Next-Generation USG

2y ago
25 Views
2 Downloads
4.37 MB
32 Pages
Last View : 11d ago
Last Download : 5m ago
Upload by : Tia Newell
Transcription

Next-Generation USG

Next‐Generation USG2

Next‐Generation USGNext Generation USG Series Più sicuri Più potenti Per reti Small/Medium Business(5-500 utenti)3

Application Intelligence

Application Intelligence TechnologyIdentifyCategorizeControl Productive apps: Prioritize Acceptable apps: Throttle Non-productive apps: BlockUSG Series5

Firmware 4.106xthe no. ofapplicationsZLD 4.10Identifies 1200 applicationsand actionsZLD 3.0Identifies 200 applications andactions6

Application Intelligence/BWM Statistics Analizzando il traffico di rete potremo applicare le opportune regole di security su IP/User/APP/Service Creare una regola in “LOG” per l’ analisi preliminare del trafficoCopyright 2012 ZyXEL Communications Corporation. All rights reserved.7

SSL Inspection

Why SSL inspection ?Prima Non si potevano bloccare siti o malware se il traffico era cifrato SSL Non potendo decriptarne il contenuto il traffico web in HTTPS non erabloccatoScanContent filteringIDPAnti-virusApplication IntelligenceClientSSL ConnectionUSG?ServerSSL Connection9

Why SSL inspection ?Adesso Tramite SSL inspection l’USG può decifrare il contenuto cifrato in SSL Si possono bloccare i siti in HTTPS o i malware SSL grazie alladecriptazioneScanContent filteringIDPAnti-virusApplication IntelligenceClientUSGServerfacebook, google SSL ConnectionDecryptSSL ConnectionEncrypt10

User Security

IntroduzioneSingle Sign-onMeccanismo di autenicazione che combina:1. Autenticaizione per l’accesso Internet econtrollo del traffico di rete2. Autenticazione Microsoft AD (Windows 2008,2008 R2, 2012, 2012 R2)EmailERPDatabaseMicrosoftADInternetCosa fa SSO?Permette di realizzare policy di sicurezza basatesu utenti o gruppi di lavoro in manieratrasparente, indipendente dal device fisico,aumentando la sicurezza aziendale.SSO12

BWM e QOS

BWM Per‐UserGestione degli utentiSales Dept.JohnMaryTom5Mbps7Mbps20Mbps3Mbps14

BWM Per‐APPGestione delle APPSales Dept.Google APPS8Mbps QoS 1Microsoft Office 365Webex5Mbps QoS 220Mbps2Mbps QoS 3Copyright 2012 ZyXEL Communications Corporation. All rights reserved.15

Network Protection

IDP IDP: Intrusion Detection and Prevention Protezione contro gli attacchi alle risorse di rete Protegge da eventuali bug di sicurezza dei server in rete (Apache, IIS, etc.)Report IDPCopyright 2012 ZyXEL Communications Corporation. All rights reserved.17

Anti‐Virus Si appoggia al motore di scansione Kaspersky Network Antivirus di fascia Enterprise Stream Based Scanning: sistema a latenza quasi pari a 0 Scansione in tempo reale di tutto il traffico di rete Abilitare scansione file compressi Report Anti‐VirusCopyright 2012 ZyXEL Communications Corporation. All rights reserved.18

Content Filter External Content Filtering Service CommTouch server ZSB (ZyXEL Safe Browsing) server (disponibile con licenza CF attiva) Filtro anche su HTTPS con SSL Inspection (solo da USG110 in su) (NEW) Possibilità di personalizzare i profili in base ad utenti/gruppi. Report Content Filter (anche online su MyZyXEL.com 2.0)Copyright 2012 ZyXEL Communications Corporation. All rights reserved.19

Unified Security Policy

IntroduzioneUnified Security PolicyIntegra le funzionalità firewall e UTM in un unico processo di configurazioneFirewallRulesUTMProfiles Zone App. intelligence Source IP Content filtering Destination IP IDP Destination port Anti-virus User Anti-spam Time SSL inspectionUnifiedSecurityPolicy21

