Tài liệu Bảo mật Tài sản số - Securing your Digital Assets docx

1 Securing your Digital Assets Gabriel Tan, District Manager, South Asia Nokia Enterprise Solutions 2 About Nokia • World leader in mobile communications • Frontrunner in providing mobile, broadband and IP networks • Sixth most valuable brand (Interbrand) • One of the world’s most respected companies (PriceWaterhouse & Financial Times) • As mobility and Internet converge, Nokia is committed to further enriching the daily lives of people 3 Nokia Organisation Customer and Market Operations Technology Platforms Strategy, Research, Venturing and Business Infrastructure Mobile Phones Multimedia Networks Enterprise Solutions 4 Top of mind issues for security  Hardened for security  Simple & manageable  Reliable  Cost  Support multiple applications …and something that adds more complexity …securing wireless 5 Customers still want security appliances … By 2007, 80% of all network security solutions will be delivered via a dedicated appliance a dedicated appliance. - IDC W hat S ecurity F unction are y ou likely to deploy on a security appliance? W hat is the primary driv er behind appliance-based security technology? … and they want more from thes e appliance s . 6 Nokia Aligned With Market Preferences In-Stat (2005) • Set For Explosive Growth Forrester (2005) • 50% of enterprises prefer separate stand alone appliances • 14% prefer all-in-one • 28% prefer integrated Source: Gartner (July 2005) Gartner (2005) 7 Nokia IP Security Platforms Price Check Point VPN-1 Pro or Check Point VPN-1 Pro or VPN-1 Express VPN-1 Express Large Enterprise DataCenter Service Providers Nokia IP710 Nokia IP350/IP355 Nokia IP380/IP385 Nokia IP1260 Small to Mid Enterprise Remote Office Branch Office Nokia IP1220 Nokia IP2250 Nokia IP260/IP265 Nokia IP40 Performance & Functionality Nokia IP560 8 The Power of Two: The CheckPoint and Nokia • Overview Overview • 8+, year partnership between Nokia and Check Point • Nokia and Check Point Provide Security to 92 out of Fortuner 100. Check Point Check Point • No. 1 Internet Security Company: Built on Firewall Software Success • Award winning GUI • Patented Stateful Inspection Nokia Nokia • Internet Security Appliance Pioneer • Built to secure demanding traffic • Fastest performance Platform For Check Point (IPSO) • ‘Audit’ Grade HW Build, OS and Management tools Enterprise and Carrier • The First and Leading HA Firewall Solution for Check Point • Global Support and Service • Innovation Innovation • Patented security technologies • Jointly-developed acceleration technologies • Several IETF Reference Points (IPv6, VRRP) etc • 600+ security focused engineers 300,000+ Installations Check Point / Nokia Check Point / Nokia Installations Installations 1998 2006 9 Nokia IP2250 Nokia Security Firewall Appliances • IPSO - Hardened OS designed for security • Simple procurement and configuration • Single support point for the entire solution • Comprehensive quality assurance on complete hardware and software solution • Network-centric product architecture • First-Call, Final-Resolution support Nokia IP12xx Nokia IP3xx Nokia IP40 Nokia IP26x Nokia IP710 10 Nokia IP Security Appliance Platforms • H ardware • Nokia Pioneered The IP Security Appliance, knows more about Security Appliances Than Any other Vendor • Nokia Designs and builds Entire Appliance Platform, down To Component Level, including boards etc… • Nokia Develops and QA’s all hardware driver software, with specialized toolsets and bench configurations • Nokia Provides Redundant hot swap power supplies • Nokia Provides Redundant hot swap Network Interface Cards • Nokia Provides Solid State and HDD based System Solutions • Nokia Delivers High Port Density, High Connectivity Solutions • Nokia IP Appliances are Built with Ease of Serviceability in mind • All Systems Quality Assured Under Ideal and ‘Real World’ Operational Environments • All ‘installed base’ hardware, operating system and application combinations QA’d together • Nokia Continues To Invest in Hardware Innovations – ADPs, Solid State Support, 10GigE [...]... capabilities.