cato networks phased deployment
TRANSCRIPT
1CONFIDENTIAL - CATO NETWORKS © 2015
Cato Networks: Phased Deployment and editions
1
2CONFIDENTIAL - CATO NETWORKS © 2015
Cato Use Cases and Phased Deployment
3CONFIDENTIAL - CATO NETWORKS © 2015
A typical organization
Datacenter Remote Branch
Mobile Users
Cloud Datacenter
Enterprise WAN
Internet/Cloud Apps
Insecure Internet Access
InternetBackhaul
Public Cloud Integration
Slow VPN
Remote Branch
Appliance Sprawl
4CONFIDENTIAL - CATO NETWORKS © 2015
Insecure Mobile Access to the the Internet, Cloud Apps
Datacenter Remote Branch
Mobile Users
Cloud Datacenter
Enterprise WAN
Internet/Cloud Apps
Remote Branch
5CONFIDENTIAL - CATO NETWORKS © 2015
Secure Mobile Access to the the Internet, Cloud Apps
Datacenter Remote Branch
Mobile Users
Cloud Datacenter
Enterprise WAN
Internet/Cloud Apps
Remote Branch
Cato Cloud
• Connect mobile users to Cato Cloud via Cato Client
• Enable secure mobile Internet access anywhere
Cato Client
6CONFIDENTIAL - CATO NETWORKS © 2015
Slow VPN access via Branch Firewalls
Datacenter Remote Branch
Mobile Users
Cloud Datacenter
Enterprise WAN
Internet/Cloud Apps
Remote Branch
Cato Cloud
7CONFIDENTIAL - CATO NETWORKS © 2015
High Performance VPN access to the Datacenter
Datacenter Remote Branch
Mobile Users
Cloud Datacenter
Enterprise WAN
Internet/Cloud Apps
Remote Branch
Cato Cloud
• Connect Datacenter to Cato with secure tunnel
• Enable secure VPN access anywhere
Cato Client
Secure Tunnel
8CONFIDENTIAL - CATO NETWORKS © 2015
Split Security Controls for Cloud and Physical Datacenters
Datacenter Remote Branch
Mobile Users
Cloud Datacenter
Enterprise WAN
Internet/Cloud Apps
Remote Branch
Cato Cloud
9CONFIDENTIAL - CATO NETWORKS © 2015
Public Cloud Network Integration
Datacenter Remote Branch
Mobile Users
Cloud Datacenter
Enterprise WAN
Internet/Cloud Apps
Remote Branch
Cato Cloud
• Connect Cloud Datacenter with Cato vSocket
• Consolidate security controls for datacenter and Cloud Datacenter in Cato
Cato vSocket
Secure Tunnel
10CONFIDENTIAL - CATO NETWORKS © 2015
Remote Branch Backhaul impacts User Productivity
Datacenter Remote Branch
Mobile Users
Cloud Datacenter
Enterprise WAN
Internet/Cloud Apps
Remote Branch
Cato Cloud
11CONFIDENTIAL - CATO NETWORKS © 2015
Remote Branch Backhaul Elimination
Datacenter Remote Branch
Mobile Users
Cloud Datacenter
Enterprise WAN
Internet/Cloud Apps
Remote Branch
Cato Cloud
• Connect remote Branch to Cato Cloud
• Enable direct secure Internet access and WAN connection w/o backhaul
Cato Socket
12CONFIDENTIAL - CATO NETWORKS © 2015
Remote Branch Appliance Sprawl
Datacenter Remote Branch
Mobile Users
Cloud Datacenter
Enterprise WAN
Internet/Cloud Apps
Remote Branch
Cato Cloud
13CONFIDENTIAL - CATO NETWORKS © 2015
Remote Branch Appliance Elimination
Datacenter Remote Branch
Mobile Users
Cloud Datacenter
Internet/Cloud Apps
Remote Branch
Cato Cloud
• Connect remote Branch to Cato Cloud
• Enable direct secure Internet access and WAN connection
• At this stage the previous enterprise WAN is gone
Cato Socket
Secure Tunnel
14CONFIDENTIAL - CATO NETWORKS © 2015
Datacenter WAN/Internet Security Stack Elimination
Datacenter Remote Branch
Mobile Users
Cloud Datacenter
Internet/Cloud Apps
Remote Branch
Cato Cloud
15CONFIDENTIAL - CATO NETWORKS © 2015
Datacenter Internet/WAN Security
DatacenterRemote Branch
Mobile Users
Cloud Datacenter
Internet/Cloud Apps
Remote Branch
Cato Cloud
• Disable internet and WAN security services in datacenter FW (FW now handles LAN traffic)
• Enable secure Internet access and WAN connection with one policy
Cato Socket
16CONFIDENTIAL - CATO NETWORKS © 2015
Final Deployment: Secure Network
DatacenterRemote Branch
Mobile Users
Cloud Datacenter
Internet/Cloud Apps
Remote Branch
Cato Cloud
17CONFIDENTIAL - CATO NETWORKS © 2015
Cato Editions
18CONFIDENTIAL - CATO NETWORKS © 2015
CATO Secure Network Edition
CATO CLOUD
PoP
CatoCloud
Netw
ork
Firewall/
VPN
Application Control
URL Filter
Cloud Access Control
DLP
Anti M
alware
Adv. Threat Protection
Cato Security Services
Cato secures and optimizes all WAN and Internet and Cloud traffic for HQ, Branches and Mobile UsersBranch Mobile UsersHQ/
DatacenterCloud
Datacenter
Cato Socket
Cato vSocket Cato
Client
19CONFIDENTIAL - CATO NETWORKS © 2015
CATO CLOUD
Cato Secure Web Edition
Branch Mobile Users
PoP
CatoCloud
Netw
ork
Firewall/
VPN
Application Control
URL Filter
Cloud Access Control
DLP
Anti M
alware
Adv. Threat Protection
Cato Security Services
HQ/Datacenter
Cato secures and optimizes Internet and Cloud traffic from branch, HQ, Mobile Cloud
Datacenter
MPLS or SD-WAN
MPLS or SD/WAN handles WAN traffic
20CONFIDENTIAL - CATO NETWORKS © 2015
CATO Cloud Network Edition
PoP
CatoCloud
Netw
ork
Branch Mobile UsersHQ/Datacenter
Cloud Datacenter
Cato carries WAN, Internet and Cloud traffic for Physical/Cloud datacenters, Branches and Mobile Users.
Existing security stack provides secure tunnel and enforces security policies. Customers can upgrade to Cato Secure Network Edition at any time.
21CONFIDENTIAL - CATO NETWORKS © 2015
Thank You
Network Security is Simple Again