 4

7 er &-• &*S• Anti,0otnet•

Stateful &n pection

Security

• Nati'e Acti'e,Acti'eClu terin"

• &* ec 4 SS: 3*N• Multi,:ink 4

Au"mented 3*N• 0uilt,in )outin"

Support

0u ine

Continuity

;i"h,'alue feature included with tandard licen e!ptimi#e &T Spend



Streamlined auditin" and reportin"3i i+ility 4 Compliance

0uilt,in template ena+lefa t creation of

#$ecutiveSummary

eports*



Sur'ey and analy i +y &-C0u ine 3alue

&-C )eport? Calculatin" the 0u ine 3alue of Next Generation Firewall% !cto+er $@ 8

McAfee NGF9 +ene1t ?• +,-./012 cumu

bene%t reayear

• 0 mont! p• 324 improvem

e'ent re pon• .24 decrease

related downt• )-4 reduction

infra tructure

Bear @ Bear Bear $ Bear 2 Bear 8 Bear <

, $@%@@@

,

$@%@@@

8@%@@@

=@%@@@

D@%@@@

@@%@@@

$@%@@@

5< =8>6 5$ 88D6

5$ 88D6 5$ 88D6 5$ 88D6 5$ 88D6,

$@ $@$< >@ $= 2= $= D<@ $> 8=@

5< =8>6

$ D$<

2= 28>

=@ $=@

D8 ==$

@ =>8

&n'e tment 0ene1t Cumulated 0ene1t



McAfee productconsistently outpacet!eir competition inco t% market pre ence%

technolo"y% andtechnical upport.

5 omeo Si6ui7or/ CISOCemex



;i"h,a'aila+ility% performance and centrali#ed mana"ementNetwork !peration 0ene1t

A'aila+ility 4Scala+ility

Active8ActiveClustering and

Multi89in: pro'idenetwork re iliency for

uninterruptedoperation .

*erformance'ni%ed Soft(are

Core and Clusteringaccelerate re ource,

inten i'e ecurityfunction .

CenMana

McAfee Managemen

pro'idecentrali#ed

lar"e dien'iron



v;*3

v;*1

v;*0

Node ? NGF,2$@

Node $? NGF, 8@

Node 8? NGF,2$<

Nati'e acti'e,acti'e clu terin"A'aila+ility 4 Scala+ility

A in"le clu ter canupport?

• "i<erent 1rmware 'er ion• "i<erent appliance model

and oftware on C!TShardware

• 'p to ,0 active8 acti'e nodeclu ter% only with McAfee

!perational +ene1t ?• Seamless updates with no

cheduled downtime• =ully transparent failover

practically eliminateun cheduled downtime

• ..*...4 uptime

McAfee NextGeneration

Firewall Clu ter

7pdate



& can update a NextGeneration Firewall

clu ter without droppin"a in"le packet .

5 McAfee Customer



Network re iliency and co t a'in"A'aila+ility 4 Scala+ility

Multi,:inkBusiness Continuity

• Tran parent failo'er• :oad,+alancin"

or +ack,up link•

Security

&S*

&S* $

&S* N

Multi,:ink&* ec 3*N

Ca+le

2(8G -S:

-S: $

M*:S

)e"ular Tra c 40ack,up

link

Critical Tra c



7ni1ed Software Core accelerate all ecurity function*erformance AN- Security

, @@H

,D@H

,=@H

,8@H

,$@H

@H, H

,DH, =H

,2<H

,>@H

,D>H

McAfee NGF9 <$@= &ndu try A'era"e

=ire(all Performance "egradation

Throu"hput and Scala+ility )eport McAfee NGF9 <$@=% Miercom% !cto+er $@ 8

McAfee NGF9i"ni1cantly imp

acti'atin" re ourc

ecurity feature• -eep packet• Anti'iru• Application

!ther product tefrom 2<H to D>Hde"radation.



A four,node clu ter can+oo t throu"hput up to

2>@ percent . 5 Miercom/ >-,2



Top or"ani#ational o+Iecti'e)educin" !peratin" Co t

State of Network Study% Network 9orld $@ 8

Today Future

!peratin" Co t

;owJ• E cient u• Fa t reac

e'ent• A'oidanc• Accuracy

)educe upporto'erheadreLuirement



McAfee Security Mana"ement Center 5SMC6Centrali#ed Mana"ement

McAfeeSecurityMana"ementCenter

MSS* -i tant Site

Ena+lin" Ad'ancedSecurity

• )ich context policie• Flexi+le admin role• MSS* capa+ilitie

)e ource !ptimi#ation• E ciency work ow• *lu",and,play deployment• Scheduled and automated

ta k

Situational• -ata 'i uali#• 0uilt,in lo"

tool• S&EM inte



Simple and e cient policy mana"ementCentrali#ed Mana"ement

Glo+al *olicy Template

*olicieautomatically

follow templatechan"e

Main policy canpopulateu+,policie

;ierarchical*olicie

S



*lu",and,play deployment for fa t and ea y remote ite rolloutCentrali#ed Mana"ement

&nitial con1"urationpu hed from the cloud

Call home anddownload policie

McAfee &n tallationCloud New Bork

*ari

:ondon

Tokyo

San Franci co

Sao *aolo

&nitial con1"urationuploaded

Cut deploymenfromday or week t

Minues

McAfee NextGeneration Firewall

Mana"e % update4 up"rade

McAfee SecurityMana"ement Center



Freein" up a et for inno'ation while decrea in" co t;i"her &T Sta/ *roducti'ity

Source? &-C% $@ 8

0efore McAfee NGF9 *roIected without McAfee NGF9 After McAfee NGF9

@H

$<H

<@H

><H

@@H

><H D$H

<DH

$<H DH

8$H

&T Sta/ Time Allocation

eepin" the li"ht on Contri+utin" to inno'ation



McAfee Next GenerationFirewall doe H of ournetwork con1"uration%reducin" what u ed to

take hour to minute . 5 ?ulian "yer/ CTOCobweb



Ad'anced threat pre'ention and e cient analy i toolSecurity !peration 0ene1t

Ad'anced ThreatSecurity Connectedand McAfee @ =

colla+orate in real,timeacro multiple

ecurity olution to+lock #ero,day attack %

morphin" malware%and AET .

