network security and application control with dell ngf

8/10/2019 Network Security and Application Control with Dell NGF

1/55

Anurag Som

Product Manager, Dell SonicWALL


2/55

2 SonicWALLConfidential

Big forces in the IT landscape are dramaticallyimpacting our customers

CONNECTEmbrace

consumerization:

BYOD and beyond

TRANSFORMAccelerate adoption:

virtualization,

convergence, cloud

INFORMTurn data

into insights

PROTECTOvercome the

evolving security

threat & ensure

compliance

and they are also shaping how we think about oursolutions.


3/55


Online threats continue to growand target everyone

Source: washingtonpost.comSource: darkreading.com

Source: arstechnica.com


4/55


Threats have evolved

Traditional firewalls & IPS have not

Protection centered around ports &

protocols

Expensive to deploy & manage

Unable to detect or block malware

Unable to identify traffic by user

Blind to SSL encrypted attacks Forces security to performance tradeoff


5/55


Dell Security Products

Deep Packet Inspection

Application control

Bandwidth management

Real-time malware

protection

Emailsecurity

Anti-spam

Anti-phishing

Email anti-malware

Secure Remoteaccess

SSL VPN

Endpoint control

Mobile Connect for

iOS and Android

Identityand accessmanagementAccess governance

Privileged account mgmt

Identity administration

User activity monitoring

Connected security

Networksecurity


6/55


Deep Inspection for Deep Security withNext Generation Firewall Technology

Stateful Packet Inspection

Dee

p

PacketInsp

ection


7/55




Intrusion Prevention The front-line network defense against application attacks

Dee

p

PacketInsp

ection


8/55





1. Application Identification & Visualization

Cant control what you cant see

Dee

p

PacketInsp

ection


9/55







2. User Identification through Single Sign On (SSO)

Correlate network traffic with users

Dee

p

PacketInsp

ection


10/55









3. Application Control

Granular control (Allow Facebook, Block Social Gaming)

Dee

p

PacketInsp

ection


11/55











4. SSL Decryption

Dont allow threats to tunnel through encrypted channels

Dee

p

PacketInsp

ection


12/55











4. SSL Decryption

Dont allow threats to tunnel through encrypted channels

5. Threat Prevention

Anti-X (Virus/Trojan/Malware)

Dee

p

PacketInsp

ection


13/55


ApplicationVisibility & Control


14/55



15/55



16/55



17/55



18/55


19/55


App traffic drilldown

Network Traffic Visualization App Drilldown


20/55


Network Traffic Visualization Traffic Type

Identify P2P traffic


21/55


Bandwidth breakdown

Network Traffic Visualization Bandwidth Breakdown


22/55


Network Visualization User

User Traffic consumption


23/55


Application Control Block BitTorrent

1.


24/55



1.

2.


25/55



1.

2.

3.


26/55



1.

2.

3.

4.


27/55


Application Control BWM Facebook

1.


28/55



1.

2.


29/55



1.

2.

3.


30/55



1.

2.

3.

4.


31/55


Application Control Manage User Access

1.


32/55



1.

2.


33/55



1.

2.

3.


34/55



1.

2.

3.

4.


35/55



1.

2.

3.

5.

4.


36/55


Granular

Application Control


37/55


Is Granular Application Control Complex?

Application Control in 3 Easy Steps


38/55




1. Create User Specific or Application List Match Object Match Object represents the conditions applied to match network traffic

I G l A li i C l C l ?


39/55





2. Select an Action Object

Actions Object define how the Application Control policy reacts to matchingevents

I G l A li i C l C l ?


40/55





2. Select an Action Object

Actions Object define how the Application Control policy reacts to matchingevents

3. Create Application Policy to control specific aspects of traffic Application Policy applies Action Object conditions on matched events from

Match Object

Application Control Allow Facebook Block Facebook


41/55


Application Control Allow Facebook, Block FacebookApps

1.

Create Match Object



42/55



1.

2.

3.

4.

5.

Create Match Object



43/55


Match Object




44/55


1.

2.

3.

4.

Create Application Policy




45/55


Application Policy


A li ti C t l S


46/55


Application Control Summary

What does Dell SonicWALL Application Intelligence & Control do?

Application Policy application, user group/exception group, schedule, action

A li ti C t l S


47/55




Allocate bandwidth for mission-critical applications


Application Control S mmar


48/55





Block unproductive components of applications




49/55






Visualization of real-time traffic with instant feedback on traffic flows




50/55







Control categories of Applications, individual applications andspecific features within Applications




51/55







Control categories of Applications, individual applications andspecific features within Applications

Manage bandwidth and application control for user groups




52/55







Control categories of Applications, individual applications and

specific features within Applications

Manage bandwidth and application control for user groups

Bandwidth manage streaming audio and video


Take a Test Drive! htt //li d i ll


53/55


Take a Test Drive! http://livedemo.sonicwall.com

Dell Next Generation Firewall protects all


54/55


SuperMassive E10800

SuperMassive E10400

SMB/Campus/Branch

Enterprise, Data Center

SuperMassive Series

TZ 215/WTZ 205/WTZ 105/W

SuperMassive 9600

SuperMassive 9400SuperMassive 9200

TZ Series

NSA 4600NSA 3600

NSA 2600NSA 220/250M

NSA 6600NSA 5600

NSA Series

Dell Next Generation Firewall protects allbusiness sizes


55/55

Q&A

network security and application control with dell ngf

Documents