WatchGuard Gateway AntiVirus for Email Partner Training

1
WatchGuardGateway AntiVirusfor E-mailPartner
Training
11 Nov. 2004, 8am PST
Allison Armstrong, Product Manager Jeanette
Fuller, Channel Marketing Manager
2
Agenda

• Gateway AntiVirus Market Need
• WatchGuard Gateway AntiVirus for E-Mail
• Proactive vs. Reactive protection
• Competitive GAV Overview

3
Top SME Security Concerns
88 of respondents to the ICSA Computer Virus
Prevalence Survey 2003 reported infection via
e-mail
4
We Listened to Our Customers
Solution Integrated Security withGateway
AntiVirus for E-mail Service
Solution Deep Application Inspection
forProactive, Zero-Day Protection
Solution Affordable withIntuitive, Integrated
Management
5
Firebox

• Firebox X Add-on Security Service
• Delivers comprehensive e-mail protection at the
  gateway
• Integrated into Firebox X as an additional layer
  of security

• WebBlocker

• SpamScreen

• Gateway AntiVirus for E-mail

6
How it works

• Install
• Configure
• Auto-update

7
Open Source Solution is the right solution for
SMEs
may be available in Fireware 8.1 in
8
Reactive vs Proactive Protection
25K 20K 15K 10K 5K 2K 1K

Signatures
9
Reactive vs Proactive Protection
25K 20K 15K 10K 5K 2K 1K

Signatures
10
Intelligent Layered Security (ILS)
Lower cost, higher performance, better protection
11
ILS Capabilities by Layer
1. External Services Vulnerability
Assessment, Desktop Antivirus
2. Data Integrity DoS/DDoS, Malformed
Packets, IP Checksums
3. VPN IPSec, PPTP connectivity
4. Stateful Firewall Packet Filtering,
NAT, Policies
5. Deep Application Inspection Proactive
Day-Zero Protection, PAD, Packet Reassembly
Blocks 80-90 of all viruses
6. Content Security Gateway AntiVirus
for Email, Web Filtering, Spam Blocking
Under development for future availability
12
Passes all traffic through all layersReactive
protection dependent solely on signaturesLow
Protection, Low Performance
13
Drops threats at each layerZero-Day Protection
through Deep Application InspectionRobust
Signature-based e-mail protectoinBetter
Protection, Better Performance
14
Zero-Day Protection through Deep Application
Inspection

• Better security, better performance
• Blocks threats before a signature is developed
• Cooperatively drops threats at each layer
• Lowers the GAV scanning required to remain secure
• Limits need for administrator intervention
• Deep Application Inspection and other ILS layers
  are ALWAYS ON
• Proactive prevention
• Communicates effectively and quickly
• Informative alerts and rich reports

15
Traditional Security Architecture
16
Firebox X Network Architecture
Threat Response System
Firebox X50
Firebox X15
17
Gateway AntiVirus for E-mailRemote office,
telecommuter and remote user protection
Threat Response System
Mgmt Station
Telecommuter
Remote Office
Small Business
X1000, Core Mid
X5
X15w
Mobile Users
Small Business
18
When to sell Gateway AntiVirus for E-mail
When customers require

• Robust solution for E-mail
• GAV integrated on a single appliance
• Efficient AV scanning for low performance
  degradation
• An affordable solution with zero-day protection
• Signature-based and Proactive AV protection for
  Zero day protection

19
Key Gateway AV for E-mail Features

• Protects incoming SMTP traffic
• Provides the most robust GAV signature database
  for an integrated appliance
• Over 22,000 signatures Wild and Zoo List
• Fast, continual updates WatchGuard Threat
  Response System
• Leverages Open-Source community
• User-configurable signature update frequency
  (automated)
• User-configurable virus handling delete/allow
  messages containing threats
• WSM Logging, monitoring, and reporting of
  antivirus activity and signature viability
• Scans compressed attachments
• Zip, RAR (2.0), Tar (POSIX), MS OLE2, MS Cabinet
  Files, MS CHM, Gzip,Bzip2, and MS SZDD
  compression formats

20
Gateway AntiVirus for E-mail Benefits

• Defends 1 entry point for viruses E-mail
  servers
• Delivers comprehensive continual protection for
  e-mail
• Easy-to-install, configure and manage
• Affordable Per-appliance pricing model
• Protects proactively and cooperatively Zero-day
  threat protection
• Deep Application Inspection scans and block
  threats without requiring signatures
• Minimal impact on system performance

21
Firebox X Add-on Security Services
Gateway AntiVirus for E-mail

• Customers
• Will require WFS 7.3 to install
• WFS 7.3 is available on LiveSecurity with an
  active subscription

• Customers
• Do not require an active LiveSecurity
  Subscription to upgrade
• Services are activated on LiveSecurity
• May require minimum OS/maintenance upgrade
• OS/maintenance upgrades require active
  LiveSecurity subscription