Why Unified Security Policy?Adesso Possiamo applicare regole di firewall e policy UTM in un solo passaggioFirewallRulesUTMProfiles22

UTM Profile Nella stessa regola di Security Policy possiamo abbinareregole di firewall e profili UTMCopyright 2012 ZyXEL Communications Corporation. All rights reserved.23

Controller WLAN integrato

IntroduzioneController WLAN integrato Evoluzione del BYOD: Internet of ThingsManagement WLAN centralizzato per velocizzare e migliorare l’installazione degli APWireless security (AV/IDP)Funzionalità Monitoraggio AP centralizzato Auto AP provisioning AP information (AP list, radio list) AP firmware upgrade via WAN/LAN Station information CAPWAP support CAPWAP daily report AP profile provisioning (radio, SSID,security, etc.)25

IPSEC VPN

Migliorie IPSec VPNOverviewIPSec VPN piùsicure e velociIPv6IPSecIKEv2VPNLoadBalanceSupporto al nuovoprotocollo IPv6anche in IPSECLoad balance efailover in VPN27

IPSEC Load Balancing IPSec VPN tunnels su più WAN Si costruisce un tunnel GRE nelle IPSEC Si aggiungono i tunnel GRE nel TrunkGRE Tunnel 1Site AWANTrunkIP networkWANTrunkSite BGRE Tunnel 2Copyright 2012 ZyXEL Communications Corporation. All rights reserved.28

VPN High AvailabilityHQ NetworkWAN1WAN2InternetWAN1Remote Office ANetworkWAN1Remote Office BNetwork29

Hardware ComparisonUSG 1900USG 1100USG 310USG 210USG 110USG 60/60WUSG 40/40WUSG 20/20WCPU TypeCPU 0Cavium 1Core400 MHzCavium 1Core600 MHzCavium 2Core800 MHzCavium 4Cores1.0 GHzCavium 4Cores1.0GHzCavium 6Cores1.3GHzCavium 6Cores1.3 GHzCavium 6Cores1.3 avium 1Core400 MHzCavium 1Cores500 MHzCavium 2Cores500 MHzFreeScale 1Core400MHZFreeScale 1Core533 MHZIntel 1 CoreIntel 2 Cores‐1,80GHz2.13GHz‐

350 500200 350USG 190075 200USG 110050 75USG 31025 5010 25USG 210USG 1105 10USG 60/60W1 5USG 40/40WUSG 20/20WSmall BusinessEnterprise BusinessPerformance SeriesModelloUSG 20/20WFeaturesHighlight1 WAN5 porte Giga1 USB (LOG/3G)FW 175MbpsIPSec 75Mbps‐Sessioni 10.000IPSec/L2TP 5SSL 1WLAN controllerLicenzeHASoftwareGaranzia‐CF, ASUSG 40/40WUSG 60/60W1 WAN 1 OPT5 porte Giga1 USB(LOG/3G)FW 400MbpsIPSec 100 MbpsUTM 50 MbpsSessioni 20.000IPSec/L2TP 10SSL 2/72 WAN6 porte Giga2 USB(LOG/3G)FW 1,0 GbpsIPSec 180 MbpsUTM 90 MbpsSessioni 40.000IPSec/L2TP 20SSL 2/122 WAN 1 OPT7 porte Giga2 USB(LOG/3G)FW 1.6 GbpsIPSec 400 MbpsUTM 250 MbpsSessioni 60.000IPSec/L2TP 100SSL 5/252/102/182/10Extreme SeriesAdvanced SeriesUSG 110USG 2102 WAN 1 OPT7 porte Giga2 USB(LOG/3G)FW 1.9 GbpsIPSec 500 MbpsUTM 300 MbpsSessioni 80.000IPSec/L2TP 200SSL 10/502/18USG 310USG 1100USG 1900M WANs8 porte Giga2 USB(LOG/3G)FW 5.0 GbpsIPSec 650 MbpsUTM 400 MbpsSessioni 100.000IPSec/L2TP 300SSL 25/105M WANs8 porte Giga2 USB(LOG/3G)FW 6.0 GbpsIPSec 800 MbpsUTM 500 MbpsSessioni 200.000IPSec/L2TP 1000SSL 55/2552/182/18M WANs8 porte Giga2 USB(LOG/3G)FW 7.0 GbpsIPSec 900 MbpsUTM 600 MbpsSessioni 500.000IPSec/L2TP 2000SSL 55/7552/18App Patrol, AV, IDP, ADP, CF, AS, SSL InspectionApp Patrol, AV, IDP, ADP, CF, AS‐Device HAVantage Report, ZyWALL IPSec VPN Client, SSL Win/Mac OS3 Anni5 AnniCopyright 2012 ZyXEL Communications Corporation. All rights reserved.