-ata Ex1ltrationApplication 9ayer

#$%ltrationProtection le'era"e

endpoint intelli"ence to+lock endpoint,dri'endata +reach attack at

the network le'el.

Analy i McAfee

Managemenena+le ccollectioncorrelatio

pro'idin" a



0lack ;at Conference Sur'eyChallen"e Faced +y Security *rofe ional

-etection 2<H

*rotection $$H

Fal e po iti'e $@H

Timely re pon e H

)emediation H!ther 2H

McAfee poll of 0lack ;at $@ 8 conference attendee

"etection

&Protectioare the +i""e t ch



-efend your network and en iti'e information a"ain t tar"eted attackAd'anced Threat *rotection

Security ConnectedEco y tem

Compre!ensive T!reatIntelligence

:ocal and "lo+al ource %$@@O partner

Full StackNormali#ation

A#T Prevention0lock o'er D@@ Million

e'a i'e attack

McAfee ATBloc: ero8"a-ynamic and

an



Comprehen i'e threat intelli"enceSecurity Connected Eco y tem

McAfee NextGeneration

Firewall

McAfee Glo+al Threat

&ntelli"ence

McAfee Endpoint&ntelli"ence A"ent

McAfee EnterpriSecurity Mana"e

e*olicy

!rche trator

McAfee Ad'anced

Threat -efen e

Endpoint&ntelli"ence

EndpointMana"ement

Glo+al)eputation

*olicy Enforcement 4Centrali#ed

Mana"ement



McAfee Enterpri e Security Mana"er 5McAfee ESM6 inte"rationSecurity Connected Eco y tem

Alert +a ed on de'iation

-etect anomalie ?• 7nu ual u er +eha'ior• Su piciou network acti'ity pike• Anomalou communication pattern

Sum e'ent andtrack a'era"e

apidespo

eto alert and upattern on your netwo



McAfee Ad'anced Threat -efen e 5McAfee AT-6 inte"rationSecurity Connected Eco y tem

Accu

"iscovy&Alertiof #ero,day t

)un Time -::Network !peration

File !peration

*roce !peration-elayed Execution

7npackin"-i a em+ly of CodeCalculate :atent CodeFamilial )e em+lance

-ynamicFile

Analy i

StaticCode

Analy i



McAfee e*olicy !rche trator 5McAfee e*!6 inte"rationSecurity Connected Eco y tem

e*olicy!rche trator

McAfee SecurityMana"ement

Center

Endpoint

Security!peration

-irect link to drillinto endpoint lo"e'ent ?• &* addre e•

*ort• :o"incredential

"iscove

&Ta:eActionon u piciou +eha'ior .



-i co'er and +lock ad'anced e'a ion techniLue 5AET 6Ad'anced E'a ion *re'ention

*artial&n pection

;idden

Threat

Complete 'i i+ility for

accurate continuou in pection

;ow to +lock AET J!nly full8stac:normalization ena+leaccurate continuou tra cin pection.

*acket ow

! S &

: a y e r

:.

:.$

:.2

:.8

:.<

:.=

:.>

9hat i an AETJAET deli'er threatpiecemeal acro di/erent orunexpected network layer orprotocol for futurereassembly .9hy are AET

ucce fulJ

!ther 'endor u e narro( orvertical traFc inspection(indo(s to impro'eperformance% allowin" threatto remain !idden .



!nly McAfee NextGeneration Firewall i

te ted a"ain t o'er D@@Million Ad'anced

E'a ion TechniLue .



*!SApplication)o"ue *!SApplication

*!SApplication

*!SApplication

0lock data +reach attack initiated from endpointApplication :ayer Ex1ltration *rotection

*oint ofSale

Terminal

McAfee NGF9

Credit Card-ata

McAfee E&A

&nternet

Gig!lranu

rContof endpointapplicationconnection

7 er? 0ill PGroup? Ca hier PConnection? ;TT*S P*roce ? *!S H.exe

Anomaly detected 4 connection +locked

Compare packet

information to policy

3endor Q NGF9



Ruick and comprehen i'e analy i of a lar"e amount of dataAnaly i 4 )eportin"

Multiple option

=ast &

Simple"rill8"o(nand na'i"ation.



McAfee Next Generation

Firewall not onlycomplie with re"ulatory"uideline +ut al o

protect our network inall their di/erentcon1"uration .

5 =abien "revet/@et(or: 'nit ManagerFrance Ministry of Education



The +e t choice for your +u ineSummary

Network !peration• A'aila+ility 4 Scala+ility• *erformance• Centrali#ed Mana"ement

Executi'e (C&S!• 0u ine Continuity• !ptimi#e &T Spend• 3i i+ility 4 Compliance

Security !pe• Ad'anced Thr• -ata Ex1ltrati• Analy i 4 )

McAfee Next Generation Firewall pro'ide

Advanced Protectionfor critical a et while deli'er

Proven Businessal

acro or"ani#ation r

!ttp JJmcafee*comJngf(



Documents

Pr Next Generation Firewall Customer