Petr Koudelka Security product manager

Transkript

1 Petr Koudelka Security product manager

2 Rozdělen lení produktů dle uřč řčen ení Enterprise 500+ users Mid-Large ( users) SMB ( users) SB (<50 users) SOHO ZyWALL Target Market ZyWALL USG 1000 ZyWALL USG 300 ZyWALL 35 UTM ZyWALL 5 UTM ZyWALL 2WG ZyWALL 2 Plus ZyWALL P1 Produkty nejsou omezeny na počet připojených PC, ale musí být dle počtu zařízení pouze výkonově dimenzované!!!

3 ZyWALL P1 Panel LEDs: PWR: Power status WAN: WAN status VPN: VPN status Managed: Vantage CNM status LAN: LAN status 129mm Interface: Reset: Reset button WAN Port : 10/100 Auto Sensing LAN Port : 10/100 Auto Sensing USB Port : Powered by USB Power: 12VDC Switching type 16mm 81mm

4 Personal Firewall + 1 VPN, Powered by USB or power supply, WAN and LAN 10/100 Ethernet icard, 1-year AV+ IDP for P B B icard, 2-year AV+ IDP for P B

5 ZyWALL 2 Plus LEDs: PWR, ACT, 4-Ports LAN, WAN Interface: Console: RS-232 on RJ-45 Port, Dial Backup: RS-232 on RJ-45 Null Modem Port, 4-ports LAN/DMZ: 10/100M auto MDI/MDIX WAN: 10/100M auto MDI/MDIX

6 Firewall + 5 IPSec VPN, WAN, 4-port 10/100 Ethernet icard, 1year Content Filter Silver B G

7 ZyWALL 2WG Interface LEDs: PWR, LAN/DMZ, WAN, AUX, WLAN CARD (3G Etension Card Slot) Interface: WAN: 10/100 Auto MDI/MDIX 4-port LAN/DMZ switch: 10/100 Auto MDI/MDIX, configurable as LAN or DMZ WLAN, AUX, Console, Etension slot

8 ZyWALL 2 WG Firewall + 5 IPSec VPN, WAN, 4-port 10/100 Ethernet, WLAN a/b/g, etension slot "3G/GPRS" B icard, 1year Content Filter icard, 1year Content Filter 2WG B

9 4.04(AQI.1) Sierra Wireless AC580 AC595 AC850 AC860 AC875 AC880 AC881 Novatel PC720 EX720 (epress) U740 Huawei EC321 EC360 EC500 E612 E620 E630 Option GT HSDPA 7.2 Ready GT Ma 3.6 Plán podpory 3G karet POZOR podporu vždy ověřte s danou verzí firmware a zařízením

10 ZyWALL 5 UTM LEDs: PWR SYS ACT (Status of Dial Backup Function) CARD (Status of Etension Card Slot) Interface: WAN: 10/100 Auto MDI/MDIX 4-port LAN/DMZ switch: 10/100 Auto MDI/MDIX, configurable as LAN or DMZ Dial-Backup: RS-232 M Console: RS-232 F Etension Card Slot: ZyWALL TURBO Card *: ZyWALL Turbo AV+IDP Accelerator

11 ZyWALL 5 ZyWALL 5 UTM ZyWALL Turbo suite 1 Silver ZyWALL Turbo suite 2 Silver icard, 1-year AV+ IDP Silver icard, 2-year AV+ IDP Silver icard, 1-year Anti-Spam Silver icard, 2-year Anti-Spam Silver icard, 1year Content Filter Silver Firewall + 10 IPSec VPN, WAN, 4- port 10/100 Ethernet, etension slot "WiFi, GPRS/3G, Turbo card" ZyWALL 5*1, Turbo*1, months AV/IDP license ZyWALL Turbo suite incl. turbo card, 1year AV+ IDP silver for ZyWALL 5 ZyWALL Turbo suite incl.turbo card, 2year AV+ IDP silver for ZyWALL 5 icard, 1-year AV+ IDP Silver for ZyWALL 5 icard, 2-year AV+ IDP Silver for ZyWALL 5 icard, 1-year Anti-Spam license Silver for ZyWALL 5 icard, 2-year Anti-Spam license Silver for ZyWALL 5 Content filtering - ZyWALL 2plus/ B B B B G B G G G

