Comment sécuriser votre entreprise dans un environnement de … - IBC Dialog 2018.… · performante afin sécuriser et de simplifier l’infrastructure IT. Fortinet’s vision is

© Copyright Fortinet Inc. All rights reserved.

Comment sécuriser votre entreprise dans un environnement de menaces en constanteévolution ?5 juin 2018

2

Fortinet: Global Network Security LeaderHighlights: 2000 - present

5,000+

EMPLOYES DANS LE MONDE

100+OFFICESDE PART LE MONDE

467PATENTS291 INPROCESS

ISSUED

3.6mAPPLIANCESDE SECURITEVENDUES

340KCLIENTS

$1.8bREVENUE

PLUS DE

$1.5bnEN CASH

19%YEAR ON YEARGROWTH

2000PAR KEN XIE

CRÉÉ EN

HEADQUARTERED ASUNNYVALECALIFORNIA

3

Fortinet en France

Fortinet enFrancePARIS & SOPHIA-ANTIPOLIS

PARIS LA DEFENSEBUREAUXCOMMERCIAUX & AVANT-VENTE

Siège internationalSUPPORT, RMA, R&D, TIGER TEAM

CHIFFRE D’AFFAIRE 2017 $ 77 M

#1 en CA #1 en nombre d’Appliances

4

Fortinet : une histoire faite d’innovations

Présentateur

Commentaires de présentation

SCRIPT: A Timeline of constant platform innovation illustrates rapid growth in the business as well as market awareness and praise. From Fortinet's founding in 2000 to launching global sales in 2002, the industry quickly took notice and named Fortinet as an innovator and leader in the UTM and carrier class markets. The company’s public offering in 2009 was widely considered one of the most successful of the year, and unit sales quickly totaled 1M by 2012, and then doubled to 2M units shipped by 2015. With respect to hardware, Fortinet continues to deliver a constant stream of next generation security processors and high speed interfaces that push high performance and value advantages to new levels. Even in its short 16-year history, the Company is currently delivering its 6th generation Network processor, 9th generation Content Processor, and 3rd generation System on a Chip. Each generation propels Fortinet performance a quantum leap beyond the previous generation of chips and further extends the performance advantage in the market Fortinet has also illustrated a history of innovation with respect to software development. New custom OS versions incorporate advanced, integrated features, technologies and control into the platform, creating new solution sets and market offerings. Thus, Fortinet has rapidly expanded its product portfolio, which has evolved Fortinet into a true client to cloud security company, and enabled Fortinet to gain share in a growing cyber security market.

5

Fortinet’s mission is to deliver the most innovative, highest performance network security fabric to secure and simplify your IT infrastructure. La mission de Fortinet est de délivrer la Security Fabric la plus innovante et la plus

performante afin sécuriser et de simplifier l’infrastructure IT.

Fortinet’s vision is a Security Fabric broad enough to cover the entire business, powerful enough to enable all security functions and automated enough for any organization. La vision de Fortinet est une Security Fabric suffisamment large pour couvrir tout type de

client est assez performante pour mettre en oeuvre toute fonctionnalité de sécurité pour toute organization.

6

La croissance de votre

activité est votre priorité

n° 1

Vous reconnaissez-vous ?

Partout et sur n’importe quel

dispositif (BYOD inclus)

Vos ressources

informatiques internes sont

limitées

Vous avez besoin d’un

accès continu à votre

application professionnelle

Vous avez besoin d’une

solution efficace, simple,

fiable et économique

Êtes-vous une cible potentielle

des pirates informatiques ?

Présentateur


So, our primary target is the SMB segment of the market where you typically interact with business leaders, rather than IT experts, who: Are primarily focused on the health and growth of their business Have limited resource (people and money) available for IT and security Need to ensure their employees have access to the business systems and resources to do their jobs…any time, anywhere Are concerned about security of there business yet must have something simple, reliable and effective

7

Votre réseau informatique ressemble-t-il à cela…

Security

BYOD?

Est-il simple à maintenir et à administrer ?

Mises à jour manquantesConnexions non contrôlées

Présentateur


Typically, these SMB customers have deployed a UTM (3 in 4 already have one) along with additional wired and sometimes wireless networking protecting corporate PCs and servers. However, also typically, these customers have not yet solved the challenge of securing personal devices used by employees or work outside the office (at home or otherwise).

