Fortigate 防火墙简介.ppt

《Fortigate 防火墙简介.ppt》由会员分享，可在线阅读，更多相关《Fortigate 防火墙简介.ppt（35页珍藏版）》请在淘文阁 - 分享文档赚钱的网站上搜索。

1、Development Trends of New Generation Network Security Technology 新一代网络安全新一代网络安全技术的发展趋势技术的发展趋势Development Trends of New Generation Network Security Technology GuidelineIntroduction of Fortinet and FortiGate SeriesA New Generation of Security Platform Development Trends of Network Security Technology

2、Unified Threat Management(UTM)SystemAdvantage Detection TechnologyFortiGate Functionality OverviewServices,Reporting,ManagementConclusionFortinet Confidential新一代网络安全新一代网络安全技术的发展趋势技术的发展趋势 报告提纲报告提纲 FortinetFortinet 公司产品公司产品FortiGateFortiGate 系列简介系列简介新一代网络安全平台介绍新一代网络安全平台介绍网络安全技术网络安全技术发展趋势发展趋势统一统一威胁管理系统

3、威胁管理系统(UTM)(UTM)技术技术高级的高级的检测检测技术技术FortiGateFortiGate功能概览功能概览服务，日志，管理服务，日志，管理结束语结束语Fortinet ConfidentialBrief Introduction of Fortinet,Inc.and FortiGate Series Introduction of Fortinet and FortiGate SeriesFortinet ConfidentialWhat Fortinet DoesFortinet provides of ASIC accelerated security systems Fo

4、rtigate system.FortiGate system provides UTM(Unified Threat Management)solutions to our customers.It integrates the following functions into one device organicallyFirewallVPNAnti-virus(including anti-spyware)IPSURL filteringAnti-spamFortinet provides the FortiGuard family of automated and fully mana

5、ged security services to extend defensesFortinet ConfidentialUTMs Value PropositionLowest cost of ownership-per chassis licensing,incremental service deployment,and consistent product features across entire product familyNetwork based automated update system can update FortiGates with virus/attach p

6、atterns in real-time.Multiple vendor approachSecurity functions achieved with different appliances or serversFirewallAnti-virusVPNURL filteringIPSAnti-spamFortinet ConfidentialA New Generation of Security Platform A New Generation of Security Platform Fortinet ConfidentialThread attacks increase rap

7、idlyNumber of Incidents ReportedSource:CERT Coordination Center,Carnegie Mellon University,Feb 2004Fortinet ConfidentialConcept ConsiderationQuestions Can traditional firewall protect network?Traditional vs Innovation Network vs ContentWhat is best Implementation?Hardware vs Software Unified vs Sepe

8、ratedRelationalDBFortinet ConfidentialAnti-SPAMAnti-SPAMDisadvantageRequires multiple productsIncreases network complexity and operational costDoes not defend against“blended threats”IPS/IDSIPS/IDSAdvantageProvides comprehensive security approachMinimizes down-time from individual threatsUsersUsersS

9、erversServersAntivirusAntivirusFirewallFirewallURL FiltersURL FiltersVPNVPNTraditional Multi-layered Security-Approach to Complete Content ProtectionFortinet ConfidentialSingle vendor Multi-layered Security AdvantagesProvides comprehensive security approachMinimizes down-time from individual threats

10、Reduces number of vendors and appliancesUsersUsersServersServersFirewallFirewallSimplifies security managementCoordinates security alerting,logging,and reportingImproves detection capabilitiesFortinet ConfidentialDevelopment Trend of Network Security MaeketDevelopment Trend of Network Security Marke

11、tFortinet ConfidentialDevelopment Trends of Network Security TechnologyASICAcceleratedFull Content Level Security with Activity InspectionFortinet ConfidentialGrowth Rate of China Firewall marketFortinet ConfidentialPrediction of UTM Growth 2003-2008 Globle Firewall/VPN and UTM Market Prediction,200

12、3-2008Fortinet ConfidentialBy 2008,UTM products will overpass single firewall/VPN.“由于同时在客户和厂商处流行，由于同时在客户和厂商处流行，UTM设备市场被创造。设备市场被创造。UTM 是将防火墙、防是将防火墙、防病毒、病毒、VPN、入侵防御集成在一台高性能设备里的产品、入侵防御集成在一台高性能设备里的产品.”-IDC,2004Global Security Market Prediction,2004-2008($M)2003200420052006200720082003 占占有率有率(%)CAGR(%)20

13、08 占有率占有率(%)Firewall/VPN$1,479.1$1,667.7$1,791.6$1,804.4$1,623.5$1,462.393.4%-0.2%42.4%UTM Security$104.9$225.0$517.5$828.0$1,324.8$1,987.26.6%80.1%57.6%Total$1,584.0$1,892.7$2,309.1$2,632.4$2,948.3$3,449.516.8%Global Security Market Prediction,2004-2008Fortinet Confidential Unified Threat Managemen

