ALOZIE CHARLES CYBEROAM FIREWALL WRITEUP

7/25/2019 ALOZIE CHARLES CYBEROAM FIREWALL WRITEUP

1/53

Copyright 2013 Cyberoam Technologies Pvt. Ltd. All Rights Reserved. .cyberoam.com

ur Products

.cyberoam.com

Copyright 2013 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

Cyberoam USP

Presenter:!"ame#

!Position#$ Cyberoam


2/53


Technology Powerhouse

450+ Employees

Backed by Worlds argest PE !n"estor #$%5&bn' ( the )arlyle *roup

ales, -.str.but.on )hannel and )ustomers across %/5+ )ountr.es

mongst the top 1 global players 2or 3T 2eatures

Patentpend.ng !dent.tybased anagement

)yberoam !ntroduct.on


3/53


6etwork ecur.ty

)entral.7ed secur.tyanagement

6etwork on.tor.ng 8nalys.s

ecur.ng 9ome users

ne stop shop: )yberoams 9ol.st.c ecur.ty olut.ons


4/53



5/53


upport 2or

1*;4*;W.a2.1?.3.110

Ancy

1>2.1?.3.10@

Richardnternet

)orporate 6

-9)P

Administrator

Applies sec&rity policies based on act&al

identity o) &sers.

ser-speci)ic r&les )or m&ltiple &sers to

share a common P address

1>2.1?.3.110

/teve

!dent.tybased ecur.ty


11/53 Copyright 2013 Cyberoam Technologies Pvt. Ltd. All Rights Reserved. .cyberoam.com

Pr.or.t.7e appl.cat.ons w.th ayer and ayer = controls

nfe#ted "ppli#ations $lo#%ed

nternet

"ppli#ation Tra

Cyberoam "pplian#e

Visibility Control

worms Spyware

Manage $andwidth

'ndesirable

$usiness Criti#al

So#io business

(on Criti#al

)ogs * +eports

)ontrols o"er appl.cat.ons based on 3ser !dent.ty, T.me, ppl.cat.on and Bandw.dth



F.sk e"el

9ery Lo 1B

Lo 2B

%edi&m 3B

igh B

9ery igh @B

)haracter.st.cs

=,cessive



Proact."e Protect.on model:=liminates the need )or man&al intervention by administrators to &pdate policies )or ne

applications added to the list

*ranular class.2.cat.on o2 appl.cat.ons

elect P/Pppl.cat.ons

Block all 2uture P/P appl.cat.ons w.thoutadd.ng appl.cat.ons manually

et ct.on



Control ho can

chat ith hom

ArchiveComm&nication

Control comm&nication medi&m

chat$ video$ voice$ )ile trans)erB

-ata Protect.on

Product.".ty

!nstant essag.ng )ontrols

)ontrol loss o2 product.".ty6 Control access over chat$ voice$

video$ )ile trans)er6 Control ho can chat ith hom

Pre"ent data leakage6



Feal t.me ".s.b.l.ty .nto user and network act.".t.es

Tra22.c -.sco"ery- Real-time visibility into bandidth &tili(ation by &ser$ protocol$ application

