stonesoft 5.4 new features antti kuvaja
TRANSCRIPT
![Page 1: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/1.jpg)
Stonesoft version 5.4
NEW FEATURES
![Page 2: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/2.jpg)
Release highlights
STONESOFT 5.4
New transformable
Security Engine
New visualizations and
evasion awareness
![Page 3: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/3.jpg)
Security Engine
![Page 4: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/4.jpg)
FW
Security Engine
IPS NGN
2001 2004 2012
![Page 5: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/5.jpg)
IPS FW VPN L2FW
Security Engine Roles
NGN
![Page 6: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/6.jpg)
New Statistics and Visualizations
![Page 7: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/7.jpg)
Evasion awareness SEE THE ANOMALIES IN LOGS…
”Anomaly” log field available
that shows the detected
atomic evasions
”Top Anomalies” statistics
![Page 8: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/8.jpg)
Log Visualizations UNDERSTAND YOUR ENVIRONMENT
See which users use what applications as a single diagram
What services and situations are used and by whom?
Log Analysis mode can handle up to 100 000 (prefiltered) log events
![Page 9: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/9.jpg)
Status diagrams LINK/TUNNEL USAGE INFO EMBEDDED TO…
See the relative amount of
traffic flowing in each VPN
tunnel or Netlink
![Page 10: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/10.jpg)
Statistics Sections ENHANCED REPORTING
Ability to reuse Statistics
Sections
A lot of out-of-box
sections available
Ability to create ad-hoc
filters for Reports
![Page 11: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/11.jpg)
Enhancements
SMC
![Page 12: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/12.jpg)
Audit Log Enhancements
REGULATORY COMPLIANCE
Element snapshots
Audit data syslog
forwarding
More granular auditing
![Page 13: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/13.jpg)
Traffic Capture MORE CONVENIENT TROUBLESHOOTING
It is now possible to take
tcpdump directly from
Management Client user
interface
Makes troubleshooting
easier for customers and
Stonesoft Support
tcpdump
![Page 14: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/14.jpg)
Better SMC Scalability MANAGEMENT UP TO 2000 NODES
One Management
Server can serve up to
2000 nodes
Improved policy upload
performance
5.3
1000
2000
5.4
Nodes
Version
![Page 15: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/15.jpg)
Localization Support SMC IN CHINESE, RUSSIAN, SPANISH, …
Most important SMC labels
are parameterized
Introducing a new SMC
language is a matter of
translating one text file
containing about 5000+
labels/messages
![Page 16: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/16.jpg)
Country flags in logs NEW USAGE OF GEOIP DETECTION…
See the country flags directly
in Log records table
Useful information for anomaly
detection
Helps you to visually identify
which log entries are related
![Page 17: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/17.jpg)
Other SMC Enhancements
Internal User Database replication to separate
administrative Domains
Interface comments visible in statistics
Policy usability enhancements
LEEF forwarding/reception support
![Page 18: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/18.jpg)
Enhancements
NGN
![Page 19: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/19.jpg)
Advanced Routing VPN WITH DYNAMIC ROUTING AVAILABLE
Tunneling interface
support with Route-Based
VPN
Dynamic routing over
Route based VPN
![Page 20: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/20.jpg)
Snort Signatures ABILITY TO IMPORT AND USE…
Snort signatures can be
automatically translated into
Stonesoft custom fingerprints
![Page 21: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/21.jpg)
File context BETTER DEEP INSPECTION WITH…
Makes possible to inspect
directly the transferred files
More accurate inspection
![Page 22: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/22.jpg)
Auth. Server & Firewall DEEPER INTEGRATION
Easier way to use
Authentication Server for VPN
and possibly also for wireless
access point authentication
Multi-Link capable channel
between the Authentication
Server and Firewall
FW AS
![Page 23: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/23.jpg)
Improved Application Identification
MORE PROTOCOLS SUPPORTED
Port independent access
control and application
identification also for non-web
traffic
Amount of Applications
increasing all the time.
![Page 24: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/24.jpg)
Other NGN Enhancements
Increased small packet throughput with big
appliances
HTTP IPv6 inspection in L3
![Page 25: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/25.jpg)
Enhancements
SSL VPN
Version 1.5.100
![Page 26: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/26.jpg)
Integrated Directory Service
BETTER ROBUSTNESS AND SCALABILITY
Provides better resilience for
userbase without the need to
have external Directory
Services
USERS
SSL VPN
SSL VPN
![Page 27: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/27.jpg)
Access client for Linux, and OS X
IMPROVED PLATFORM SUPPORT
Native client for
Linux and Mac OS X
SSL VPN
![Page 28: Stonesoft 5.4 new features antti kuvaja](https://reader033.vdocuments.net/reader033/viewer/2022052904/557f6707d8b42aab368b47d4/html5/thumbnails/28.jpg)
Thanks!