8

Avez-vous du temps à consacrer à l’IT ?

Source: Osterman Research, Inc.

Leading Priorities for Business Leaders for 2017 and 2018Percentage of respondents indicating a top/critical priority

Grow top line revenue

Improve bottom line profitability

Reduce costs

Upgrade IT

Improve security of the business

Hire more/better staff

46%41%

51%

37%36%

42%

24%20%

16%

17%14%

13%

15%18%18%

8%10%

17%

USA EMEA APAC

Présentateur


Unfortunately (but understandably, most SMB leaders are focused on the business. As you can see, top priorities around the world are related to top and bottom line business success, and far ahead of necessary enabling functions like security and information technology.

9

Y a-t-il un risque pour votre entreprise ?

62%Fuites de données dans le secteurdes PME*

* Verizon

databreaches

databreaches

databreaches

Présentateur


And the reality is that data breaches do happen to smaller businesses. According to Verizon’s 2016 data breach investigations report 62% of confirmed breaches actually impacting small businesses rather than larger ones. Further, based on data from more than 1600 threat assessments conducted by Fortinet in 2016, the average SMB is compromised by 4 active pieces of malware. So yes, small businesses are at risk.

10

Le saviez-vous ?

88%des attaques de VoIP se produisent en dehors des heures de travail

30%DES DESTINATAIRES ouvrent les messages de phishing et 11 % cliquent sur les pièces jointesVerizon 2015 Data Breach Investigations Report

des failles sont causées par la vulnérabilité des applications

38%

Présentateur


Did you know that 30% of recipients open phishing messages? Social engineering by cybercriminals is more and more advanced, often tricking even security-aware employees. Did you know that 38% of breaches bypassed the employees with access and went straight at web infrastructure vulnerabilities as a way in? Did you know that even IP-based voice systems are vulnerable and generally attacked in the off-hours when no one is in the office?

11

État des lieux

Oui, vous serez la cible d’attaques même si votre structure est petite

En fait, les PME sont davantage la cible d’attaques que les grandes entreprises» Budget/expertise réduits» Plus vulnérables» Passerelles pour cibler les grandes entreprises

L’UTM ne suffit plus Une politique de sécurité unifiée est indispensable

pour les technologies filaires et sans fil La sécurité doit être complète, de bout en bout et

sans compromis» Elle ne doit pas être pensée après-coup

Présentateur


So, to recap, yes you will be (and on generally have been) attacked even though you are small. Security must be integral to your business success, not an afterthought. And while UTM solutions are a great fit for smaller businesses, they are not all the same. Fortinet has consistently offered a unique combination of strong protection, broad and easy to manage portfolio, and high performance for the price. That’s why we continue to be the far and away #1 market leader in network security appliances shipped every quarter.

12

Quelles sont les menaces ?1. Malware - Logiciel Malveillant

2. Virus informatique (caché dans un logiciel légitime)

3. Ver informatique (répand sur le réseau)

4. Cheval de Troie (logiciel espion)

5. Spam (qui peut implanté un ver)

6. Vol

7. Phishing – hameçonnage

8. Accès non autorisé à l’information

9. Attaque de déni de service

Ces menaces utilisent les vulnérabilités des OS, des protocoles ou des applications

13

Quelles sont les menaces ?Les menaces connues :

Celles-ci ont déjà été reconnues, répertoriées, elles sont identifiées et identifiables grâce à une signature. Elles peuvent donc être stoppées facilement et immédiatement par tout type d’équipement de sécurité.

Menaces inconnues :

Celles-ci n’ont encore jamais été identifiées et donc non identifiables.Elles peuvent être détectables via le Sandboxing qui permet d’exécuter le logiciel, fichier ou URL suspect dans un environnement cloisonné afin d’étudier sont comportement et l’identifier comme menace ou non pour le système d’information.

14

Quelles sont les vecteurs d’attaques ?

1. La navigation webL’installation de freewareL’utilisation d’applicationsLe transfert de fichiers

2. Les flux de messagerie : les emails90% des ransomware

3. Sécuriser les postes clients et les objets connectésLes transferts de fichiers sur les postes clients

15

Quelles sont les vecteurs d’attaques ?