nappl.ance ogg.ng 8 Feport.ng

Se#urityManagement

Forensi#"nalysis

,ataProte#tion

Complian#eManagement

%/00+Feports



ayer= 3serbased Feports



-ual -ashboard ( Tra22.c 8 ecur.ty -ashboard

Traffic Dashboard



-ual -ashboard ( Tra22.c 8 ecur.ty -ashboard

Security Dashboard



ppl.cat.on Feports


21/53


)ompl.ance Feports


22/53


!nteract."e World Tra22.c ap

!nteract."e World Tra22.c ap 2or ource and -est.nat.on tra22.c


23/53


Tra22.c -.sco"ery


24/53


Tra22.c -.sco"ery


25/53


tate2ul !nspect.on ?.rewall

3n.2.ed ecur.ty

ppl.cat.on ?.rewall !dent.tybased ?.rewall

ayer = *eobased Tra22.c )ontrol

- Control incoming;o&tgoing tra))ic

)rom;to a speci)ic co&ntry

?astPath Technology

- To improve processing speed and

red&ce CP overhead

/ec&rity

Policies

Connectivity

Policies

Prod&ctivity

Policies

Firewall+ule

3n.2.ed ecur.ty

R&les )or all sec&rity )eat&res

)rom )ireall page

=asy navigation and increased

administrative prod&ctivity


26/53


)on2.gure rules 2or all 2eatures 2rom ?.rewall page

!dent.ty

ecur.ty

Product.".ty

)onnect.".ty

+

+

+


27/53


ntrusion Pre-ention System- Layer 8 and IPS Tuner driven

- Identity-based IPS policies per user,group and IP address

- Allows multiple IPS policies

- Identity-based alerts & reports

- 4!!" signatures # broadest security

cover

"nti!Spam .nbound/Outbound0

-T$ree level scanning%

IP eputation 'ltering

eal-time (lac)$ole List *(L+ ecurrent Pattern etection *PT+ tec$nology

./80 spam detection

Sel1-service 2uarantine and Spam igest

Scans STP, P3P, IAP tra5c

6irus outbrea) detection 1or 7ero-$ourprotection

,oS * ,,oS Prote#tion

- Pac)et ate Limit

- Protection against ood attac)s

- S9: ;lood-T


28/53


29/53


upport 2or !Pec, /TP,PPTP, GP6

Threat ?ree Tunnel.ng #T?T'Technology

upported GP6 )l.ents %acE/

iE/

Android Fevices

P/ec 9P"

L2TP 9P"

PPTP 9P"

iE/

L2TP 9P"

ndro.d

G.rtual Pr."ate 6etwork #GP6'

GP6- Client less

- License )ree

- /cans 9P" tra))ic )or %alare$ /pam$

nappropriate content$ ntr&sion attempts

d"anced 2eatures 2or bus.ness cont.nu.ty

- %PL/ )ailover to 9P"

- 9P" )ailover

Embrace BYOD with mobile

VPN clients


30/53


BlockedWebs.tes

9TTP;9TTP

Webs.te9TTP ;9TTP

Web 8 )ontent ?.lter.ng

llowedWebs.tes

9TTP;9TTP

Web

/H0

Web

/H0

*ooglecache

pages

*ooglecache

pages

Embedded3Fs

Embedded3Fs

alwarehost.ng

s.tes

alwarehost.ng

s.tes

!ndustrys most comprehens."e 3F database44m.ll.on+ 3Fs .n =/+ categor.es

Fegular Web categoryupdates

)yberoam ecur.ty )enter


31/53


anage product.".ty by controll.ng access to unwanted s.tes

nappl.ance web category database

+aster access

/&r)ing pattern privacy

)ontrol -ata eakage


32/53


Best o2 Breed Bandw.dth anagement ; Io

$andwidth poli#ies tied with 'ser'ser'ser/'sers group

'ser/'sers group

Firewall+ule

Firewall+ule

6ebCategory

6ebCategory

"ppli#ation

"ppli#ation


33/53


)reate a bandw.dth pol.cy on a comb.nat.on o2

ser or ser 'ro&p ;Fepartment

Application or Application Category

8eb category

Allos great )le,ibility and real L2-L visibility and control

Bandw.dth shar.ng w.th pr.or.ty

chedulebased bandw.dth allocat.on

Best o2 Breed Bandw.dth anagement ; Io

Burstable bandw.dth6 /hare the &n&tili(ed bandidth

)omm.tted bandw.dth6 Allocate dedicated bandidth

C=E %anager =RP /ystem

@ mbps 2 mbps mbps

%anager

2mbps

=mployee 2

2mbps

=mployee 1

2mbps

=mployee 2

1mbps=mployee 1

1mbps

%ar*eting

'ro&p

?mbps

8hen

&ser is notconnected


34/53


35/53


ayer = Pol.cybased Fout.ng

- Ro&tes tra))ic based on ource !P addresses, Protocols 8 3sers

- Ass&res :o/ )or *ey &sers and applications

Bus.ness )ont.nu.ty ?eatures


36/53


9.gh per2ormance, .ntegrated secur.ty o"er W6

- /ec&res ireless netor*s to the e,tent o) ired netor*s

?aster per2ormance, broader co"erage w.th 1


37/53


Pre"ent the r.sk o2 !T adm.n.strator 2rom m.sus.ng pr.".lege o2track.ng user act.".t.es

