Next Generation Virtual security services

1
Next Generation Virtual security services
????? ??????? arazumov_at_checkpoint.com Check Point
Software Technologies ??????????? ?? ????????????
2
???????? ???????????
2
3
??????? Check Point
93
94
95
96
97
98
99
00
01
02
03
04
05
06
07
Application Intelligence
Establishment
VPN-1
VPN-1 Power,VPN-1 UTM
FireWall-1 1.0,Stateful Inspection
UTM-1
IPS-1
4
??????? ?????

• ??????? ????? firewall/VPN ? ?????? ??????
• ????? 100,000 ?????????? ????????
• ????? 60 ????????? ??????????
• 100 Fortune 100

?????

• 100 ????? ?? ????????????
• gt1,000 ????????? ?? ????????????
• ?????? ????? ? ??????

100 ????????????

• 1,900 ???????????
• 71 ??????, 28 ?????
• 3,000 ?????????, 88 ?????
• HQ ? ??????? ? ???

????????????
Frost Sullivan
5
?????? ?????????
6
FireWall-1 ???????? De Facto ??? ??????
?????????
MS Exchange
eDonkey
GoToMyPC
Cisco VoIP
RealPlayer
Windows RPC
??????????? ????????????, ??????? ????? ????????
Apache
Entrust
DNS
MSN Messenger
Telnet
Windows RPC
Yahoo Messenger
FTP
AIM
Gnutella
PCAnywhere
Kazaa
Sendmail
GTP
IIS
Gopher
Oracle
SQL Server
7
Check Point Next Generation with Application
Intelligence
????????????? ?? ?????????? ??????????? ??? ??
???????? ?????? ? HTTP ??????????
???????? ?? ???????????? ??????????
??????? ?? ????????????? ?????????? ??????????
????? HTTP ????????? ??? ????? ??????????
???????? ?? ????????? ????????????? ??????????
???????? ?? ??????? ?????? ??? ???????? Cross
Site Scripting ??? ?????????? ????????? ????
???????????? ????????????? ??????
?? ??????????? ?? ??????????? ???????? FTP
???????
???????? ??? ???????? ??????????
8
SmartDefense ???????????? ??????
9
Pro-active Protection (ex 2007)
10
??????????????? Content Inspection

• ???????????????? ?????????? ??????????? ? URL
  ???????????
• ???????????? ???????????? ?????, ?????? ? ??.
• ???????????? ? ???????? ????????? Web
• ?????? ?? ??????? ? ?????? ??????? ??????
• ????? ??????????? ????? SmartDefense Services
• ???????? ? UTM-1, VPN-1 UTM, VPN-1 UTM Power ?
  VPN-1 UTM Edge

11
????????? ?????? Total Security
The best Firewall in the market
standard
VoIP
SQL
Instant Msg
E-mail
P2P
HTTP
FTP
Web Filtering
subscription
Anti spyware
subscription
Messaging security
subscription
NEW!
End of Q1 2007
12
VPN-1 The Next Generation in Network Security
13
Check Point VSX
14
Virtual Routing and Firewalling

• ??????????? ????? VPN-1 VSX NGX ??????? ??
  ?????????? ??????????? ?????????

Virtual System (VS)
VPN-1 Firewall Module
Virtual System In Bridge Mode
VPN-1 Firewall Module In Bridge Mode
Virtual Router (VR)
IP Router
Switch
Virtual Switch (V-SW)
Virtual Cable (warp link)
Network Cable
15
???????????? ?????????????

• ????????? ?????????? ???????????? ?????????????
• Unicast Routing RIPv1/2, OSPFv2 BGP-4
• Multicast Routing IGMPv2, PIM-DM PIM-SM
• ?????? ?????????? ???????????? ??????????????
• Virtual Device to Virtual Device
• Virtual Device to external router

OSPF
802.1q
BGP-4
OSPF
Virtual Switch
IGMPv2
OSPF
Marketing
802.1q
PIM-SM
Virtual Router
16
????????????? ?????????? VLAN
Finance Networks
Main Building Hybrid networks
Routed Core
Vlan IP interface Inter Vlan connectivity
RD Networks
802.1q connectivity matrix
802.1q Trunks
Distribution Switches
Floor L-2 Access Switches
17
?????? ??????????? ?????

• VSX ? ???

• ????????? VLAN
• ?????? VS ???????? ???? ????? ?????????? ?
  ????????
• ????????????? ????????? SmartDefense ??? ??????
  VS (??????? ???????/???????)

18
?????? ??????????? ?????

• ?????????? ? MPLS

• ????????? ?????????? ? MPLS
• ?????????? MPLS ??????????? ????? MPLS ? VLAN
  tags
• ?????? ???????? VS ? ??????????? ?? ????? MPLS

19
Many Into One CHKP Consolidation
20
Many Into One CHKP Consolidation
21
Many Into One CHKP Consolidation
22
?????????? ? Provider-1
VSX Gateway
Customer Management Add-On (Main CMA)
Customer A
Customer B
Customer C
23
Check Point PURE Security
24
puresecurity

totalsecurity from Check Point
25
???????!
????? ??????? arazumov_at_checkpoint.com Check Point
Software Technologies ??????????? ?? ????????????
Crossbeam Systems, Inc. 80 Central
Street Boxborough, Massachusetts 01719 Via Tel
1 978.318.7500 Via Fax [phone] Via web
http//www.crossbeamsystems.com Via email
info_at_crossbeamsystems.com