1. La navigation webL’installation de freewareL’utilisation d’applicationsLe transfert de fichiers

2. Les flux de messagerie : les emails90% des ransomware

3. Sécuriser les postes clients et les objets connectésLes transferts de fichiers sur les postes clients

Sécuriser l’accès au réseauSécuriser la navigation Internet

Sécuriser les flux de messagerie

Sécuriser les End-points

16

Besoin d’une sécurité sachant s’adapter au contexte

APPORTER UNEREPONSE RAPIDE

INTEGRER LA DETECTION DES MENACES INCONNUES

SE PROTEGER DES MENACES CONNUES

IDENTIFIER LA SURFACE ET LES VECTEURS D’ATTAQUES

EVALUATIONAUTOMATIQUE DE

L’INDICE DE CONFIANCE

NOC

SOC


KEEPCALM

ANDDEPLOY

18

2018FORTINETSECURITYFABRIC

BROAD

INTEGRATED

AUTOMATED

Présentateur


The Security Fabric is based on almost 20 years of this innovation AND ORGANICALLY BUILT FROM THE GROUND UP BROAD - PROVIDES VISIBILITY AND PROTECTION ACROSS THE ENTIRE CONNECTED DIGITAL ATTACK SURFACE to protect your data, From Access like Wifi/LTE we are using now, to end point/mobile, the network, application, cloud and IoT. THE FABRIC EXTENDS TO OUR BROAD ECOSYSTEM OF 42 INDUSTRY PARTNERS INCLUDING IBM, INTEL, MICROSOFT, AWS AND GOOGLE INTEGRATED – Multiple technologies act as an integrated system to identify, isolate, respond and anticipate known and unknown threats AUTOMATED Once integrated, the security fabric can compare and gather threat intelligence to not only see new threats, but also begin to anticipate the intent of the network as well as the threats This allows the fabric to shorten the time to detection and reponse to seconds SHORTLY, JOHN WILL TALK ABOUT THE LAUNCH OF THE 6.0 AND HOW IT IS DELIVERING ON INTENT-BASED SECURITY 6.0 So the fabric is enhanced for 2018; obviously the center of the fabric is fortios, our network operating system and we have really made sure that we cover the entire digital attack surface through enhancements in endpoint, access, ap, switching, mail, and cloud, apis and our partners. So now we have the complete coverage of the attack surface both in terms of visibility and protection. Detailed integration for fortiguard and fortisandbox so every one of the attack vectors now get access to advanced threat detection and threat protection, sandboxing, indicators of compromise. We are now working on implementing Artificial intelligence and machine learning as part of the detection capabilities and automation. You can set automation in place on triggers and events to make sure you can quarantine , you can provide every part of the fabric the most upto date information.


Fortinet Unified Secure AccessUne approche pragmatique : complète, flexible et évolutive


1 – Sécuriser la navigation web et l’utilisation des ApplicationsLe FortiGate

21

FortiGate : Security Services and Technologies

App Control Antivirus Anti-spam

IPS Web App Database

WebFiltering

VulnerabilityManagement

IPReputation

MobileSecurity

NEW

Firewall

VPN

Application Control

IPS

Web Filtering

Anti-malware

WAN Acceleration

Data Leakage Protection

Wi-Fi Controller

Advanced Threat Protection

Présentateur


SCRIPSCRIPT: Fortinet also delivers extensive knowledge of the threat landscape combined with the ability to respond quickly at multiple levels. Hundreds of researchers at FortiGuard Labs scour the cyber landscape every day to discover emerging threats and develop effective countermeasures to protect the nearly 300,000 Fortinet customers around the world. Fortinet solutions, including the FortiGate firewall platform, are powered by security services developed by FortiGuard Labs. FortiGuard security services are available as subscriptions to software enabled security modules for use in the FortiGate next generation firewall and IPS platforms as well as with a number of other Fortinet products such as the FortiMail secure email gateway, FortiClient endpoint protection, FortiSandbox, FortiCache, and FortiWeb. Customers have the flexibility to choose individual services, or gain access to all available services with the innovative Enterprise Bundle.

