SonicWALL Security das müssen Sie wissen. Sven Janssen Channel Sales Manager

Transkript

1 SonicWALL Security das müssen Sie wissen Sven Janssen Channel Sales Manager

2 Agenda Security Markt SonicWALL Security Demo SonicWALL Security Produktlinie Preise & Verfügbarkeit Wettbewerb Vorteile für SonicWALL Channel Partner 2

3 Security heute: Bedrohungen nehmen zu Aufkommen an s steigt Bedrohungen durch nehmen zu und Attacken werden gefährlicher Hybrid-Angriffe Angriffe auf die Unternehmensinfrastruktur The value of to an organization mandates a strategic and sustained approach to creating a hygienic and secure messaging infrastructure. META Group, 2005 Delta 3

4 in action Disguising the URL <a href=" curid/secureupdatecode=3d849e459fb77a C8C c3849aa23cd cd D@ ://internal/loginupdate.htm</a> Display Link: Status Bar: Reality: 4

5 onmouseover Shows a false URL in the status bar of the user s application <A onmouseover="window.status ' return true onmouseout "window.status=' href "

6 6

7 PHISH 7

8 Security heute Viele Kunden haben -Gateways als Lösung für Anti- Spam, Anti-Virus und/oder Policy-Management ABER Lösungen sind nicht effektiv genug / zu viele False Positives fehlende Compliance one size fits all Richtlinie für das gesamte Unternehmen Kompliziertes Management der Lösung Zu viele Hersteller 8

9 Security Markt 9

10 Gartner Magic Quadrant

11 SonicWALL Security Für KMU, Mittelstand und große Unternehmen Verfügbar als Software- ODER Appliance-Lösung Arbeitet mit jedem -system (SMTP) & Verzeichnisdiensten (LDAP) Sehr große Flexibilität Gruppen, Abteilungen und einzelne User 11

12 Vorteile Best-of-Breed Threat Protection Anti-Spam, Anti-Virus, Anti-Phishing, DHA/DoS Protection, etc Content Compliance Unternehmensvorschriften sowie rechtliche Regularien Einfach zu installieren und zu verwalten Set up in ca. 30 Minuten 10 Minuten Verwaltungsaufwand pro Woche 98% Anti Spam Erkennung 0% False/Positiv > 40% mehr Performance gegenüber dem Mitbewerb 12

13 Typisches Data Center Typical Mail Data Center 13

14 SonicWALL Security Schutz vor ALLEN Gefahren Typical Mail Data Center Mail Data Center Consolidated with SonicWALL Security 14

15 Vorteil für Solution Provider Umfassende Security Lösung für SMB & Enterprise Markt Neue Umsatzmöglichkeiten: Upsell an existierende Kunden SMB Kunden, die schon eine Firewall besitzen Neue Kunden: Vergrössern des Projekts, bei dem es zunächst nur um FW/VPN geht Preis-/Leistungsverhältnis der Lösung Kunde hat optimalen TCO und ROI 15

16 SonicWALL Security Produktlinie 16

17 Security Produktlinie # Users < 50 < 100 < 250 < 1000 < SMB Enterprise SonicWALL Security (SMB Appliances) SonicWALL Security (Enterprise Appliances) SonicWALL Security Software SonicWALL Security Software Enterprise 17

18 SonicWALL Security Produktlinie Product Name Security 200, 300, 400 & 500 (SMB appliances) Security 6000 & 8000 (Enterprise appliances) Security Software (for Windows OS) Security Software Enterprise (for Windows OS) Protection Subscription and Dynamic 8x5 Support for * Protection Subscription and Dynamic 24x7 Support for * * Erforderlich für Appliance- und Software-Lösung Functionality MTA DHA/DoS protection Policy Management LDAP Synchronization Management Reporting Etc Anti-Spam (1 year) Anti-Phishing (1 year) Software/firmware updates (1 year) 8x5 OR 24x7 support (1 year) Includes RMA for Appliance 18

19 Security Pricing # Users (Software & Appliance) < 50 < 100 < 250 < 1000 < Appliance Model Software Price* $995 $1,595 $3,495 $7,495 $14,995 $22,995 (for Windows software) Appliance Price $1.674 $2.394 $4.794 $9.594 $ $ (SonicWALL OS + Hardware) Protection Subscription and Dynamic 8x5 Support for ** $600 $800 $1,700 $3,100 $6,700 $10,700 Protection Subscription and Dynamic 24x7 Support for ** $720 $1,000 $2,100 $3,900 $8,300 $13,300 * Single Server License ** Erforderlich für Appliance- und Software-Lösung 19

20 Security Produktfunktionalität # Users (Software & Appliance) < 50 < 100 < 250 < 1000 < Appliance Model Hard Drive (GB) & RAID x 80 2 x 80 2 x x 160 Hot Swap Drives / Redun. Power Inbound/Outbound in 1 server Anti-Spam, Anti-Phishing DHA/DoS Protection Multi-Layered Commercial AV Avail. Avail. Avail. Avail. Avail. Avail. Compliance & Archiving Avail. Avail. Avail. Avail. Avail. Avail. LDAP Per User Settings & Quarantine Clustering & Remote Clustering Per User Score Settings 20

21 Effektiver Schutz Cognite: End-to-End Attack Monitoring System Der gesamte Lebenszyklus eines s muss überwacht werden, um Angriffe effektiv zu stoppen und False Positives zu verhindern 21

22 22

23 Compliance Anforderungen Regulatorische Öffentlicher Sektor (HIPAA, GLBA, So, CA SB 1386, Basel II) Privater Sektor (Visa CISP, NASD 3010, ISO/IEC 17799) Interne Anforderungen (CI) Policies (blocken v. exe-dateien, unpassende Sprache) Schutz von Werten / Eigentum (Kundenlisten, Patente) Confidential Information (Finanzdaten, Kundedaten) 23

