300 likes | 529 Views
Enterprise Security By Alcatel-Lucent Open. Trusted. Dynamic. Presenter. 4. KNOWLEDGE. Top Security Challenges. Always Connected Multi-tasking Nano-second Patience. More Sophisticated More Rapid More Organized. 2.PEOPLE. 1. NETWORK. NEW GENERATION OF MOBILE WORKERS. EVOLVING THREATS.
E N D
Enterprise Security By Alcatel-LucentOpen. Trusted. Dynamic. Presenter
4. KNOWLEDGE Top Security Challenges • Always Connected • Multi-tasking • Nano-second Patience • More Sophisticated • More Rapid • More Organized 2.PEOPLE 1. NETWORK NEW GENERATION OF MOBILE WORKERS EVOLVING THREATS • Manage Risk • Protect Private Data • Be Compliant • Manage Costs • Web 2.0 • The Cloud • B2B Automated Processes • Virtualization 3.PROCESS NEW MANDATE FOR THE CIO NEW BUSINESS MODELS
Creating The Trusted Dynamic Enterprise • Open and Secure Interfaces to • Communications, Data and Services • Enable new collaborative business models • Managed risk • Protected data • Controlled costs • Security Is a Positive Enabler for Business Performance
Alcatel-Lucent’s Enterprise Security Blueprint User Centric Security Delivered from Within the Network Benefits with Transformation • Protects Private Data • Secure Knowledge Sharing • Automated & Secure Processes • Always-on Security Management • Reduces Operational Costs • Enables Collaboration • Removes Productivity Barriers • Provides a User Aware Network • Security (Voice & Data & Mobility) • Enables Compliance • (Policy Enforcement & Audit) For more detail, see Creating the Trusted, Dynamic Enterprise white paper by Alcatel-Lucent http://enterprise.all.alcatel-lucent.com/private/active_docs/WhitePaper_Security-Blueprint_EN_July2009_EPG3310090513.pdf • Security Across Networks, People, Processes & Knowledge
Alcatel-Lucent’s Enterprise Security Blueprint User Centric Security Delivered from Within the Network Ensures Efficient Transformation • Security Policy is Visible to All • Compliance Reporting is Automatic • Risk Dashboards are Available • Event Management is Proactive • Risk Adjustment is Automatic • Users are Profiled • Control is Fine-grained • Audit is Automatic • Focus on Identity & Information • Security Becomes Embedded • Encryption is Automatic For more detail, see Creating the Trusted, Dynamic Enterprise white paper by Alcatel-Lucent http://enterprise.all.alcatel-lucent.com/private/active_docs/WhitePaper_Security-Blueprint_EN_July2009_EPG3310090513.pdf • Security Across Networks, People, Processes & Knowledge
Alcatel-Lucent’s Enterprise Security Blueprint User Centric Security Delivered from Within the Network Global Corporate-Wide Security • Consistent Application of Security Voice, Data, and Mobility • Independent Chain of Control • Security is Transparent to the User • Security is Always-On • Security is Highly Available For more detail, see Creating the Trusted, Dynamic Enterprise white paper by Alcatel-Lucent http://enterprise.all.alcatel-lucent.com/private/active_docs/WhitePaper_Security-Blueprint_EN_July2009_EPG3310090513.pdf • Security Across Networks, People, Processes & Knowledge
Alcatel-Lucent Security Solutions • A Comprehensive Portfolio
Alcatel-Lucent Security Solutions • A Comprehensive Portfolio
Key Features Layer 2 Security Zone Flexible Rules-Based-Routing Engine Multi-Tenant Unique Very Fine grained QoS High Availability, Scalability & Reliability Perimeter Security (IP Firewall, VPN)Alcatel-Lucent VPN Firewall BrickTMSecurity Appliance VPN Firewall Brick VPN Firewall Brick VPN Firewall Brick Security Management Server VPN Firewall Brick IP Sec VPN Client Differentiation • Non Disruptive Multi-vendor Deployment • Simple, Centrally Managed • Invisible to Attack & Non-Disruptive • Low Cost to Operate • Never had a CERT Advisory • Reference Customers • Banco Caja (Columbia) • Telefonica (CALA) • United Technologies • Sony Networks (JP) • University of Pittsburgh • NOAA (US)
Key Features Integrated Platform Network (Routing, Switching, QoS) Full Security (Firewall, VPN, IDS) Analog/Packet Voice DNS, DHCP, Radius, etc Multiple WAN Interfaces Perimeter Security (Unified Threat Management)Alcatel-Lucent OmniAccess™ 5740 Unified Services Gateway OmniAccess 57XX OmniAccess 57xx Differentiation • Centralized Management • Performance and Scalability • Competitive price/performance • Reference Customers • Quaestel (Hungary) • Armscor (US)
Key Features Integrated Firewall, VPN, & Threat Management Real time updates for Antivirus, IPS, Web Filtering and Anti-spam Perimeter Security (Unified Threat Management)FortiGate FortiGate FortiGate Forti- Manager FortiGate Differentiation • Eight (8) ICSA-certifications • Unique mix of superior technology, performance, and the total cost of ownership