14、t(UTM)SystemFortinet Confidential“The UTM market is being created because it is quickly catching on with customers and vendors.UTM incorporates firewall,intrusion detection and prevention,and AV in one high-performance appliance.”-IDC,2004“Fortinet,with the only ASIC based AV accelerated UTM applian

15、ces,led this UTM market in 2003,with$30.9 million in revenue and a 29.5%share of the worldwide market.”-IDC,2004“The UTM market is being created because it is quickly catching on with customers and vendors.UTM incorporates firewall,intrusion detection and prevention,and AV in one high-performance ap

16、pliance.”-IDC,2004IDC Reports Fortinets Market Leadership!UTM market revenue in 2005 estimated at$515 millionOver next 4 years,UTM sales will exceed firewall/VPNsFirewall/VPN segment 2005 revenue of nearly$1.8 billionUTM market estimated at nearly$2 billion by 2008Fortinet ConfidentialUTM Solutions

17、for the Small&Medium BusinessFortinet ConfidentialUTM Solutions for the EnterpriseFortinet ConfidentialUTM Solutions for the Managed Security Service ProviderFortinet ConfidentialAdvanced Detection Technology Advanced Detection TechnologyFortinet ConfidentialFortinets Evolution of Detection MethodsC

18、ombination of Multiple Detection Technologies:1.Stateful Inspection 2.Application Inspection3.Deep Packet Inspection 4.Signatures,Heuristics,Anomaly5.Full Content Inspection 6.Activity InspectionFortinet Confidential FortiGate Functionality OverviewFortinet ConfidentialFortinet Product Family Streng

19、thsFortinet provides a complete security solution for true 360 security defenses Wide range of security products for market segments of all sizesTightly integrated security products from a single vendorUnmatched detection rate with leading-edge technologyFortinet ConfidentialFortinets Complete Produ

20、ct FamilyIntegrated LoggingIntegrated LoggingHigh Availability,VLAN supportHigh Availability,VLAN supportHigh port densityHigh port densityGigabit EthernetGigabit EthernetGigabit Gigabit perfperfRedundant PSRedundant PSFG100AFG100AFG300A FG300A FG400AFG400AFG5050FG5050FG500AFG500AFG200AFG200AFG3600F

21、G3600FG60FG60FortiWifiFortiWifiFG3000FG3000FG800FG800FG50AFG50AFG5020FG5020FG5140FG5140SOHOSOHOBOBOMedium EnterpriseMedium EnterpriseLarge EnterpriseLarge EnterpriseService ProviderService ProviderProduct rangeProduct rangeFortinet ConfidentialFortiGate Antivirus Firewall Security SystemsFamily of 1

22、5 hardware devices to fit all business needsHardened security appliance for perimeter or network coreIntegrated security functionality based on granular firewall policiesStateful FirewallAntivirus/SpywareIntrusion Detection&PreventionIPSec VPN/SSL VPN(v3.0)Web Content FilteringAntispam FilteringBand

23、width ShapingConsistent functionality across product familyPer chassis licensing Fortinet ConfidentialNetwork-based Content Protection with FortiGateUsersUsersFTPFTPWebWebContent ServerContent ServerFile fragmented File fragmented into multiple into multiple packets packets(evades traditional(evades

24、 traditional defenses)defenses)Content requestContent request(malicious(malicious content)content)FortiGateFortiGate reassembles reassembles content content (before reaching clients)(before reaching clients)XMultiple detection Multiple detection engines detects and engines detects and discards attac

25、kdiscards attackContent protection for multiple applicationsFortinet ConfidentialEmail Email SpamSpamXVirusesViruseswormswormsFortiGate Antivirus Firewalls:A New Generation of Security PlatformsHackerHackerXFortiGateFortiGatewww.find_a_new_www.free_InternetInternetReal-TimeReal-TimeContent SecurityC

26、ontent Securityat the Network Edgeat the Network EdgeBannedBannedcontentcontentXIntrusionsIntrusionsXFortinet Confidential Services,Reporting,ManagementFortinet ConfidentialProactive Defense With FortiGuard ServicesFortiGuard AntivirusAutomated antivirus&spyware signature and detection engine update

27、s for FortiGate and FortiMail platformsFortiGuard Intrusion Detection&PreventionAutomated intrusion attack signature and detection engine updates for FortiGate platformsFortiGuard Web FilteringCentrally managed web content filtering service for FortiGate platformsFortiGuard AntispamCentrally managed

28、 antispam filtering service for FortiGate and FortiMail platformsAutomatic AV&IPS updates can reach all Automatic AV&IPS updates can reach all FortiGateFortiGate units worldwide in under 5 Minutes units worldwide in under 5 MinutesFortinet ConfidentialFortinet Advantage:Award Winning ProductsNumerous industry awards and recognition for technology,usability,and product visionFortinet ConfidentialWorldwide Customer Base In All MarketsOver 90,000 units sold and growing rapidlyCustomer validation in all market types and sizesFortinet ConfidentialThank you,questions?谢谢谢谢