Sophos XG Firewall IP Partners ICT Systems & Services - PowerPoint PPT Presentation

Sophos XG Firewall IP Partners ICT Systems & Services www.ippartners.gr

XG Firewall Overview

Today’s top firewall problems What IT managers say about their existing firewall … Firewall Satisfaction Survey (Spiceworks 2017) Top Concerns My Firewall … makes it difficult to find information does not isolate infected systems Visibility makes it difficult to configure Protection is missing features Complexity doesn't alert me to threats doesn't identify risky users or apps

Sophos XG Firewall Unrivalled Security, Simplicity, and Insight Complete Protection Synchronized security Simpler to Manage Instant Insights  Firewall & Wireless  Security Heartbeat ™  Streamlined workflows  Control center  Web, Apps, APT  Identify & Isolate APTs  Unified policies  User & App Risk  Email and WAF  Dynamic app ID  Policy templates  On-box reporting 4

XG Firewall Unrivalled Security, Simplicity, and Insight 1. Complete Protection More-in-one protection than any other firewall • Advanced Threat Protection from the latest botnets and APTs • Next-generation Network, IPS, wireless, web, and app control • Optional email anti-spam, DLP, encryption and full-featured WAF 2. Synchronized Security Automated threat protection and response • Industry-first synchronizing IT security products to share telemetry • Security Heartbeat™ can automatically respond and isolate compromised systems • Unknown App Identification enables the firewall to identify unknown traffic 3. Simpler to Manage XG Firewall makes managing advanced protection simple • Unified policy and rule management brings everything together in one place • Enterprise-grade web policy is powerful, flexible and easy • Business application templates simplify setup & guide best-practices 4. Instant Insights Unprecedented insights into user and network activity • Control center surfaces critical information using traffic-light style indicators • User and application risk indicators identify issues before they become problems • Extensive on-box reporting included at no-extra charge provides even deeper insights 5

XG Firewall Ecosystem Migration Tools Sophos Firewall OS (SF-OS) XG Series Appliances Synchronized Security Enabling an easy migration from New Firewall Operating System Identical to SG Series except Integration with Sophos Endpoints UTM 9 to SF-OS and Software Platform (available on Azure) come preloaded with SF-OS for enhanced protection & response Sophos Firewall Manager (SFM) Sophos iView Reporting Sophos Central Firewall Manager (CFM) Full-featured on-premise Centralized Management Updated on-premise Centralized Reporting Centralized Firewall Management in the Cloud (for partners only initially – coming to Central soon!)

XG Firewall’s Unique Innovations 7

What makes XG Firewall Unique Innovative features you just can’t get anywhere else Synchronized Security • Links Endpoints and Firewall to share telemetry and status • Enables features like Security Heartbeat™ & Real-time App ID Unified Firewall Rules and Policies • All firewall rules on one screen with snap-in user-based policies • Policy templates simplify protecting business applications Enterprise-grade Secure Web Gateway • Powerful top-down inheritance based web policy model • Easy and intuitive to build sophisticated user and group based policies User and Application Risk Assessment • Automatically identifies high risk users and applications on the network • Identifies potential issues before they become real problems No-compromise Deployment and Central Management • The most flexible deployment options without compromise: XG Series, software, virtual, IaaS (Azure) • Comprehensive centralized management and reporting made simple 8

Synchronized Security Admin UTM/Next-Gen Firewall Endpoint/Next-Gen Endpoint Security Heartbeat™ ! RED Heartbeat Firewall detects traffic from Endpoint 9

Unified Firewall Rules and Policies Making management easier All firewall rules in one place User, Network, Business Applications Powerful filtering options By rule type, zone, status or ID At a glance indicators Type, source, destination, users, service, traffic status, heartbeat, QoS, and natural language description 10

Policy Templates Custom tailored templates enable easy & proper protection for common business apps 11

Enterprise-grade Secure Web Gateway Powerful tools for building sophisticated user and group based web policies Top-down inheritance policy model Makes building sophisticated policies easy and intuitive. The same kind of SWG usually found only in dedicated enterprise products. Pre-defined policy templates Out-of-the-box policies for included for workplace, CIPA compliance, and more Powerful customization Custom define users/groups, activities (URLs, categories, file types), allowed action, and time-of-day and day-of-week constraints 12

