ApplicationIntelligenceControlandVisualization应用智能控制和可视化课件

1、第1页，共37页。 Drives Infrastructure RequirementsTechnology TrendsImpacts to Productivity & ROI 2BandwidthPerformanceAvailabilityEfficiencyManageabilitySecurity第2页，共37页。Security is an Ongoing ChallengeRipped from the HeadlinesComputer malware, still a problem nearly 40 years later:1971 - Built in the Lab

2、oratory Creeper (BBN)1981 - In the wild Elk Cloner (Skrenta)1988 - On the Internet Morris Worm (Cornell)Its Human Nature Physical security analogy: The first US bank robbery took place Sep 1, 1798, and more than 500 bank robberies will occurred in the US in 2009 the bank security business is today m

3、easured in the $10s of billions2010 Unyielding Malware and Spam fueled by BotNets CONFIDENTIAL All Rights Reserved3第3页，共37页。Security is an Ongoing ChallengeRipped from the Headlines8/16/2022Confidential - All Rights Reserved4http:/www.guardian.co.uk/technology/2010/jan/14/google-hacking-china-cyberw

4、ar第4页，共37页。Not the First to Lose Vital DataCONFIDENTIAL All Rights Reserved5 “Just over two years ago the head of MI5, Jonathan Evans, wrote to about 300 British firms warning them to be wary of Chinese hackers trying to monitor their systems or break into them remotely via the internet: Rolls-Royce

5、, the jet engine maker, and Royal Dutch Shell had both fallen victim to computer intrusions. It was only part of an ongoing strategy of information warfare that Chinas government through its Peoples Liberation Army (PLA) is carrying out across the world.”Chinese hackers attack MI5Rolls-Royce intrude

6、d第5页，共37页。The ProblemProgrammers make mistakesMalware exploits mistakesCONFIDENTIAL All Rights Reserved6Vulnerabilities are in the software everyone uses everydayProblemSolutionSonicWALL Security Center providesup-to-minute information about viruses,vulnerabilities, and spyware第6页，共37页。Result: Relen

7、tless, Unyielding MalwareSonicWALL Security Center /securitycenter.aspA Typical Day in 2010第7页，共37页。Malware Lurks in Social NetworksCONFIDENTIAL All Rights Reserved8Set-up: Create bogus celebrity LinkedIn profiles Lure: Place link to celebrity “videos” in profileAttack: Download of “codec” required

8、to view videoInfect: Codec is actually MalwareResult: System compromised第8页，共37页。What Are Your Employees Doing?9BloggingFacebookTwitterIMStreaming videoStreaming audioDownloading filesPlaying gamesPersonal Webmail25% of office Internet traffic is non-business related(Burst Media Survey, 2008)50% of

9、surveyed companies said at least 30% of their bandwidth is being consumed by social networking traffic(Forrester, Feb 2009)BANDWIDTH COSTPRODUCTIVITYCopyright 2010 SonicWALL Inc. All Right Reserved.第9页，共37页。第10页，共37页。Application ChaosIT Controls ChallengedUnacceptable Apps Acceptable AppsWho chooses

10、 what Applications are good or bad for you?第11页，共37页。The Problems Today:Security and ProductivityCONFIDENTIAL All Rights Reserved12What are the THREATS?What APPLICATIONS are really on my network? Where is ALL my BANDWIDTH going?Where is this TRAFFIC coming from?第12页，共37页。The market demands a new con

11、trol paradigm based on scanning everything, and understanding traffic for all applications and usersOvercoming Application Chaos第13页，共37页。SonicWALL Next-Generation FirewallCONFIDENTIAL All Rights Reserved14Massively ScalableNext-GenerationSecurity PlatformHigh Performance Multi-CoreRe-Assembly FreeD

12、PI?ControlIdentifyCategorizePrioritize Apps by PolicyManage Apps by PolicyBlock Apps by PolicyDetect and Block MalwareDetect & Prevent Intrusion AttemptsBy Application, Not by Port & ProtocolBy User/Group, Not by IPBy Content Inspection, Not by Filename By ApplicationBy Application CategoryBy Destin

13、ationBy ContentBy User/GroupApplication ChaosMany on Port 80第14页，共37页。SonicWALL Next-Generation FirewallCONFIDENTIAL All Rights Reserved15Massively ScalableNext-GenerationSecurity PlatformHigh Performance Multi-CoreRe-Assembly FreeDPI?ControlIdentifyCategorizePrioritize Apps by PolicyManage Apps by

14、PolicyBlock Apps by PolicyDetect and Block MalwareDetect & Prevent Intrusion AttemptsBy Application, Not by Port & ProtocolBy User/Group, Not by IPBy Content Inspection, Not by Filename By ApplicationBy Application CategoryBy DestinationBy ContentBy User/GroupApplication ChaosMany on Port 80第15页，共37