12 4.04(XD.0) Sierra Wireless AC595 AC850 AC860 AC875 Huawei E612 E620 Option GT HSDPA 7.2 Ready Plán podpory 3G karet POZOR podporu vždy ověřte s danou verzí firmware a zařízením

13 ZyWALL 35 UTM LEDs: PWR SYS ACT (Status of Dial Backup Function) CARD (Status of Etension Card Slot) Interface: WAN 1, WAN 2 : 10/100 Auto MDI/MDIX 4-port LAN/DMZ switch : 10/100 Auto MDI/MDIX, configurable as LAN or DMZ Dial-Backup: RS-232 M Console: RS-232 F Etension Card Slot: ZyWALL TURBO Card *: ZyWALL Turbo - SMART Accelerator

14 ZyWALL 35 ZyWALL 35 UTM ZyWALL Turbo suite 1 Gold ZyWALL Turbo suite 2 Gold icard, 1-year AV+ IDP Gold icard, 2-year AV+ IDP Gold icard, 1-year Anti-Spam Gold icard, 2-year Anti-Spam Gold icard, 1year Content Filter Gold Firewall + 35 IPSec VPN, 2-port WAN, 4-port 10/100 Ethernet, etension slot "WiFi, Turbo card" ZyWALL 35*1, Turbo*1, 3+12 months AV/IDP license ZyWALL Turbo suite incl. turbo card, 1year AV+ IDP gold for ZyWALLs 35/70 ZyWALL Turbo suite incl.turbo card, 2year AV+ IDP gold for ZyWALLs 35/70 icard, 1-year AV+ IDP Gold for ZyWALLs 35/70 icard, 2-year AV+ IDP Gold for ZyWALLs 35/70 icard, 1-year Anti-Spam license Gold for ZyWALLs 35/70 icard, 2-year Anti-Spam license Gold for ZyWALLs 35/70 Content filtering - ZyWALLs 35/ B B B B B B B B B

15 ZyWALL USG 300 LEDs: PWR SYS AUX (status of Dial Backup/Dial-In) CARD1 (status of Etension Card Slot1) CARD2 (status of Etension Card Slot2) Interface: (7) Gigabit Ethernet: 10/100/1000, Configurable Port Role (2) USB: 2.0, for printer, storage etc Interface: Dial-Backup/Dial-In OOB: DB-9 M Console: DB-9 F Etension Card Slot: Future Upgrade 1. 3G Cellular Card 2. WLAN Card Power: 100~240VAC

16 ZyWALL USG 300 icard, 1-year CF ZyWALL USG 300 icard, 2-years CF ZyWALL USG 300 icard, 1-year AV ZyWALL USG 300 icard, 2-years AV ZyWALL USG 300 icard, 1-year IDP ZyWALL USG 300 icard, 2-years IDP ZyWALL USG 300 icard SSL VPN 2 TO 10 TUNNELS ZYWALL USG 300 Firewall VPN L2TP/IPSec, up to 10 SSL, 7 Gbps multiple WAN,LAN,DMZ ports, epansion slot icard 1-year Content filtering for ZYWALL USG 300 icard 2-years Content filtering for ZYWALL USG 300 icard, 1-year AV Kaspersky ZyWALL USG 300 icard, 2-years AV Kaspersky ZyWALL USG 300 icard, 1-year IDP ZyWALL USG 300 icard, 2-years IDP ZyWALL USG 300 icard 2 to 10 SSL VPN tunnels for ZyWALL USG B B B B B B B B

17 ZyWALL USG 1000 LEDs: PWR SYS ACT (Status of Dial Backup) HDD (Status of HDD Slot) Interface: Gigabit Port: 5 gigabit ports USB: 2 USB ports (future enhancement) Etension Card Slot (future enhancement) Dial-Backup: RS-232M, Console: RS-232F HDD Slot (future enhancement) System FAN: 4 Fans Power FAN Power: 100~240VAC