22
WFS 7.3 Features

• Support for Gateway AntiVirus for E-mail
• User Authentication support Windows Server
  2000/2003
• Windows XP SP2 Support
• Firebox X Edge WSM management support
• New Safenet MUVPN client XP SP2 support bug
  fixes
• User reported bug fixes
• Supports Firebox X and Firebox III

Firebox IIIs do not support Gateway AntiVirus
for E-Mail
Requires an active LiveSecurity Subscription to
upgrade
23
Gateway AntiVirus Availability

• Announcement
• 15 Nov. 2004
• Pre-order status for partners through
  distribution
• Availability
• 17 Dec. 2004
• Available before through select partners (talk to
  Regional VP)
• Requirements
• Firebox X500, X700, X1000, X2500 models
• WFS 7.3 (requires an active LS subscription)
• Trial
• 30-day available through resellers

24
Gateway AntiVirus for E-mail Pricing

• Competitively priced by appliance no additional
  per-user fees
• Initial subscription 1 year
• Renewals 25 off first year
• Does not require LiveSecurity subscription if
  running WFS 7.3
• License keys activated on LiveSecurity

25
Gateway AntiVirus for E-mail Intro

• Intro Bundle includes LiveSecurity and Gateway
  AntiVirus for E-mail
• 1 2 Year Bundles
• Does not require LiveSecurity subscription if
  customer is running WFS 7.3
• License keys activated on LiveSecurity
• Cannot be purchased for more than two years

26
Gateway AV for E-mail Comparison
Available in 8.1
27
Firebox X500/X700 vs. Competition
Red text denotes superior Firebox spec
28
Firebox X1000/X2500 vs. Competition
29
Firebox X vs. Fortinet Spec Comparison
Red text designates Firebox X superior
capabilities
30
Overcoming Objections

• But its only SMTP
• Overcoming the objection
• 88 of all viruses come through the gateway via
  e-mail
• More robust signature-based solution for e-mail
• Integrated Deep Application Inspection delivers
  Zero-Day protection forSMTP, FTP, HTTP and DNS
• Reactive proactive protection from E-mail based
  threats delivers better overall protection
• TrapHave you asked how (vendor) plans to
  protect against viruses, worms, trojans and
  variants they are unable to fit into their
  limited signature database?
• Probing QuestionHave you though about the
  importance of having Zero-day protection that
  stops unknown threats and variants before a
  signature is available?

31
Fortinet Weaknesses

• Reactive AV protection relies 100 on
  signatures
• Limited signature set approx 4,100 Wild List
  only
• Performance Impact Lowers performance OVER 75
• Engine scans every data packet against the
  signature database
• No intelligent integration of security
  capabilities to optimized performance
• No Zero-Day protection through Deep Application
  Inspection
• Lets viruses through all the time
• Future windows of vulnerability exist for each
  new viruses/variant

32
Overcoming Fortinet Objections

• ASIC-accelerated systems deliver better
  performance
• Reality
• ASICs have limited value in an integrated system
• All capabilities must be integrated on the ASIC
  to optimize performance
• Fortinet models degrade in all protocol
  performance by over 75 when GAV is turned on
• WatchGuard does delivers open-standard
  architecture with a superior integration of
  security capabilities into the Intelligent
  Layered Security architecture
• Trap
• Have you asked Fortinet how why their system
  drops in performance by over 75 when they turn
  on GAV?
• Probing Question
• Have you thought about the importance of an
  integrated appliance that delivers cooperative
  protection between the security layers for
  comprehensive Zero Day and signature-based
  protection?

33
SonicWALL GAV Weaknesses

• Deep Packet Inspection engine is signature-based
  IPS
• Limited GAV solution Bolted onto IPS engine
• Potential performance issues GAV/IPS must scan
  all traffic
• Limited signature set Reduces effectiveness of
  GAV
• No Zero-Day protection through Deep Application
  Inspection
• Future windows of vulnerability exist for each
  new viruses/variant

34
Partner Benefits

• Opens up new sales opportunities from new
  customers looking for Gateway protection for
  their SMTP mail servers
• Improves the competitive position by delivering
  another service on our current platform, not just
  on the next-generation platform
• Drives incremental revenue in 2004 and 2005
  expect approximate attach rate of 8 15 over
  the first 6 months after delivery.

35
WatchGuard delivers on our commitment to
offerGateway AntiVirus for E-mail

• Uniquely offers robust E-mail Protection
• Uniquely delivers Zero-day protection
  throughDeep Application Inspection
• No other vendor offers this comprehensive
  Zero-Day and signature-based protection

Gateway AntiVirus for E-mail makes Firebox X even
better!
36
THANK YOU

• For any assistance with the new Firebox X
  products, contact your WatchGuard Sales
  Representative
• US/Canada 800-734-9905
• International 206-521-8340
• Email Information_at_watchguard.com