Fortinet

logooffer a full range of solutions to emerging network security trends.

Business today has a need for increased throughput and visibility. Networks are faster than ever, and carry more rich content and potentially malicious payloads than ever. The volume of threats have accelerated as well, increasing the need to keep up with increased traffic speeds and volumes to detect and block today’s sophisticated threats. By extending the traditional network perimeter and embracing new Web applications, organisations are increasingly at risk from potential attacks by opening new points of vulnerability in their IT infrastructure. Today’s attacks take advantage of the limited visibility provided by stand-alone products.

  • Network infrastructures are migrating to 10G, with 40G on the horizon
  • The Surge in new applications over the last several years, preventing traditional security technologies fromsecurity accreditation detecting threats embedded in those applications

Protection from increasingly frequent and sophisticated attacks: IT attacks have increased in both number and severity as hackers have become more sophisticated and their motivations have shifted from gaining notoriety to generating profits through exploiting confidential private data. Today’s threat landscape contains complex, polymorphic and multi-vector threats--whether delivered via spam from a compromised server in a bot network, downloaded by a seemingly harmless posting on Facebook, or masquerading as legitimate traffic by tunneling inside a trusted application. Organizations need sophisticated, integrated security to detect and block malicious content.

  • Koobface attack: combined social networking, link to a malicious site, malware installation, and a self-propagating worm
  • Bots: Need defense in depth for complete protection:
  • Intrusion Prevention: To block botnet Command & Control communication
  • Application Control: Detect malicious services initiated by bots, block compromised Facebook applications used to propagate bots
  • Web filtering: Block botnet Command & Control traffic, prevent fast flux file downloading
  • Antispam: Block spambots & incoming spam campaigns from compromised systems
  • Antivirus: Block bots, propagated payloads, etc.

Attacks targeting non-traditional targets: Hackers have traditionally targeted the systems and data that reside within business networks. They have begun to target SCADA/industrial control/critical infrastructures such as electrical grids, defense networks, financial systems and telecommunications networks, resulting in a significantly increased awareness and focus by governments on combating cyberwarfare

  • Siemens control systems targeted by Stuxnet worm
  • Majority of operators of electrical grids, telco networks surveyed in 2010 report being under constant attack

Improve operational efficiency– Cost-reduction requirements are forcing IT organizations of all sizes to consolswitch imageidate functions wherever possible to reduce CapEx and OpEx. It organizations are consolidating functions distinct functions wherever possible, and network security is not exempt from this trend. They are reducing the number of servers and appliances in their SOCs and datacenters to conserve precious rack space and shrink their environmental footprint; integrating applications to reduce the number of products to license, configure, and manage. These organizations are managing more technologies with fewer resources by consolidating stand-alone products.

  • Optimization of datacenter, Corporate Social Responsibility to pursue ‘green initiatives’,
  • virtualization of servers to reduce number of appliances and increase deployment flexibility

Adoption of 802.11n wireless standard means that wired and wireless networks share similar performance to the desktop, requiring consolidated policy creation and enforcement for wired and wireless networks