/ people: uthor.7er and dm.n.strator

- A&thori(er consent re7&ired )or the Administrator to vie &ser-speci)ic activities

a2eguard user pr."acy ( 4Eye uthent.cat.on


38/53


6eeded 2or hotspots, a.rports, hotels, corporate o22.ces

-e2ault group can be created 2or guest users

end.ng !nternet access credent.als us.ng 2or guest users

#Te


39/53


3rgani7ations cannot aGord to compromise on any o1 t$eseE

T$e rig$t S


40/53


Web

upport

)hatupport

Ema.lupport

Phoneupport

)ustomer upport ystem

6 "pplian#e +egistrationand 'pgrade

6 Subs#ribe se#urityfeatures

6 Create support ti#%ets6 +e;uest +M"

6 Support a-ailable a#ross alltime 99990

Jnowledgebase

P t t t


41/53


Webupport

)hatupport

Ema.lupport

Partner upport ystem

6 Ordering * n-entorymanagement6 Sales * Mar%eting tools *

resour#es6 Presales Support6 Tra#%

"pplian#e/Subs#ription

Jnowledgebase

+egion spe#i?# dedi#ated

Te#hni#al "##ount Managers.T"M0


42/53

) b ) t l ) l #)))'


43/53


-uba.9ead 22.ce

6ew KorkBranch 22.ce

umba.Branch 22.ce

BostonBranch 22.ce

Cyberoam

T%

Cyberoam

T%

Cyberoam

T%

Cyberoam

T%

)yberoam )entral )onsole #)))'

))) .s 2or central.7ed, .ntegrated management andmon.tor.ng o2 )yberoam 3T de".ces

- E))ers complete control over distrib&ted netor*s )rom

head o))ice .E.B or /ec&rity Eperations Center /.E.C.B

o) %//Ps

"a.lable as

- ardare CCC Appliances$ 9irt&al CCC Appliances

)yberoam )entral )onsole #)))'

) b .G. . d F t.


44/53


er"ers

?.rewalls

!-P ; !P

w.tchesFouters

3T

ppl.cat.ons

-esktop systems

ogs 8 E"ents

!dent.ty

ogg.ng Feport.ng

)ompl.anceanagement

?orens.cnalys.s

oganagement

ecur.tyanagement

)yberoam .G.ew ( ogg.ng and Feport.ng

b.l.ty to log and reportact.".t.es 2rom "ar.ous

de".ces;"endors "a.lable as Epen /o&rce so)tare Appliance

)yberoam .G.ews ogg.ng 8 Feport.ng ?ac.l.tates ecur.ty, )ompl.ance, ?orens.cs

))) 8 .G. d t


45/53


))) 8 .G.ew product range

CCC applian#es iView )ogging * +eportin

C+!iV'>99

C+!iV'899

C+!iV'>7

Hardware CCC applian#es

CCC89991 CCC7991 CCC>991CCC8991

CCC791 CCC87

Virtual CCC applian#es

For VMware Server:

CCC VMS >991 CCC VMS 8991 CCC VMS 791CCC VMS 87

For VMware Workstation:

CCC VM6 >991 CCC VM6 8991 CCC VM6 791CCC VM6 87

Tra.n.ng 8 )ert.2.cat.on


46/53


eveloping competencies wit$


47/53


/0%/%agic :&adrant )or ni)ied

Threat %anagement

/0%0%agic :&adrant )or ni)ied

Threat %anagement

/00L%agic :&adrant )or /%

Documents

ALOZIE CHARLES CYBEROAM FIREWALL WRITEUP