cato networks phased deployment

Post on 15-Apr-2017

295 Views

Category:

Software

19 Downloads

Preview:

Click to see full reader

TRANSCRIPT

1CONFIDENTIAL - CATO NETWORKS © 2015

Cato Networks: Phased Deployment and editions

1

2CONFIDENTIAL - CATO NETWORKS © 2015

Cato Use Cases and Phased Deployment

3CONFIDENTIAL - CATO NETWORKS © 2015

A typical organization

Datacenter Remote Branch

Mobile Users

Cloud Datacenter

Enterprise WAN

Internet/Cloud Apps

Insecure Internet Access

InternetBackhaul

Public Cloud Integration

Slow VPN

Remote Branch

Appliance Sprawl

4CONFIDENTIAL - CATO NETWORKS © 2015

Insecure Mobile Access to the the Internet, Cloud Apps

Datacenter Remote Branch

Mobile Users

Cloud Datacenter

Enterprise WAN

Internet/Cloud Apps

Remote Branch

5CONFIDENTIAL - CATO NETWORKS © 2015

Secure Mobile Access to the the Internet, Cloud Apps

Datacenter Remote Branch

Mobile Users

Cloud Datacenter

Enterprise WAN

Internet/Cloud Apps

Remote Branch

Cato Cloud

• Connect mobile users to Cato Cloud via Cato Client

• Enable secure mobile Internet access anywhere

Cato Client

6CONFIDENTIAL - CATO NETWORKS © 2015

Slow VPN access via Branch Firewalls

Datacenter Remote Branch

Mobile Users

Cloud Datacenter

Enterprise WAN

Internet/Cloud Apps

Remote Branch

Cato Cloud

7CONFIDENTIAL - CATO NETWORKS © 2015

High Performance VPN access to the Datacenter

Datacenter Remote Branch

Mobile Users

Cloud Datacenter

Enterprise WAN

Internet/Cloud Apps

Remote Branch

Cato Cloud

• Connect Datacenter to Cato with secure tunnel

• Enable secure VPN access anywhere

Cato Client

Secure Tunnel

8CONFIDENTIAL - CATO NETWORKS © 2015

Split Security Controls for Cloud and Physical Datacenters

Datacenter Remote Branch

Mobile Users

Cloud Datacenter

Enterprise WAN

Internet/Cloud Apps

Remote Branch

Cato Cloud

9CONFIDENTIAL - CATO NETWORKS © 2015

Public Cloud Network Integration

Datacenter Remote Branch

Mobile Users

Cloud Datacenter

Enterprise WAN

Internet/Cloud Apps

Remote Branch

Cato Cloud

• Connect Cloud Datacenter with Cato vSocket

• Consolidate security controls for datacenter and Cloud Datacenter in Cato

Cato vSocket

Secure Tunnel

10CONFIDENTIAL - CATO NETWORKS © 2015

Remote Branch Backhaul impacts User Productivity

Datacenter Remote Branch

Mobile Users

Cloud Datacenter

Enterprise WAN

Internet/Cloud Apps

Remote Branch

Cato Cloud

11CONFIDENTIAL - CATO NETWORKS © 2015

Remote Branch Backhaul Elimination

Datacenter Remote Branch

Mobile Users

Cloud Datacenter

Enterprise WAN

Internet/Cloud Apps

Remote Branch

Cato Cloud

• Connect remote Branch to Cato Cloud

• Enable direct secure Internet access and WAN connection w/o backhaul

Cato Socket

12CONFIDENTIAL - CATO NETWORKS © 2015

Remote Branch Appliance Sprawl

Datacenter Remote Branch

Mobile Users

Cloud Datacenter

Enterprise WAN

Internet/Cloud Apps

Remote Branch

Cato Cloud

13CONFIDENTIAL - CATO NETWORKS © 2015

Remote Branch Appliance Elimination

Datacenter Remote Branch

Mobile Users

Cloud Datacenter

Internet/Cloud Apps

Remote Branch

Cato Cloud

• Connect remote Branch to Cato Cloud

• Enable direct secure Internet access and WAN connection

• At this stage the previous enterprise WAN is gone

Cato Socket

Secure Tunnel

14CONFIDENTIAL - CATO NETWORKS © 2015

Datacenter WAN/Internet Security Stack Elimination

Datacenter Remote Branch

Mobile Users

Cloud Datacenter

Internet/Cloud Apps

Remote Branch

Cato Cloud

15CONFIDENTIAL - CATO NETWORKS © 2015

Datacenter Internet/WAN Security

DatacenterRemote Branch

Mobile Users

Cloud Datacenter

Internet/Cloud Apps

Remote Branch

Cato Cloud

• Disable internet and WAN security services in datacenter FW (FW now handles LAN traffic)

• Enable secure Internet access and WAN connection with one policy

Cato Socket

16CONFIDENTIAL - CATO NETWORKS © 2015

Final Deployment: Secure Network

DatacenterRemote Branch

Mobile Users

Cloud Datacenter

Internet/Cloud Apps

Remote Branch

Cato Cloud

17CONFIDENTIAL - CATO NETWORKS © 2015

Cato Editions

18CONFIDENTIAL - CATO NETWORKS © 2015

CATO Secure Network Edition

CATO CLOUD

PoP

CatoCloud

Netw

ork

Firewall/

VPN

Application Control

URL Filter

Cloud Access Control

DLP

Anti M

alware

Adv. Threat Protection

Cato Security Services

Cato secures and optimizes all WAN and Internet and Cloud traffic for HQ, Branches and Mobile UsersBranch Mobile UsersHQ/

DatacenterCloud

Datacenter

Cato Socket

Cato vSocket Cato

Client

19CONFIDENTIAL - CATO NETWORKS © 2015

CATO CLOUD

Cato Secure Web Edition

Branch Mobile Users

PoP

CatoCloud

Netw

ork

Firewall/

VPN

Application Control

URL Filter

Cloud Access Control

DLP

Anti M

alware

Adv. Threat Protection

Cato Security Services

HQ/Datacenter

Cato secures and optimizes Internet and Cloud traffic from branch, HQ, Mobile Cloud

Datacenter

MPLS or SD-WAN

MPLS or SD/WAN handles WAN traffic

20CONFIDENTIAL - CATO NETWORKS © 2015

CATO Cloud Network Edition

PoP

CatoCloud

Netw

ork

Branch Mobile UsersHQ/Datacenter

Cloud Datacenter

Cato carries WAN, Internet and Cloud traffic for Physical/Cloud datacenters, Branches and Mobile Users.

Existing security stack provides secure tunnel and enforces security policies. Customers can upgrade to Cato Secure Network Edition at any time.

21CONFIDENTIAL - CATO NETWORKS © 2015

Thank You

Network Security is Simple Again

top related