BUSINESS AWARE FIREWALL. Frank Elter Vertrieb Christian Schrallhammer - Technik

Größe: px

Ab Seite anzeigen:

Download "BUSINESS AWARE FIREWALL. Frank Elter Vertrieb Christian Schrallhammer - Technik"

Marta Dressler
vor 5 Jahren
Abrufe

1 BUSINESS AWARE FIREWALL Frank Elter Vertrieb Christian Schrallhammer - Technik 2018 Check 2018 Point Check Software Point Technologies Software Technologies Ltd. Ltd. 1

2 Wir können unsere Probleme nicht lösen mit der selben Denkweise die wir hatten, als wir sie kreierten Albert Einstein 2015 Check Point Software Technologies Ltd. 2

3 Was macht uns das Leben schwer Typische Ausgangsbasis: Unterschiedliche System für EndPoint, Proxy, IPS, Firewall, Cloud, Mail, Mobile Firewall Regelwerk >500 Regeln Ressourcen, ManPower ist knapp Verschiedene Teams Fehlerfindung in Kombination zur Zeit, führt zu Security Löchern Verschiedene System machen das Troubleshooting schwer SIEM notwendig 3

4 The Global Risks Report

5 Where are we? Gen V THREATS GRADE V GRADE IV Gen III Gen IV Mega GRADE III GRADE II GRADE I Gen I Gen II Networks Applications 2.8 Payload Enterprises are between Gen 2-3 PROTECTIONS Virus

6 Security ist nicht nur Perimeter - Multiple Umgebungen 6

7 Hinzu kommen neue Anforderungen Wie automatisiere ich, wiederkehrende Tasks im SaaS Umfeld? Wie konsolidiere ich mehrere Standorte? Können Sie eine Menge komplexe Regeln mit wenig Personal verwalten? 7

8 Wie unterstützt mich meine Security Lösung im Bereich GDPR? PII Daten Erkennung bei Übertragungen? [Protected] Distribution or modification is subject to approval 8

THE EVOLUTION OF THE FIREWALL 2017 1980s 1994 2002 2010 BEFORE ACCESS CONTROL LISTS FIRST GENERATION THE FIREWALL & STATEFUL SECOND GENERATION INTEGRATED UTM THIRD GENERATION NEXT GENERATION FIREWALL

9 THE EVOLUTION OF THE FIREWALL s BEFORE ACCESS CONTROL LISTS FIRST GENERATION THE FIREWALL & STATEFUL SECOND GENERATION INTEGRATED UTM THIRD GENERATION NEXT GENERATION FIREWALL THE FOURTH GENERATION Business Aware Solution INSPECTION Controlling basic IP networks First stateful firewall with friendly user interface Integrated security solutions for IPS, Web, Integrated network, identity & application awareness Cloud, GDPR needs a Security Solution that adapt to your business [Protected] Distribution or modification is subject to approval 9

Viele Security Bausteine vereint in einer Lösung HTTPS Inspection Intrusion Prevention Anti-Virus DDOS CPU-Level Sandboxing Hypervisor Level Security Application Control Proxy Network Encryption

10 Viele Security Bausteine vereint in einer Lösung HTTPS Inspection Intrusion Prevention Anti-Virus DDOS CPU-Level Sandboxing Hypervisor Level Security Application Control Proxy Network Encryption Anti- Ransomware Zero Phishing Mobile Threat Prevention Machine Learning CPU-Level Sandboxing Anti-Bot Firewall Content Awareness URL Filtering ICS/ SCADA Protection Machine Learning Virtual Firewall Endpoint Detection & Response Threat Extraction Data Leak Prevention Human Behavioral Analytics Data Encryption 10

11 Check Point Infinity Solution SS7 ATTACK PREVENTION MOBILE MAN IN THE MIDDLE ATTACK ADAPTIVE CLOUD SECURITY NETWORK ENCRYPTION LARGE SCALE MANAGEMENT MEMORY ANALYSIS PUBLIC-CLOUD AUTOPROVISION CLOUD SECURITY AUTO-SCALE THREAT EXTRACTION CPU LEVEL SANDBOX T H E C Y B E R S REST E CAPIs U R I T Y AORCHESTRATION RCHITECTURE OF THE FUTURE 11

12 Benötigt wird mehr Granularität WHO? Technical Reasoning User ID Business Reasoning User role WHERE? IP address Cloud, network, remote HOW? WHAT? WHY? WHEN? Port, Service, Application Application, security rating Business content Business reason Time 12

13 DEMO [Internal Use] for Check Point employees 13

14 Business Aware Firewall - Business content (What? When?) What? Content When? Time GRANULAR AND ACCURATE POLICY - MEETING ALL BUSINESS NEEDS [Restricted] for designated teams 14

15 Adding Checks (Why?) We have noticed you are trying to upload a customer list to a Web based application. I ve received approval from Mr. Shuper Adding verifications stage on user activities Avoid broad block/allow policy decisions [Restricted] for designated teams 15

16 Business Aware Firewall - GPDR Content Adding Personal Identifiable Information Data Types to Access Policy [Restricted] for designated teams 16

17 Using Check Point Security Products for GDPR Check Point DLP policy-based to monitor content and log activity 17

flowing, monitoring of content, and blocking of

18 Using Check Point Security Products for GDPR Integrated DLP - provides awareness of personal data flowing, monitoring of content, and blocking of unauthorized data transmission Check Point Capsule Docs - tools for content classification Classification with Capsule Docs Classification of Data with Check Point DLP 18

19 Controlled Automation Processes Repetitive temp rules Sub-Layers: The path for controlled policy automation [Restricted] for designated teams 19

20 DEMO Ende [Internal Use] for Check Point employees 20

21 Unerreichte Möglichkeiten mit vereinter Policy Users Devices Applications Data Gateways Mobile Public Cloud Private Cloud 21

22 Easily Customizable, Monitor What s Important 22

23 Easily Customize Your Reports Accessible from any device Management Helpdesk Auditor 23

24 Empower Self-Service Security H e l p d e s k P o r t a l Apps Settings Use R80.10 APIs to automate routine Helpdesk security tasks All Categories Add user Add application Add host Block user Block application Block host 24

Eine vereinte Security Lösung für alle Plattformen:

Lösung die sich Ihren Bedürfnissen anpasst und nicht

haben den gemeinsamen Überblick - Bessere Übersicht,

25 Eine vereinte Security Lösung für alle Plattformen: EndPoint, Firewall, Cloud, DataCenter, Mobile Eine Lösung die sich Ihren Bedürfnissen anpasst und nicht umgekehrt Vereinte Teams arbeiten in einer Umgebung und haben den gemeinsamen Überblick - Bessere Übersicht, weniger Fehlerquellen sind der Schlüssel zur besseren Sicherheit 25

26 COMMUNITY. CHECKPOINT.COM Customers Partners Experts A s k q u e s t i o n s. S h a r e c o d e. S t a y u p - to- d a t e. 26

27 THANK YOU 2018 Check 2018 Point Check Software Point Technologies Software Technologies Ltd. Ltd. 27

Ähnliche Dokumente

Check Point Software Technologies LTD.

Check Point Software Technologies LTD. Oct. 2013 Marc Mayer A Global Security Leader Leader Founded 1993 Global leader in firewall/vpn* and mobile data encryption More than 100,000 protected businesses