160 likes | 367 Views
Blue Coat Enables IPv6. Ehab Derbas Territory Sales Manager, ME. May 2009. Agenda. What is IPv6 Customer challenges Considerations Evaluation criteria Blue Coat solutions Summary. What is IPv6. New Internet Protocol born in 1993 Increases address space by 4x Simplifies headers
E N D
Blue Coat Enables IPv6 Ehab Derbas Territory Sales Manager, ME May 2009
Agenda • What is IPv6 • Customer challenges • Considerations • Evaluation criteria • Blue Coat solutions • Summary
What is IPv6 • New Internet Protocol born in 1993 • Increases address space by 4x • Simplifies headers • Replaces IPv4, but can also co-exist • Core network infrastructure has been upgraded
Customer Challenges • Elimination of NAT firewall • Broader risk surface area • Greater risk to internal network (from outside) • New (NAT-challenged) apps/services available • Extending security policy • Maintaining visibility
Network Design Considerations • Compliance & backhaul requirements • Asymmetric routing VRRP Internet HSRP ISP1 ISP2 Internet intranet
The Right Solution • Provides evolution from IPv4 • Mature, customer-proven solution • Technical understanding of IPv6 • Focus on application requirements • Balance of performance & control
Blue Coat Expertise • Began IPv6 program in 2004 • Shipped first alpha release in 2005 • Operated beta program on native IPv6 backbone • Active participation in IETF & IPv6 Forum • Patented IPv6 proxy technologies • Beta available now; GA release planned for 2H CY09
Power of Blue Coat ProxySG • Fills NAT gap • Broad protocol support • Full visibility including SSL • Rich, per-user policy • Application prioritization • Acceleration & bandwidth optimization • ProxySG is leader • Market leader in Secure Web Gateway & WAN optimization • Used by 97 of global F100 & the world’s top ten telcos
Transition to IPv6 • ProxySG deployed today for IPv4 eases transition • Extend policies to IPv6 • IPv4-only apps/services with IPv6-only users & vice-versa • Full connection termination • No need for translation • Mask internal network architecture • Enforce IPv6 end-to-end communication model
www.ocs-6.com 2001:240:702:2:20c:29ff:fe33:fdb3 IPv4-only InternalNetwork Policy Policy IPv6-only Network TCP/IPv4 TCP/IPv6 www.ocs-6.com www.ocs-4.com 64.81.51.1 IPv6-only InternalNetwork IPv4-only Network TCP/IPv6 TCP/IPv4 www.ocs-4.com Bridging the Gap url.domain=etrade.com server_url.dns_lookup(prefer-ipv6)
Key ProxySG Features • Broad protocol support • HTTP, HTTPS, SSL, DNS, SSH, P2P (BitTorrent), Streaming (RTSP), TCP Tunnels, etc. • Logging, caching, statistics, etc. • Rich policy engine support • Directory auth integration (LDAP, AD, etc.) • Common user interface • Same for IPv4 & IPv6, no re-training required • Supports scaled, clustered configurations • Multiple proxies part of cluster for asymmetric routing
Summary • Industry transition to IPv6 in progress • Importance of proxy technology • Performance & control • Integration of old (IPv4) with new (IPv6) apps/services • Blue Coat is right partner • Experienced • Technical leadership • Shipping product