22

FortiGate: Une Architecture Intégrée

Purpose-Built Hardware

Specialized OS

Fully Integrated Security & Networking Technologies

Hardened Platform

High Performance

Real-Time Protection FortiGuard™ Updates

Support and Services FortiCare™ FortiGuard Labs

Firewall Traffic ShapingVPN

SSL Insp

DLP WAN Opt**

Controller WIFI Load BalancingVoIP HA*

AV IPS AntispamWeb Filter Application Ctrl Sandbox cloud

Gratuit Sous licence = €

* Les parefeux en HA doivent posséder les mêmes abonnements FortiGuard pour un bon fonctionnement du cluster.** Sur les équipements embarquant un disque dur uniquement

23

FortiSandbox Cloud (Virus Outbreak Protection* service and FortiGuard CDR*) ✔

FortiGuard Anti-Spam ✔ ✔

FortiGuard Web Filtering ✔ ✔

FortiGuard Antivirus + Botnet + Mobile AV Service ✔ ✔ ✔

FortiGuard IPS Service ✔ ✔ ✔

FortiCare + FortiGuard App Control Service ✔ ✔ ✔

Bundles Threat Protection UTM Enterprise

Protection

* Available when running FortiOS 6.0 and above

Industrial Security Service Security Audit Service

Services optionnels:

FortiCASB SaaS Connector ServiceFortiCloud Management, Analysis and 1 Year Log

Retention

+

FortiGate: de nouveaux bundles

24

FortiGate : une gamme de firewall très complète

Personality, Performance

and Scalability

CCFW

DCFW

ISFW

CFW/VMFW

NGFW / NGIPS

DEFW

UTM

Software & Services

Product Range Entry Level Mid Range High End Virtual

Appliances

FortiGuardSecurity Services

FortiOSOperating System

FortiCareSupport Services

100-500 Series

30-50 Series

600-900 Series

1000-2000 Series

3000 Series

5000 Series

VM Series

SoCCPU

CP

MultiCoreCPUNP

MultiCoreCPUNP CP

MultiCoreCPU

H/W Dependent1 Gbps 10 Gbps 10 Gbps - 50 Gbps

Chassis System

50 Gbps - 1 Tbps

60-90 Series

7000 Series


2 – Eviter la propagation au sein du réseauLes FortiSwitch et les FortiAP

26

Secure Unified Access Ethernet

FortiSwitch& FortiAP

Sécurité intégréeLes FortiSwitch & FortiAP au sein de la Fortinet Security Fabric étendent la sécuritéjusqu’à l’accès au réseau.Management SimplifiéLe FortiGate deviant l’unique console de management de la sécurité de la gestion des accès filaires et sans-filsEvolutifCapable d’apporter la connectivité du poste client au datacenter et de faire face à l’évolution du traffic.

Le FortiSwitch devient l’extention logique du FortiGate grace au FortiLink

Présentateur


Gartner Says 8.4 Billion Connected "Thin

27

FortiSwitch Access Switch FamilyEntry

100 Series

Entry Level Switch

Desktop to wiring closet.

8 to 24 gigabit Ethernet ports, POE Capable

(2) Gigabit Ethernet SFP uplink ports

Mid Range200 Series

Mid level Switch

Typical wiring closet switch

24 to 48 gigabit Ethernet ports POE+ Capable

(4) Gigabit Ethernet SFP uplink ports

Premium400 Series

Enterprise Switch

Larger wiring closet or high throughput requirements.


Up to (4) 10 Gigabit Ethernet SFP uplinks

Aggregation500 Series

Aggregation Switch


Up to (4) 10 Gigabit Ethernet AND (2) 40 Gigabit Ethernet SFP uplinks

Présentateur


FortiSwitch offers a broad offering of switches that can scale from the smallest retail setting to the data center. There are four families of switches: the 100 series, 200 series, 400 series and the 500 series for Aggregation Uplink capacity is the most distinguishable difference between each series starting with the 100 series with two 1 gig uplinks to the 500 series with two 40 gig uplinks. As a rule of thumb choosing the right Secure Access switch model is determined by the network traffic demands. In many smaller or remote sites a 100 Series with 2GbE uplinks into the network core is more than sufficient. In larger networks with higher ethernet traffic throughput requirements an enterprise may require the 4 X 10GbE capabilities of the 400 Series or even the 2 X 40GbE of the 500 Series Secure access Switch. Each series offers POE, non POE, and F-POE or POE+ models.