Key Features Threat Management for Web Applications Intelligent, Application-aware Load-balancing SSL & XML Acceleration Inline reverse proxy and offline monitoring mode Perimeter Security (Web Application Firewall)FortiWeb FortiWeb Differentiation • Industry leading Web Application Threat Management Research • High Availability Configuration
Key Features Verify OS and End Point Configuration Controls Automatic Remediation Multi-Platform Authentication Vulnerability Protection Centralized Policy Management Network Access Control (Host Integrity Check)InfoExpress CyberGatekeeper & OmniSwitch CyberGatekeeper Policy Manager and Report Server CyberGatekeeper Remote Server OmniSwitch CyberGatekeeper Policy Server CyberGatekeeper Agent Differentiation • Non Disruptive Multi-vendor Deployment • Compatible with Multi-network, Multi-authentication, Multi-end-point environments • Integration with OmniSwitch provides enhanced security and reduced cost Reference Customers • Iona College (US) • Wolf Creek (Canada) • HanseatiCContor
Key Features Role Based Access Control to Network Resources and Applications Complete User Audit with Alerting Run Time Dashboards Compliance Reporting Network Access Control (Role-Based Access)Alcatel-Lucent OmniAccess™ SafeGuard SafeGuard Manager SafeGuard Server Differentiation • Transparent to the End User • Compatible with Multi-end-point Environments • Easy Integration with Existing Infrastructure Reference Customers • CPRL School District (Fr)
Key Features Automates Critical IP Name and Address Services DHCP, DNS Dual Support of IPv4 and IPv6 Standards Based API’s Comprehensive Reporting Network Access Control (IP Address Management)Alcatel-Lucent VitalQIP™ DNS/DHCP IP Management Software Vital QIP Appliance Vital QIP Client Differentiation • Proven Performance and Scalability • Seamlessly Manages Multi-vendor IP platforms and Appliances • Reference Customers • Royal Ahold (Netherlands) • Kodak (US)
Key Features Complete AAA Solution Fully enables 3G mobility wireless WANs Centralized Management Comprehensive Dashboards Identity Management (AAA)Alcatel-Lucent 8950 AAA 8950 AAA • Reference Customers • Transpower • Astrid • Wind (IT) Differentiation • PolicyFlow™ language and interpretation engine allows the system to enforce to any policy scenario • Extensive protocol support for wireless LANs and other networks ex 802.1x, DIAMETER, and EAP protocols
Key Features Performance & Event Management Real-time event analysis; Application Performance Management Reporting Proactive tracking of performance problems Security Management (Performance and Event Management)Alcatel-Lucent VitalSuite™ Performance Management Software WitalApps WitalART WitalNet Differentiation • End-to-end, management for geographically dispersed, multi-vendor, multi-service, networks • At-a-glance access to personalized performance data • Reference Customers • Telefonica Espana
Key Features Always-on visibility and control over laptops Unique location and remote data “kill” capabilities Automatic VPN 100% Patch Management Mobile Security (Data Protection, Device Management)Alcatel-Lucent OmniAccess™ 3500 Nonstop Laptop Guardian 3500 NLG Card 3500 NLG Server 3500 NLG Card Differentiation • Always-on security via 3G connection • Independent battery powered platform • Reference Customers • American Infrastructure (US) • VNA (US) • OEP Healthcare (Hungary) • BJC (US)
Key Features Per-Service, Per-User Monitoring REST/SOAP/POX Service Mediation Web Service Security & Virtualization Context & User Aware Policy Enforcement Application Security (Web Service Security)Alcatel-Lucent OmniAccess™ 8550 Web Services Gateway 8550 WSG 8550 WSG 8550 WSG 8550 WSG Differentiation • Identity Mapping • Flexible Policy Decision Engine • Reference Customers • Advocate Health Care
Key Features Dynamic Pin-holing (SIP, H.323, NOE) Encryption of Voice & Signaling Unique Very Fine grained QoS High Availability, Scalability & Reliability Application Security (Voice Security)VPN Firewall BrickTM, IP Touch VPN Firewall Brick IP Touch Gateway VPN Firewall Brick Security Management Server VPN Firewall Brick IP Sec VPN Client Differentiation • Most comprehensive solution • Augment for existing perimeter defense • No interrupt of voice on failover • Only solution for Alcatel-Lucent's NOE • Reference Customers • University of Frankfurt (Germany) • SingTel (Singapore)
Key Features Perimeter Security Web Application Security Role-Based Access Control Consolidated Audit User and Context Aware Policy Enforcement Application Security (PCI Compliance)VPN Firewall BrickTM, FortiWeb, SafeGuard, 8550 WSG VPN Firewall Brick FortiWeb 8550 WSG Brick SMS Safeguard Manager SafeGuard Server VPN Firewall Brick IP Sec VPN Client Differentiation • End-to end solution with layered strategy • Non-disruptive installation • Reduced cost with virtual control on “in-scope” endpoints • Contextual transaction content inspection and policy enforcement