18 ZyWALL USG 1000 icard, 1-year CF ZyWALL USG 1000 icard, 2-years CF ZyWALL USG 1000 icard, 1-year AV ZyWALL USG 1000 icard, 2-years AV ZyWALL USG 1000 icard, 1-year IDP ZyWALL USG 1000 icard, 2-years IDP ZyWALL USG 1000 icard SSL VPN 5 TO 25 TUNNELS ZYWALL USG 1000 icard SSL VPN 5 TO 50 TUNNELS ZYWALL USG 1000 icard SSL VPN 25 TO 50 TUNNELS ZYWALL USG 1000 Firewall L2TP/IPSec VPN, up to 50 SSL, 5 Gbps multiple WAN, LAN, DMZ ports, etension slot icard 1-year Content filtering for ZYWALL USG 1000 icard 2-years Content filtering for ZYWALL USG 1000 icard, 1-year AV Kaspersky ZyWALL USG 1000 icard, 2-years AV Kaspersky ZyWALL USG 1000 icard, 1-year IDP ZyWALL USG 1000 icard, 2-years IDP ZyWALL USG 1000 icard 5 to 25 SSL VPN tunnels for ZyWALL USG 1000 icard 5 to 50 SSL VPN tunnels for ZyWALL USG 1000 icard 25 to 50 SSL VPN tunnels for ZyWALL USG B B B B B B B B B B

19 ZyWALL SSL 10 LEDs: PWR SYS RS-232 Interface: WAN : 10/100 Auto MDI/MDIX 4 LAN: 10/100 Auto MDI/MDIX

20 ZyWALL SSL 10 Firewall + 10 VPN SSL tunnels B Upgrade for SSL 10 icard, SSL VPN, for ZyWALL SSL- 10, 10 to 25 tunnel B

21 ZyWALL OTP (One-Time Password) ZyWALL OTP Starter Kit Obsahuje 2 tokeny a 1 CD (ZyXEL/Authene Server Software) Designováno pro nové nebo malé zákazníky ZyWALL OTP 5U Obsahuje 5 tokenů a 1 CD (ZyXEL/Authene Server Software) Designováno pro zákazníka, který má již starter kit a potřebuje více tokenů pro uživatele ZyWALL OTP 10U Obsahuje 10 tokenů a 1 CD (ZyXEL/Authene Server Software) Designováno pro zákazníka, který má již starter kit a potřebuje více tokenů pro uživatele

22 ZyWALL OTP Starter Kit 2 tokens for new/potential customers to test and use B ZyWALL OTP 5U 5 tokens to those who need more tokens for more users B ZyWALL OTP 10U 10 tokens to those who need more tokens for more users B

23 ZyWALL IPSec client Specification: Encryption DES, 3DES, and AES Hash Algorithms HMAC-MD5, HMAC-SHA-1, Diffie Hellman Group Support DH1, 2, 5, 14 Authentication Mechanisms Preshared keys, X.509, X-Auth, SmartCard&Token Key Management IKE (Internet Key Echange), ISAKMP IPSec Modes AH, ESP, Main, Aggressive, Tunnel, Transport System Requirements Disk Space - 5 MB Windows XP, Winsows Vista 32 bit

24 ZyWALL IPSec VPN Client ZyWALL IPSec VPN Client - 1 Pack, GreenBow, Windows XP, Vista B

25 Vantage CNM Centralized Network Management Specification Server CPU: Intel P4 2,8 GHz or higher Memory: 2GB or higher Hard Disk: 80 GB GB or higher Client CPU: Intel P3 450 MHz or higher Memory: 256MB or higher Server Operating System: Windows XP Pro (SP1/SP2) / Windows 2000 Server (SP4) / Windows 2003 Server (SP1), Windows Vista 32 bit English version Client JRE (Java Run-time Environment) version 1.5. and high Disable Pop-up blocker Microsoft Internet Eplore 6.0/7.0 Firefo 1.5 or higher on Microsoft SVGA resolution ( ), 1280 recommended