User Risk Assessment Automatically identifying top risk users on the network Automatically identifying top risk users on the network – before they become a problem 13

App Risk Assessment Automatically identifying top application risks and overall app risk Risk: Low A few high risk applications and users are operating on the network – continue to monitor the situation carefully Risk: High Take action and setup an application control policy before data loss, abuse, or illegal activity become a real problem 14

Deployment flexibility without compromise Flexible deployment options optimized for today’s business XG Series Hardware Full range of hardware appliances with wireless AP and RED add-ons Multi-core processors, solid-state storage, generous RAM Industry-leading performance at all price points – Miercom tested Virtual/Software Vmware, Hyper-V, Citrix XEN, KVM Flexibility regarding resource assignment and high availability Compatible with all x86 hardware IaaS Available in Microsoft Azure Marketplace Up and running in minutes with preconfigured VM Pay-as-you-go or BYOL 15

XG Firewall How XG does user policy better 16

Layer-8 User Identity and Awareness made simple Covers all areas of the Firewall. Consolidated. Easy to Manage Routing IPS QoS Apps Web 17

Powerful user/group policy enforcement made simple Simply snap-in your sophisticated user and group based polices to a single firewall rule Define your user/group web enforcement policy Snap-it-in to your desired firewall rule 18

Sophos Transparent Authentication Suite (STAS) Making user identity transparent and reliable. Single-Sign-On (SSO) made easy XG Firewall Microsoft Active Directory Server STAS Authentication Collector & Agent Information No client required on devices for SSO! 19

What’s New XG Firewall v16 & v16.5 20

Support for 3rd party URL databases STAS GUI configuration Microsoft Azure Support Two-Factor Authentication Per-rule and Policy-based routing Enhanced Control Center Google Apps Control Log Viewer Enhancements New User/Group Web Policy Over … Enhanced Anti-Spam 120! Support for 3rd party URL databases New Navigation New AP 15C and RED 15w support Enhanced Security Heartbeat New Features Synchronized Security Creative Commons SafeSearch App Identification SPX Email Encryption reply portal Image Enforcement Streamlined Firewall Email Per-Domain Missing Security Rule Screen Routing and MTA Heartbeat Detection Firewall-to-firewall RED tunnels Firewall domain name HA support for dynamic WAN interfaces Clone firewall and other rules 21

XG Firewall v16 Continuing to build on the story Simplified User Experience New Protection Features Added Synchronized Security Creating a more intuitive experience Over 120 new features improving Adding new Synchronized Security across all areas of the product from protection and flexibility across all areas features to the arsenal to improve navigation to policy to logging & more of the firewall protection, enforcement and visibility

Simplified User Experience New in XG Firewall v16: Easier Navigation Enhanced Control Center Widgets Streamlined Policy Setup Improved Logging and Trouble- shooting Tools 23

Complete Protection New in XG Firewall v16: New Enterprise-Grade Secure Web Gateway Two-factor Authentication Email Enhancements (Routing, Policy Tools, MTA) Microsoft Azure Support 24

Synchronized Security New in XG Firewall v16 Missing Heartbeat Detection UTM/Next-Gen Firewall Endpoint/Next-Gen Endpoint Identifying & isolating compromised endpoints Destination Heartbeat Block access to compromised servers and endpoints Cloud Intelligence Unknown App Identification Insights and control over unknown app traffic 25

Synchronized Security Admin UTM/Next-Gen Firewall Endpoint/Next-Gen Endpoint Unknown App Identification GREEN Heartbeat Firewall detects unknown traffic from Endpoint Firewall requests context from endpoint Application information is exchanged 26

The adoption of cloud infrastructure and services is accelerating • IaaS spending to grow 38.4% in 2016 • Cloud is the fastest growing business at Microsoft (Azure, Office 365, CRM) • All driven by immense benefits in pay-for-what- you-use, convenience, flexibility, reliability and scalability