Key Features Custom integration services Custom development services Experienced Professional Services Eco-System Professional Services • Risk Assessment • Business Impact Analysis • Gap Analysis • Threat Prevention & Management (CERT) • Security Monitoring • Crisis & Incident Management • Automated Vulnerability Detection • Vulnerability Assessment • Penetration testing • Secure Architecture Review • Compliance Readiness Alcatel-Lucent Services • Security Policy & Program Development • Security Architecture & Design • Security Policy & Integration • Business Continuity Planning • Remediation • Deploy Security Systems/Elements • Business Continuity Plan Testing Differentiation • Pre-Packaged Portfolio of Services • Focused on supporting enterprise customers and business partners • Many packages are fixed price, easy to consume • Reference Customers • French Space Agency (CNES)
Why Alcatel-Lucent? World Class R&D with Bell Labs (X.805 setting the Standard) [ITU-T & ISO] • Security, Network & Mobile Technology • Web 2.0, Cloud Computing, Encryption Research Carrier Class security for enterprise • Unmatched scalability and reliability • Understand new deployment models (Web 2.0, Cloud) Open Standards based solution enabling • Best of breed product selection Security Ecosystem provides access to collaboration and research with industry leading government and standards bodies User Centric Approach providing the fine grained control and audit that enables business performance Security Blueprint that enables open, trusted, dynamic security for voice, data and mobility. www.alcatel-lucent.com/enterprise/security • Trusted Advisor for Unique Security Solutions
www.alcatel-lucent.com www.alcatel-lucent.com/enterprise/security
Key Features Layer 2 Security Zone Flexible Rules-Based-Routing Engine Multi-Tenant Unique Very Fine grained QoS High Availability, Scalability & Reliability Perimeter Security (IP Firewall, VPN)VPN Firewall BrickTM Mobile Location Business Partner Trusted Dynamic Enterprise IP Touch VLANs VPN Firewall Brick Call Servers Voice VLANs VPN Firewall Brick VPN Firewall Brick WAN Internet Security Management Server Data Center Radius The Cloud MGMNT LANs DMZ VPN Firewall Brick Back Office IP Sec VPN Client PC VLANs Data LANs HEADQUARTER/Central Site Home Office Branch Office Differentiation • Non Disruptive Multi-vendor Deployment • Simple, Centrally Managed • Invisible to Attack & Non-Disruptive • Low Cost to Operate • Never had a CERT Advisory • Reference Customers • Banco Caja (Columbia) • Barclays Bank (UK/WW) • Telefonica (CALA) • AT&T Wireline/Wireless (US) • United Technologies (US/WW) • Sony Networks (JP)
Key Features Layer 2 Security Zone Flexible Rules-Based-Routing Engine Multi-Tenant Unique Very Fine grained QoS High Availability, Scalability & Reliability Perimeter Security (IP Firewall, VPN)VPN Firewall BrickTM Mobile Location Business Partner Trusted Dynamic Enterprise IP Touch VLANs Call Servers Voice VLANs WAN Internet Data Center Radius The Cloud MGMNT LANs DMZ Back Office PC VLANs Data LANs HEADQUARTER/Central Site Home Office Branch Office Differentiation • Non Disruptive Multi-vendor Deployment • Simple, Centrally Managed • Invisible to Attack & Non-Disruptive • Low Cost to Operate • Never had a CERT Advisory • Reference Customers • Banco Caja (Columbia) • Barclays Bank (UK/WW) • Telefonica (CALA) • AT&T Wireline/Wireless (US) • United Technologies (US/WW) • Sony Networks (JP)
Key Features Layer 2 Security Zone Flexible Rules-Based-Routing Engine Multi-Tenant Unique Very Fine grained QoS High Availability, Scalability & Reliability Perimeter Security (IP Firewall, VPN)VPN Firewall BrickTM Differentiation • Non Disruptive Multi-vendor Deployment • Simple, Centrally Managed • Invisible to Attack & Non-Disruptive • Low Cost to Operate • Never had a CERT Advisory • Reference Customers • Banco Caja (Columbia) • Barclays Bank (UK/WW) • Telefonica (CALA) • AT&T Wireline/Wireless (US) • United Technologies (US/WW) • Sony Networks (JP)
Key Features Layer 2 Security Zone Flexible Rules-Based-Routing Engine Multi-Tenant Unique Very Fine grained QoS High Availability, Scalability & Reliability Perimeter Security (IP Firewall, VPN)VPN Firewall BrickTM VPN Firewall Brick VPN Firewall Brick VPN Firewall Brick Security Management Server VPN Firewall Brick IP Sec VPN Client Differentiation • Non Disruptive Multi-vendor Deployment • Simple, Centrally Managed • Invisible to Attack & Non-Disruptive • Low Cost to Operate • Never had a CERT Advisory • Reference Customers • Banco Caja (Columbia) • Barclays Bank (UK/WW) • Telefonica (CALA) • AT&T Wireline/Wireless (US) • United Technologies (US/WW) • Sony Networks (JP)