24 Relevant Regulations Part 1 Regulation Applies to Requires Requirements HIPAA (Health Insurance Portability and Accountability Act) Healthcare providers (medical, dental, etc), insurance companies, pharmaceutical, companies that offer health insurance Secure Protected Health Information (PHI) of individuals -Identify PHI in s -IF transmitted over Internet, secure the content GLBA (Gramm- Leach-Bliley Act) Anyone that maintain personal financial information (Financial services; stores CC info) Protect consumers personal financial information (PFI), such as: account numbers and balances, CC#, SSN -Identify PFI in s -IF transmitted over Internet, secure the content SO (Sarbanes- Oxley Act of 2002) Any publicly traded company or private company intending to go public within 1-3 years Keep all information relevant to financial information -Archive 24

25 Relevant Regulations Part 2 Regulation Applies to Requires Requirements State Privacy Laws (CA SB 1386 & AB 1950 / NY Bill A04254 / IL H.B / FL H.B. 481 / T S.B ~25 other states and Federal bill) Any entity that does business with state residents Secure the personal information of state residents, such as SSN & Driver's license number Some require notification if information becomes unsecure -Identify consumer information in s -IF transmitted over Internet, secure the content Credit Card Security (VISA CISP, Mastercard Site Data Protection Program) Anyone that stores VISA or Mastercard credit card information Never send cardholder information via unencrypted -Identify CC info in s -IF transmitted over Internet, secure the content FERPA (Family Educational Rights and Privacy Act) Any public school/university, any private school that receives funds from US Dept of Education and state/local education agencies Prohibits disclosing the contents of a student s records, without the consent of the student or of the parent of the minor student -Identify student information in s -Block or review the s 25

26 Relevant Regulations Part 3 Regulation Applies to Requires Requirements USA PATRIOT Act: Section 326 All industries that deal with consumers Activities deemed suspicious by law enforcement (ranging from book selections in public libraries to unusual cash transactions) may be the subject of investigations that require IT to track, interpret, and report on customer data. -Archive Sec 17a-4, NASD3010 (Supervision), NASD3110 (Books and Records), NASD3013 Anyone that trade of securities of any type OR a member of the National Association of Stock Dealers (NASD) Save s for 6 years -Archive for 6 years Safe Harbor (European) Anyone that obtains, owns, or licenses personal/private information about residents of the EU Protect personal information of EU residents -Identify personal information in s -IF transmitted over Internet, secure the content 26

27 Interne compliance Richtlinien Unterschiedlich je nach Unternehmen, aber überall nötig Abhängig von Unternehmensstruktur BEISPIELE disclaimer in ausgehenden s bei bestimmten / allen usern Policy nach LDAP-Gruppen/usern Grössenbeschränkung von ein- und ausgehenden s Aufsetzen einer policy und monitoring in Approval Box Sprachgebrauch in s Policies mit Unterstützung von Dictionaries Approval Box oder Meldung an HR Monitoring nach bestimmten Dokumenten Policy zur Suche nach Schlagwörtern confidential, etc. Suche nach Projektnamen etc. Unterbinden von schädlichen EE.-Dateien blocken oder aussondern von.ee,.pps, etc. 27

28 Flexibles Policy System 28

29 SonicWALL Security Wettbewerb SMB Barracuda Symantec Trend Micro GFI SurfControl gehostete Lösungen Postini MessageLabs Enterprise CipherTrust IronPort Proofpoint 29

30 SonicWALL Wettbewerbsvorteile SMB Markt effektiver / bessere Performance False Positive Rate Einfach zu verwalten Optimales Preis-/Leistungsverhältnis TCO, ROI und features Enterprise Markt effektiver / bessere Performance Enterprise-Erfahrung von Mailfrontier False Positive Rate Einfach zu verwalten Optimales Preis-/Leistungsverhältnis TCO, ROI und features 30

31 SonicWALL / Barracuda Disk Space LDAP Per User Clustering Per User Scores Barracuda 200 SonicWALL GB Disk Space LDAP Per User Clustering Per User Scores Barracuda GB SonicWALL GB AV Open Source Commercial (optional) AV Open Source Commercial (optional) Price $1,395 US pricing $1,395 US pricing Price $1,995 US pricing $1,995 US pricing 31

32 Referenzen Enterprise Kunden Consumer Goods Retail Entertainment Nonprofit Education Pharmaceutical Hospitality Automotive Technology Retail Healthcare Transportation Financial Services Media/Publishing Consumer Goods Media/Publishing Aerospace/Defense Technology Manufacturing Government 32

33 Awards & Reviews NetworkWorld Top-Rated Enterprise Anti-Spam Software MailFrontier s ASG put up some impressive results in terms of blocking spam and letting legitimate mail pass. - Sept 15, 2003 Recommends MailFrontier be included on Short List of products evaluated for large-scale, high-performance anti-spam systems December 20, 2004 InfoWorld Rated Excellent MailFrontier's provides excellent accuracy, easiest install and lots of control to the admin. September 27, 2004 Recommended MailFrontier's hands-off approach can help ease the administration burden on IT departments. June 7, 2004 IT WEEK Editor s Choice: 5 out of 5 Stars MailFrontier Gateway Appliance m500 setup was easy and took less than an hour...lt really blocks all unwanted . June 6, 2005 Network Computing Editor s Choice MailFrontier installed in a snap spam engine design is simple, but highly effective reporting features were the best in class. - November 24,

34 Awards & Reviews Network Computing war in 20 Minuten aufgesetzt und hat mit seiner leichten Konfiguration, der guten Trefferquote und seinen detaillierten Berichten überzeugt. 34

35 Danke