26 Vantage CNM - 10 Centralized Network Management - 10 device access (Windows) B Vantage CNM 25 Centralized Network Management - 25 device access (Windows) B Vantage CNM 50 Centralized Network Management - 50 device access (Windows) B Vantage CNM Centralized Network Management device access (Windows) B Vantage CNM Centralized Network Management device access (Windows) B Vantage CNM Centralized Network Management device access (Windows) B

27 CNM obsahuje integrovanou verzi VRPT dle licence na CNM Kooperace CNM a samostatného VRPT na stejném PC není možná Upgrade z verze nižší na verzi vyšší je zdarma Registrace se provádí na MAC adresu síťové karty PC, na který je software instalován Licenci lze kdykoliv převést na jinou MAC adresu jiného PC Registrované licence se sčítaj tají: =85 licencí

28 Support list based on software CNM

29 Vantage Reporter System Specification: Server:Windows XP/2000/2003 Server,Windows Vista 32 bit Client:Browser: Microsoft IE 6.0 or later. Mozilla or later, Friefo or later on Microsoft. Screen resolution supported: 1024*768 Flash Player 7.0 and above Server: Number of devices CPU SPEC Memory HDD <5 Intel P4 2.6G or better 1G 10 GB < 50 Intel P4 2.6G or better 1G 2*devices 50~100 Intel P4 3.2G+ or better 1G 2*devices Client CPU: Intel P3 450 MHz or better Velikost jednoho logu je 300 bajtů. Note: Server can handle <=1500 logs/sec

30 VANTAGE REPORT 1DEVICE VANTAGE REPORT 1DEVICE B VANTAGE REPORT 5 DEVICES VANTAGE REPORT 5 DEVICES B VANTAGE REPORT 25 DEVICES VANTAGE REPORT 25 DEVICES B VANTAGE REPORT 100 DEVICES VANTAGE REPORT 100 DEVICES B

31 Upgrade z verze nižší na verzi vyšší je zdarma Registrace se provádí na MAC adresu síťové karty PC, na který je software instalován Licenci lze kdykoliv převést na jinou MAC adresu jiného PC Registrované licence se sčítaj tají: = =31 licencí

32 Technické informace Model Name ZyWALL P1 ZyWALL 2Plus ZyWALL 2WG ZyWALL 5 UTM ZyWALL 35 UTM ZyWALL 70 UTM ZyWALL USG 300 ZyWALL USG 1000 Performance How many users can use device? 1 <10 <15 <25 <100 <200 <300 <500 Firewall Troughput 80 Mbps 24 Mbps 24 Mbps 50 Mbps 60 Mbps 75 Mbps 200 Mbps 350 Mbps VPN 3DES/AES Troughput 30 Mbps 24 Mbps 24 Mbps 25 Mbps 30 Mbps 40 Mbps 100 Mbps 150 Mbps UTM Throughput (AV+IDP+Firewall) 5 Mbps Mbps 14 Mbps 18 Mbps 48 Mbps 100 Mbps - AV+IDP+FW User Licenses NO VLAN Tagging 802.1q - DoS/DDoS Protection IDP - - Anti-Spam Anti-Virus - - Content Filter - Concurrent Sessions UTM Up to simultaneous IPSec VPN connections

33 Model Name ZyWALL P1 ZyWALL 2Plus ZyWALL 2WG ZyWALL 5 UTM ZyWALL 35 UTM ZyWALL 70 UTM ZyWALL USG 300 ZyWALL USG 1000 Up to simultaneous L2TP IPSec VPN connections Up to simultaneous SSL VPN connections VPN HA Physical Specification Ports (10/100 Mbps Auto sensing & MDI/MDIX) 1LAN, 1WAN, 1USB 4LAN/DMZ, 1WAN 4LAN/DMZ, 1WAN, 1WLAN, 13G* 4LAN/DMZ, 1WAN, 13G* 4LAN/DMZ, 2WAN 1LAN, 4DMZ, 2WAN 7X 10/100/1000 Mbps, 2USB 5X 10/100/1000 Mbps, 2USB Redundancy Traffic Redirect, Dial Backup Multiple WAN Load Balance, Auto Fail-over, Fail-back, Dial Backup, Traffic Redirect Device Redundancy - Etension Card Slot - - 3G card 3G card, WLAN card, Turbocard WLANcard, Turbocard WLANcard, Turbocard 2 card bus card bus, USB, Mini- PCI, 2,5" HDD RS-232 console - Bridge - - Bandwidth Management - *optional support 3G card