“ Nokia IP2xx Nokia IP3xx -Network Computing Magazine “This product shows how two companies can work together to create a product better than the sum of its parts” -Secure Computing Magazine “A versatile and flexible solution for the high end of the market” Nokia IP2250 18 -Secure Computing Magazine IP Security Appliance Business • Business Week, 28 Aug ‘0 2- Nokia's Security Connection "force... Office Nokia VPN Mgr (with Nokia SSM) Site-to-Site Connectivity 22 Remote Access Connectivity Mobile VPN Client Nokia Enterprise Solutions ANY Mobile Device Mobile Devices & PDAs Nokia VPN Manager / NHM Employees on enterprise device IT Security Infrastructure IT Apps / Assets Nokia Firewall/VPN Access Network Nokia SSL VPN Internet Nokia IP VPN Employees on non-enterprise device A uthentication & E ncry... Singapore, Japan & China On-Site HW Replacement: Global Field Services Infrastructure for 5x8xNBD / 24x7x4h On-site HW Replacement 2000 Field Service Locations Globally 26 Nokia Uniqueness in Unified Threat Management Problem: • Multiple discrete services x Multiple Locations = Security Trade-Offs Nokia UTM: • Unified secure mobility services x Multiple locations = Limited Trade-Offs Firewall Services... Continuity 20 Nokia IP VPN Gateways • Fully-integrated, secure IPSec VPN gateways , with multiple options, for fast, easy deployment in high-performance networks • Advanced dynamic connectivity to mobile devices and other VPN gateways through robust broadband and routing functionality • Extreme system availability using diskless hardware, patented clustering and patent-pending adaptive networking technologies... including FIPS-14 0-2 , EAL4, ICSA and VPN Consortium Large Office Pric e Medium Office Remote Office Branch Office Nokia 50i VPN Gateway Nokia 100i VPN Gateway Nokia 5i and Nokia 10i VPN Gateways Performance 21 Nokia 500i * VPN Gateway * Available in 1H 2005 Nokia Mobile IP VPN Solution Native Windows L2TP/IPSec client Wireless Network (GPRS, 3G) Internet Headquarters Nokia 50i Nokia 10i Corporate Wi-Fi Nokia... s Programming Techniques Development Procedures Security Hardening Building Secure Software System Architecture Common Criteria ITSEC FIPS 140 IS 17799 SAS-70 13 Independent Validation & Certifications Deployment Processes Secure Delivery Digitally-Signed Binaries Secure Lockdown General Purpose Operating System Security Solutions Software Based (Server Appliance) Packet Packet Processing Processing... Appliance Market Share • Nokia with Check Point VPN-1/FireWall-1 has 62% VPN and 41% firewall market share (Infonetics Research, VPN Hardware Market) • Frost & Sullivan 2005 Firewall market share for Vietnam, Nokia ranked #1 19 Nokia SSL VPN Enables new mobile connectivity applications Executive access Clientserver applications like Outlook, & Notes Web-enabled applications SFA, CRM, ERP Employees using... Employees on non-enterprise device A uthentication & E ncry ption A ccess C ontrol Intrusion D etection A nti-V irus 23 A pplications, F iles, A uthentication, etc Nokia Service – First Call – Final Resolution Nokia provides integrated single source, and single contract, support for Check Point VPN-1, Nokia IP Security Platforms, interface cards, VPN accelerator cards, HA software and routing protocols... Operators and ISPs • Nokia Hardened* Operating System IPSO TM • Early Implementation of Digitally Signed OS • Less Than 10 CERTs in 8+ Years of Field Deployments • Firewall acceleration pioneer, Nokia Patented IP Firewall Flows • The market leader and pioneer in integrated high availability firewall technology VRRP-MC to IP Clustering • World Class, well proven, standards adherent routing • Well proven... anagem ent, anag em A no m aly D etectio n, R eg ulato ry C o m pliance, ex tensibility 27 Security and Mobility Unification Nokia Unified Threat Management Functions Firewall VPN (IP &/or SSL) ID/P • All-in-one secure mobility architecture • Ease of management, integration, deployment • Consolidated management framework 28 Email, PIM Server Directory Services Email VoIP Directory DNS Nokia Management Center . 1 Securing your Digital Assets Gabriel Tan, District Manager, South Asia Nokia Enterprise. Nokia IP Security Platforms Price Check Point VPN-1 Pro or Check Point VPN-1 Pro or VPN-1 Express VPN-1 Express Large Enterprise DataCenter Service Providers