Thank You!

Software Vantage Report, ZyWALL IPSec VPN Client, SSL Win/Mac OS Garanzia 3 Anni 5 Anni USG 1900 USG 1100 USG 310 USG 210 USG 40/40W USG 60/60W USG 110 USG 20/20W 5 10 10 25 25 50 50 75 75 200 200

Related Documents:

usg eclipse pÁg. 7 usg olympia micro pÁg. 7 usg millenia pÁg. 7 alto diseÑo usg pÁg. 8 nuevos productos k m sistema de muro elevador pÁg. 11 usg levelrock pÁg. 11 usg roofing pÁg. 12 sistema acÚstico pÁg. 13 los productos usg inc

ZyWALL USG Series Model USG 20 USG 20W USG 50 USG 100 USG 100-PLUS USG 200 . Card slot--- 1 - 1 System Capacity & Performance*1 SPI firewall throughput*2 (Mbps) 175 175 225 225 600 250 VPN throughput (AES)*3 (Mbps) 75 75 90 90 150 90 UTM throughput (AV IDP)*4 (Mbps) - - 30 30 30 40 . t Support Kaspersky

8 32 28 Class A 0.70 36 0.84 1.7 Low 72% USG Frost 414 USG CHEYENNE 156 SL 2'x2'x3/4" Paper-Back 8 32 28 Class A 0.65 35 0.70 1.7 Low — 72% USG Glacier Basic 707 USG SANDRIFT R808 SL 2'x2'x3/4" 8 32 28 Class A 0.70 38 0.83 1.7 Low 72% USG Sandrift

USG Durock Primer-Sealer or 3E Primer effectively seals the subfloor and prevents formation of pinholes, domes and craters in USG Durock Multi-Use self-leveling underlayment due to the upward migration of air bubbles from the subfloor. Refer to USG Durock

69 USG DRYWALL SUSPENSION SYSTEM Ceiling Grid Framing System For More Information echnical T Servic e usg.com800.USG.4YOU Website . Page 2 intentionally left blank. DESCRIPTION USG Paraline II Linear Metal Pans combine a unique linear appearance with the strength and corros

Аксесоари ZyWALL OTP v2 Софтуер Vantage Report, Vantage CNM , ZyWALL IPSec VPN Client ility USG 2000 USG 1100 USG 310 USG 20/20W USG 50 Малък Бизнес Среден Бизнес 10 50 user 50 100 user 100 200 user 200 500 use

2 Schneider Cheyenne USG Höchst 94,8 92,4 187,2 5 . 12 Berthold Maximilian SG Klostertal 80,3 76,0 156,3 1 13 Kilga Luis USG Wolfurt 71,9 72,6 144,5 0 14 Madertoner Florian USG Höchst 67,5 65,8 133,3 0 . 2 Zogg Lukas USG

c. Describe the major events of the American Revolution and explain the factors leading to American victory and British defeat; include the Battles of Lexington and Concord, Saratoga, and Yorktown. d. Describe key individuals in the American Revolution with emphasis on King George III, George Washington, Benjamin Franklin, Thomas Jefferson, Benedict Arnold, Patrick Henry, and John Adams .