28

FortiAP Family

4x4:4

Dua

l Rad

ioD

ual B

and 3x3:3

2x2:2

Sing

le R

adio

1x1:1

Remote Outdoor Indoor

FAP-221/223C

FAP-320C

FAP-321C

FAP-221B

FAP-24D

802.11ac

802.11ac

FAP-221/223E802.11ac W2

FAP-421/423E802.11ac W2

FAP-112D

FAP-224D

FAP-222C802.11ac

FAP-11CFAP-14C

802.11ac

FAP-21DFAP-25DFAP-28C


3 – Sécuriser les postes clientFortiClient – Fabric Agent

30

Intégration au réseau et sécurité du Endpoint

FortiClientEndpoint Security

S’intègre à la sécuité du réseau grace à la Security Fabric permet d’obtenir une visibilitéde l’état du poste client et d’appliquer des règl ou une mise en

Protection Automatique contre les menaces connues et les menaces inconnues

Très bon Taux de capture basé sur des tests d’organisms indépendants

Endpoint security integrated with Security Fabric to automatically respond to threats including ransomware that can result in downtime, theft of IP or PII, impacting

human safety, and more, across various endpoint devices.

FortiClient

Supports:

Présentateur


What sets FortiClient apart is that it #1 integrates with other components in the security architecture such as perimeter security to provide a centralized console for network to endpoint visibility and enforcement of endpoint policies including auto-patching of vulnerable endpoints #2 additionally it simplifies endpoint threat management by automatically protecting against known threats through the updates from FGL and unknown threats through it’s integration with FortiSandbox #3 As Fortinet is committed to independent testing, FortiClient goes through rigorous testing by NSS and achieved a recommended rating in the NSS AEP 2017 test, and is also certified by AV Comparatives and AV Bulletin.

31

Fabric AgentFortiClient Telemetry SKU

ENDPOINT VISIBILITY Vulnerability detection OS, FortiClient, AV version,

Malware detection, User ID, IP, MAC addressConfirm

FortiClientFortiGate

Register

Telemetry

Severity & Details Alert

ENDPOINT CONTROL Endpoint Compliance Automated patching Host Quarantine

APPLY

Q1 2018 Products & Pricing Update

32

FortiClient - EMS

» Gestion unifiée des terminaux» Auto-Discover des nouveaux clients» Déploiement du Forticlient» Gestion à distance» Monitoring temps réel» Subnet & Gateway Mac Address based on-net detection» Télé déploiement des certificats sur les clients» NAC Enforcement avec le FortiGate

33

FortiClient Software/App

• Windows

• macOS

• iOS

• Android

• ChromeOS

• Linux

FortiClient and related-Product Line

FortiGate/Fabric

• Endpoint visibility and control

• FortiGate Appliances

• FortiGate VMs

• Scales up to 100K endpoints

Enterprise Management Server

• FortiClient management

• Software-based

• Windows Server

• Scales up to 100K endpoints

Présentateur


Product line


Fortinet Unified Secure AccessFortiGate – FortiSwitch – FortiAP - FortiClient

35

Fortinet Unified Secure Access couvre tous vos besoins

FortiGateUTM leader du marché

• Plug-and-Play• POE/WiFi

FortiAPÉviter les coûts supplémentaires de contrôle

• 802.11ac• à 1,3 Gbit/s• Priorisation des applications

FortiSwitchGestion centralisée

• Couche 2/3• 1 - 10 Gbit/s• 8, 24, 32, 48, 64• POE/POE+

FortiClientAccès à distance sécurisé

• Antivirus géré de haut niveau• Filtrage des URL• Win, Mac, iOS et Android

Sécurité de bout en bout

Authentification et gestion communes (via FortiGate)

36

La méthode Fortinet

Sécurité intégrée pour chaque nouvelle connexion réseau

Services gérés par IBC Dialog

Connected UTMUTM I Wifi I Switch I Client

FortiGateFortiSwitchFortiSwitchFortiAP

FortiClient

FortiCloud

Présentateur


Different from the traditional UTM from many other vendors, our Connected UTM can cover much more than the standard UTM appliance. In fact the same consolidated security and ease of use expected of a UTM has been extended by Fortinet to now encompass security at the endpoint as well as network plus dedicated in addition to built-in wired and wireless networking, all easily managed by an expert partner. This way you get the security and connectivity you need, in or out of the office, to keep your business secure and growing.