34 UTM = AS + AV + IDP + CF Bandwidth Mgmt Web Filters Servers Anti-Virus VPN UTM / Firewall Load Balance Internet IDS / IDP Users Anti-Spam UTM (Unified Threat Management) IDP 3* 3* 3* 1* * Měsíců zdarma na vyzkoušení

35 Anti-Virus/IDP Acceleration Card with ZyXEL SecuASIC Technology for ZyWALL 5, 35 and 70 Servers Internet Users

36 Internet SSL VPN tunnel ZyWALL SSL VPN Eternal Database RADIUS Remote Users Zabezpečení jednorázovým heslem: Získá-li někdo nelegálně Vaše přihlašovací údaje k přístupu na firemní síť NEVADÍ!!! Přístup je navíc chráněn generováním jednorázového přístupového číselného hesla, které se dá použít jen jednou.

37 NAT Gateway nemáte žádný firewall, SSL 10 bude Vaším firewallem Employee on Home Computer ZyWALL SSL VPN (with NAT and Firewall) LAN Zone Internet WAN LAN Server BI System Employee Laptop In Airport Kiosk or In Hotel Encrypted Decrypted File Share OA, ERP System CRM System Authorized Partner Authorized Customer Web-based Application Application Server (Inventory, Store..) Remote Desktop Network Etend

38 Gateway s DMZ Zone pokud firewall již máte, SSL 10 bude doplňkem zabezpeření Vašich síťových dat ZyWALL zabezpečuje IDP/AV ZyWALL UTM provides Anti-Virus/IDP inspection on SSL-VPN traffic Employee on Home Computer ZyWALL UTM LAN Zone Employee Laptop In Airport Kiosk or In Hotel Internet WAN Encrypted DMZ LAN Decrypted Server File Share BI System OA, ERP System CRM System Authorized Partner Authorized Customer WAN DMZ Zone ZyWALL SSL VPN Web-based Application Application Server (Inventory, Store..) Remote Desktop Network Etend

39 3G Security Router druhá konektivita není v dosahu metalicky, ale je k dispozici GPRS nebo UMTS WIFI Security - WEP/WPA/WPA EAP Auth. 3G Data Card Access - Primary WAN - Backup WAN - Dual WAN (LB) AC 850 Internet ZyWALL 3W 2WG / 5 Internet ZyWALL 70 UTM Remote Office Central Office/ HQ

40 3G Security Router není k dispozici v dosahů žádná metalická, WiFi ani optická konektivita AC 850 Residential ZyWALL 2WG/5 3G Data Card Access - Primary WAN AC 850 Internet Residential ZyWALL 2WG/5

41 Management sítě Branch Office Dept. 1 Company C Internet Internet Security Appliance Dept. 2 IT Manager Vantage CNM Server Internet Security Appliance Personal Security Appliance Telecommuter

42 Centralizované logování a vyhodnocení záznamů ZyWALL A Syslog Vantage CNM & Reporting Server Online Query from Client with IE ZyWALL B Internet Syslog

43 VPN Tunnel is Up VPN Tunnel is Down

44

45 License & SKU of VRPT Install --Prompt to ask entering license during login Enable Trial Trial -- Full Function 1device 15 days trial Trial Epired Trial Epired -- No Function is allowed Enable License Enable License Enable License -- Full Function -- no time limitation 1/5/25/100/ device

46 License & SKU of CNM Install --Prompt to ask entering license during login Enable Trial Trial -- Full Function 100 device 90 days trial Trial Epired Trial Epired -- No Function is allowed Enable License Enable License Enable License -- Full Function -- no time limitation 10/25/50/100/300/1000 device

47 Questions?