15、页。SonicWALL Next-Generation FirewallCONFIDENTIAL All Rights Reserved16Massively ScalableNext-GenerationSecurity PlatformHigh Performance Multi-CoreRe-Assembly FreeDPIMalware BlockedControlIdentifyCategorizePrioritize Apps by PolicyManage Apps by PolicyBlock Apps by PolicyDetect and Block MalwareDete

16、ct & Prevent Intrusion AttemptsBy Application, Not by Port & ProtocolBy User/Group, Not by IPBy Content Inspection, Not by Filename By ApplicationBy Application CategoryBy DestinationBy ContentBy User/GroupCloud-basedExtra FirewallIntelligenceApplication ChaosMany on Port 80第16页，共37页。SonicWALL Next-

17、Generation FirewallCONFIDENTIAL All Rights Reserved17Massively ScalableNext-GenerationSecurity PlatformHigh Performance Multi-CoreRe-Assembly FreeDPIMalware BlockedControlIdentifyCategorizePrioritize Apps by PolicyManage Apps by PolicyBlock Apps by PolicyDetect and Block MalwareDetect & Prevent Intr

18、usion AttemptsBy Application, Not by Port & ProtocolBy User/Group, Not by IPBy Content Inspection, Not by Filename By ApplicationBy Application CategoryBy DestinationBy ContentBy User/GroupUsers/GroupsPolicyCloud-basedExtra FirewallIntelligenceApplication ChaosMany on Port 80第17页，共37页。SonicWALL Next

19、-Generation FirewallCONFIDENTIAL All Rights Reserved18Critical Apps: Prioritized BandwidthAcceptable Apps: Managed BandwidthUnacceptable Apps: BlockedMassively ScalableNext-GenerationSecurity PlatformHigh Performance Multi-CoreRe-Assembly FreeDPIMalware BlockedCloud-basedExtra FirewallIntelligenceUs

20、ers/GroupsPolicyApplication ChaosMany on Port 80Visualize &Manage PolicyControlIdentifyCategorizePrioritize Apps by PolicyManage Apps by PolicyBlock Apps by PolicyDetect and Block MalwareDetect & Prevent Intrusion AttemptsBy Application, Not by Port & ProtocolBy User/Group, Not by IPBy Content Inspe

21、ction, Not by Filename By ApplicationBy Application CategoryBy DestinationBy ContentBy User/Group第18页，共37页。App Flow Monitor: Real Time Analysis of Exactly What is HappeningCONFIDENTIAL All Rights Reserved19第19页，共37页。Visualize in Multiple Ways for AnalysisCONFIDENTIAL All Rights Reserved20第20页，共37页。D

22、ig Deeper To Determine ActionCONFIDENTIAL All Rights Reserved21第21页，共37页。Application IdentificationCONFIDENTIAL All Rights Reserved22第22页，共37页。Network Analysis Tools“Whos watching YouTube?”CONFIDENTIAL All Rights Reserved23第23页，共37页。User IdentificationSingle Sign On (AD/LDAP Integration)Local LoginI

23、dentify Top Bandwidth usersCONFIDENTIAL All Rights Reserved24第24页，共37页。Identify the Bandwidth HogsCONFIDENTIAL All Rights Reserved25第25页，共37页。Or View Bandwidth Hogs in DetailCONFIDENTIAL All Rights Reserved26第26页，共37页。Connection Tracking by CountryCONFIDENTIAL All Rights Reserved27第27页，共37页。Track Su

24、spicious TrafficCONFIDENTIAL All Rights Reserved28第28页，共37页。Dig Deeper into Suspicious TrafficCONFIDENTIAL All Rights Reserved29第29页，共37页。Capture Packets for Further AnalysisCONFIDENTIAL All Rights Reserved30第30页，共37页。Combine filters for Powerful Network IntelligenceCross-Filter for a deeper dive in

25、to real-time trafficCONFIDENTIAL All Rights Reserved31第31页，共37页。CONTROL the Application TrafficCONFIDENTIAL All Rights Reserved32Available Today since SonicOS 5.0第32页，共37页。CONTROL: Powerful Policy CreationCONFIDENTIAL All Rights Reserved33Application Library with over 3000 unique Application Control

26、 Uses第33页，共37页。Content Filtering EnhancementsBandwidth management policies based on CFS categoriesMore granular, flexible and powerful Content Filter Policy controlAllow/Forbid lists per CFS policyAllow users/groups, address objects and zones to be assigned to CFS policiesMultiple CFS policies for t

27、he same group/userSignificantly improve HTTPS Content FilteringAdd new CFS categoriesCONFIDENTIAL All Rights Reserved34第34页，共37页。NetFlow/IPFIX with Extensions ReportingNetFlow/ IPFIX with ExtensionsCONFIDENTIAL All Rights Reserved35RatingLocationApplicationsIntrusionsVirusesSpywareServicesFlow TableLocationUsersURLsLogInte