dipu cyberroam presenttion

17
CYBEROAM Complete network security

Upload: md-abu-syeem-dipu

Post on 18-Jan-2017

118 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Dipu cyberroam presenttion

CYBEROAM Complete network security

Page 2: Dipu cyberroam presenttion

What is CYBEROAM?

CYBEROAM is a vendor for information security products and services.

Page 3: Dipu cyberroam presenttion

Established in 1999500+ Employees

ISO 9001:2000 certified

Sales, Distribution Channel across 85+ countriesCommunication - Networks – Security

Elitecore Technologies Pvt. Ltd.

Page 4: Dipu cyberroam presenttion

Why CYBEROAM firewall?

Page 5: Dipu cyberroam presenttion

External threats

Targeting the Internal UserBlended threats over multiple protocol

• Email: Over 90 % mail is spam carrying spyware, phishing, viruses, worm

• HTTP - Drive-by downloads, Pharming, Spyware via P2P sites

• FTP – Malicious uploads & downloads

Page 6: Dipu cyberroam presenttion

Insider Threats

• Insider Threats – Over 50% threats are from insiders

• Most attackers are current or former employees

• Majority of insiders plan their activities in advance using remote access

Page 7: Dipu cyberroam presenttion

Which model we choose?

Enterprises

CR 750ing-xp

Interfaces

Page 8: Dipu cyberroam presenttion

specification

Page 9: Dipu cyberroam presenttion
Page 10: Dipu cyberroam presenttion

How firewall works? BTCL Router

BTCL Equitel

Gig0/1 Gig/0/1

Equitel Router

Eth0/2(CSC)-Edge sw Edge sw-eth0/1(IPS)

Ashulia

CTG

Vulta

Eth0/1(CSC)—Gig0/2(Router)

Et0/0(CSC)—edge sw

Gig0/0—gig0/10(vlan)

Gig0/1--Ashulia

Fa0/0/0---CTG

Fa0/0/1--Vulta

Domain Controller Email

Server Frame Zone

Branc

h Rou

ter

IPS FW(Mail)

CSC FWLawson VPN

BoxCore Router

Distribution SW(L3)

Server SW

Corpo

rate L

AN

LAN SW

BanglaCAT Corporate Network Diagram

ERP SW

ERP Server

AKNET(Mail)

DMZ switch

Eth0/3(CSC)—DMZ sw

Career server

Eth0/0(IPS)-mail swi-Career server

Tejgaon

Gig0/18--Tejgaon

Wireless gate

New corporate office

Fa0/2/1(Router)—Eth0/2(IPS)

CYBEROAM

Page 11: Dipu cyberroam presenttion
Page 12: Dipu cyberroam presenttion

Layer 8 – The Human Layer

Layer 8 Technology – Security around the User- Network security decisions based on Usernames and IP Addresses

Control Who is doing What in the network Allows creation of User Identity-based security policies Identifies traffic by username even in case of dynamic IP

Page 13: Dipu cyberroam presenttion

User

Page 14: Dipu cyberroam presenttion

Why we use it in BANGLA CAT??• CYBEROAM provides increased LAN security by providing separate

port for connecting to the publicly• accessible servers like Web server, Mail server, FTP server etc. hosted

in DMZ which are visible the external world and still have firewall protection.

CYBEROAM Firewall thus protects organizations from DOS(disk operating system), DDOS and IP Spoofing attacks.

Page 15: Dipu cyberroam presenttion

Product Certifications

IPv6 Ready Checkmark Certification ICSA Labs Certified Firewall

ICSA Labs certification Internet Watch Foundation Member of VPN Consortium

Page 16: Dipu cyberroam presenttion

Question/Answer Session