37

FortiGate : Management centralisé de laSecurity Fabric


4 – Sécuriser les flux de messagerieFortiMail & FortiSandbox Cloud

39

Appliance de sécurisation de la messagerie• Filtrage bidirectionnel avancé permettant le blocage

des spams, virus, phishing, vers et spyware• Quarantaine par utilisateur • Quarantaine adminitrateur

DLP Data leak Prevention

Plusieurs modes de déploiements• Transparent, Gateway, et Serveur permettent de

s’adapter à l’architecture du client

Chiffrement• Sécurise les échanges mail sans nécessiter de client

spécifique

Archivage mail• Archivage embarqué

Les fonctionnalités du FortiMail

MailServers

FortiMail

Solution de sécurité des flux de messagerieAnti Spam et Anti-Virus avancée, quarantaine et archivage.

Content Disarm & Reconstruction

FortiSandbox CloudVirus Outbreak Service

40

Les différents types de déploiement

Wide range of appliances Virtual Appliances Public Cloud FortiMail CloudIaaS

Présentateur


FortiMail has the widest range of deployment options with desktop appliances to scale from the smallest office to large appliances capable of handling the email requirements of national ISPs and carriers. FortiMail also comes in virtual appliance form for deployment in private cloud environments and also with Azure and AWS support for deployment in Public clouds. More recently Fortinet have introduced out own FortiMail Cloud service where there is no need for the customer to own or maintain any hardware on premise and Fortinet handle the running of the appliance from our own datacenters.


5 – Management via le CloudFortiCloud

42

FortiCloudSaaS Management

• Data center en Europe (Allemagne)• Management des FortiGate, FortiSwitchet FortiAP• Dashboard et FortiView• Rétention des logs pendant un an• Rapports• FortiSandox

FortiCloud manage les FortiGate les FortiSwitch et les FortiAP

Présentateur


That management can be onsite or more commonly in the cloud. And even when security administration is handled by a partner, customers are able to utilize: Intuitive dashboards for a quick sense of status at any time Reports for periodic review and to demonstrate compliance Extra security services from the cloud including detection of the most advanced threats More robust management and control is available for power users and your trusted partners


5 – Protéger vos sites Web et votre téléphonieFortiWeb & FortiVoice

44

Sécurisez et consolidez vos communications

FortiWebProtection intégrale des sites Web

• Applications Internet sécurisées à 20 Gbit/s

• Conformité aux normes PCI(5.5, 5.6)

• Authentification unique• Auto-apprentissage

FortiVoiceProtégez vos flux de voix

• PBX• Fonctionnalités professionnelles• Fraude liée aux numéros surtaxés• Grâce à FortiGate : prévention contre

le TDOS, le SPIT et le fuzzing de VoIP

Cadre commun de politique et de gestion

45

Secure CommunicationsEmail I Web I Voice

Managed Services by your preferred partner

Secure Unified AccessUTM I Wifi I Switch I Client

FortiGateFortiSwitchFortiSwitchFortiAP

FortiClient FortiVoice

FortiMail

FortiWeb

FortiCloud

Sécurisez et consolidez vos communications

Présentateur


The Fortinet Connected UTM solution is easily extended with dedicated, enterprise components- FortiMail Secure Email Gateway, FortiWeb Web Application Firewall and FortiVoice IP telephony systems as part of our Secure Communications offering.

46

Trois raisons de choisir Fortinet

Une protection complète pour l’ensemble du SI1 seul constructeur = 1 seul environement

Meilleur rapportPrix / Performances / FonctionnalitésLeader depuis prèsde 10 ans

La Security Fabric intègre le réseau et la sécuritéUne seule console de management

Large

Performante

Automatisée

Présentateur


We started at the beginning by sharing Fortinet’s vision for security that is broad, powerful and automated. With Fortinet for Connected UTM you can see that small and medium businesses can get: top-rated protection for their entire business from one vendor At industry best performance for price which has helped make us the #1 network security vendor, based on units shipped, for the last 10 years With additional integrated networking and security managed from a single pane of glass.

Documents

Comment sécuriser votre entreprise dans un environnement de … - IBC Dialog 2018.… · performante afin sécuriser et de simplifier l’infrastructure IT. Fortinet’s vision is