wifi security for sohos: cyberoam utm cr15wi
DESCRIPTION
Cyberoam CR15wi is the latest Wifi Appliance featuring Cyberoam's "Identity-based" Architecture for SOHOs. This small appliance can act as a router/firewall/antispam/antimalware/bandwidthmangement/webfilter and much more.TRANSCRIPT
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Our Products
Unified Threat Management Cyberoam Central Console (CCC) SSL VPN
Data Protection & Encryption
Device Management
Application Control
Asset Management
Cyberoam – Endpoint Data Protection
Cyberoam Wi-Fi ApplianceComprehensive Network Security with Wi-Fi Access Point for Small and Remote Offices
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
TopicsTopics
SOHO/SMB Dilemma – Wi-Fi vs. Wired
Traditional Wi-Fi vs. Cyberoam Wi-Fi
Cyberoam Wi-Fi Advantage
CR15wi GUI Preview
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
SOHO/SMB Dilemma – Wi-Fi vs. Wired networks SOHO/SMB Dilemma – Wi-Fi vs. Wired networks
The World is moving from Wired to Wireless!- Global WLAN market rose by 20% in Q1, 2010 compared to last
year – Dell'Oro Group- Market expected to grow to $5.5 bn in 2010
Benefits- Easier and faster deployment - Reduced overhead costs & deployment times- Higher mobility leads to better flexibility- Increased employee productivity due to instant connectivity
Benefits & Risks – You Gain Some, You Lose Some Benefits of Wi-Fi come with Security risks Unless addressed, Wi-Fi advantages can turn into risks for business
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Wi-Fi Security Risks for SOHO & SMBWi-Fi Security Risks for SOHO & SMB
Uncontrolled and un-monitored Guest access leading to risk of Internet Abuse
Risk of Information Theft
Unrestricted access by Guests to internal network
Inability to trace user specific activity
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Traditional Wi-Fi vs
Cyberoam Wi-Fi
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Internet Pure Pre-Shared Key based Security degrades exponentially with time
-Sharing of Pre-Shared key with Guests, Ex-Employees
-Brute Force attacks
Firewall / Router
Common Pre-Shared key
Employee
Guest 1
Ex-Employee
Guest 2
Guest 3
Wi-Fi Router
Traditional Wi-Fi without user authentication
ACME CORPORATION
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
User Name
MAC ID
IP Address
Cyberoam Wi-Fi with user authentication
Internet
Common Pre-Shared key
Employee
Temporary User Access
Layer 8 Technology
CR15wi
Network
Temporary User Access Expires
Guest 1
Cyberoam’s Layer 8 Advantage – Identity-based Controls
Duration of Access
Schedule of Access
Data Transfer Limit
Bandwidth Availability
Identity-based Reporting for each user, including guests
Information Theft controlled
ACME CORPORATION
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
InternetTony
Bandwidth control
Duration /Quota control
Schedule Control
Reporting
Cyberoam’s Layer 8 Advantage – Identity-based Controls
Apply these controls on Employees as well as Guests
CR 15wi
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Traditional Wi-Fi without network segmentation
Internet
Firewall - Router
Wi-Fi Router
EmployeeGuest
Accounting/ERP Software
E.g. Tally, Quicken, PeachTree
Shared Network Drives Common Pre-Shared key
Switch
• Guest can access internal network
• Risk of Information Theft
•Unmonitored Internet Access
• Risk of Internet Abuse
ACME CORPORATION
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Cyberoam Wi-Fi allows Separate Guest and Employee Network Access
Internet
Switch
CR15wi
Employee
Segmented network for Employees & Guests Layer 8 Authentication
o Guests get limited access
o Can only access Internet
o No access to network resources
Identity-based Reporting for every user
Layer 8 Advantage
Accounting/ERP Software
E.g. Tally, Quicken, PeachTree Guest
Shared Network Drives
ACME Guest
ACME Employees
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
ACME Marketing
Internet
Switch
CR15wi
Layer 8 Advantage
Accounting/ERP Software
E.g. Tally, Quicken, PeachTree Guest
Shared Network Drives
Multiple Virtual Access Points – 8 SSIDs for network segmentation
Engineering
ACME Guest
ACME Engineering
Marketing
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Cyberoam Wi-Fi Advantage
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Cyberoam Wi-Fi AdvantageCyberoam Wi-Fi Advantage
Reduced TCO
Enhanced Security
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Wi-Fi Router
Other Network Security Devices
- Reporting- Content Filtering- Bandwidth Mgt
- Antivirus- Antispam- IPS- VPN and many more
Cyberoam Wi-Fi Reduces TCOCyberoam Wi-Fi Reduces TCO
+
+=
Reduces cost of managing WLAN
- Eliminates need for separate Wi-Fi routers and firewall
CR 15wi
Firewall - Router
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Get Higher Throughput and range with 802.11n MIMO Technology- Multiple Input – Multiple Output MIMO technology
- Fine-tune Coverage & Bandwidth
- Higher performance by aggressively transmitting and receiving data over WiFi channels
- Faster handling of video streaming and high bandwidth downloads
2 x 3
-2 Transmit antennas
-3 Receive antennas
Coverage Bandwidth
Ability to fine-tune coverage with bandwidth
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Cyberoam Wi-Fi Security AdvantageCyberoam Wi-Fi Security Advantage
High performance, integrated security over WLAN
Supports 802.11 n/b/g wireless standard
Multiple Virtual Access Points Supports upto 8 SSIDs
Supports IP-address pool
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
High performance, integrated security over WLAN
- Includes entire set of UTM security features
- Secures wireless networks to the extent of wired networks
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Multiple Virtual Access Points for Network Segmentation
- Supports upto 8 SSIDs
- Create segregated networks in same physical area
- Various departments like Marketing, Sales, Engineering can be on separate zones
- Separate zone for Guest
No need to share corporate network username, password
Separate pre-shared key
Extend 1 Access Point to 8 Virtual Access Points
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
CR 15wi Specs
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Cyberoam WiFi Appliance – CR 15wi Cyberoam WiFi Appliance – CR 15wi
802.11 n/b/g (WEP, WPA, WPA2, 802.11i ,TKIP, AES, PSK, 802.1x EAP)
Antenna Detachable 2x3MIMO
Access Points Up to 8 bssid
Transmit Power (EIRP) 11n HT40 : +17dBm11b CCK: +19dBm11g OFDM:+17dBm
Receiver Sensitivity - 65dBm at 300Mbps- 70dBm at 54Mpbs 10% PER- 86dBm at 11Mpbs 8% PER
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
CR 15wi GUI Preview
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Configuring Wireless Access PointConfiguring Wireless Access Point
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Firewall Rule PageFirewall Rule Page
Comprehensive Network Security
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Configuring Firewall Rule PageConfiguring Firewall Rule Page
Comprehensive Network Security
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
DHCP ServerDHCP Server
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
DHCP Configuration OptionDHCP Configuration Option
www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
Comprehensive Network Security
Thank [email protected]