Wifi Security for SOHOs: Cyberoam UTM CR15wi

3,957 views

Published on

Cyberoam CR15wi is the latest Wifi Appliance featuring Cyberoam's "Identity-based" Architecture for SOHOs. This small appliance can act as a router/firewall/antispam/antimalware/bandwidthmangement/webfilter and much more.

Published in: Technology
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
3,957
On SlideShare
0
From Embeds
0
Number of Embeds
3
Actions
Shares
0
Downloads
188
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Wifi Security for SOHOs: Cyberoam UTM CR15wi

  1. 1. Our Products Unified Threat Management Cyberoam Central Console (CCC) SSL VPN Data Protection & Encryption Device Management Application Control Asset Management Cyberoam – Endpoint Data Protection Cyberoam Wi-Fi Appliance Comprehensive Network Security with Wi-Fi Access Point for Small and Remote Offices
  2. 2. Topics <ul><li>SOHO/SMB Dilemma – Wi-Fi vs. Wired </li></ul><ul><li>Traditional Wi-Fi vs. Cyberoam Wi-Fi </li></ul><ul><li>Cyberoam Wi-Fi Advantage </li></ul><ul><li>CR15wi GUI Preview </li></ul>
  3. 3. SOHO/SMB Dilemma – Wi-Fi vs. Wired networks <ul><li>The World is moving from Wired to Wireless! </li></ul><ul><ul><li>Global WLAN market rose by 20% in Q1, 2010 compared to last year – Dell'Oro Group </li></ul></ul><ul><ul><li>Market expected to grow to $5.5 bn in 2010 </li></ul></ul><ul><li>Benefits </li></ul><ul><ul><li>Easier and faster deployment </li></ul></ul><ul><ul><li>Reduced overhead costs & deployment times </li></ul></ul><ul><ul><li>Higher mobility leads to better flexibility </li></ul></ul><ul><ul><li>Increased employee productivity due to instant connectivity </li></ul></ul><ul><li>Benefits & Risks – You Gain Some, You Lose Some </li></ul><ul><li>Benefits of Wi-Fi come with Security risks </li></ul><ul><li>Unless addressed, Wi-Fi advantages can turn into risks for business </li></ul>
  4. 4. Wi-Fi Security Risks for SOHO & SMB <ul><li>Uncontrolled and un-monitored Guest access leading to risk of Internet Abuse </li></ul><ul><li>Risk of Information Theft </li></ul><ul><ul><li>Unrestricted access by Guests to internal network </li></ul></ul><ul><ul><li>Inability to trace user specific activity </li></ul></ul>
  5. 5. Traditional Wi-Fi vs Cyberoam Wi-Fi
  6. 6. <ul><li>Pure Pre-Shared Key based Security degrades exponentially with time </li></ul><ul><ul><li>Sharing of Pre-Shared key with Guests, Ex-Employees </li></ul></ul><ul><ul><li>Brute Force attacks </li></ul></ul>Common Pre-Shared key Traditional Wi-Fi without user authentication Internet Firewall / Router Employee Guest 1 Ex-Employee Guest 2 Guest 3 Wi-Fi Router ACME CORPORATION
  7. 7. Cyberoam Wi-Fi with user authentication Common Pre-Shared key Temporary User Access Temporary User Access Expires <ul><li>Cyberoam’s Layer 8 Advantage – Identity-based Controls </li></ul><ul><ul><li>Duration of Access </li></ul></ul><ul><ul><li>Schedule of Access </li></ul></ul><ul><ul><li>Data Transfer Limit </li></ul></ul><ul><ul><li>Bandwidth Availability </li></ul></ul><ul><li>Identity-based Reporting for each user, including guests </li></ul><ul><li>Information Theft controlled </li></ul>User Name MAC ID IP Address Internet Employee Layer 8 Technology CR15wi Network Guest 1 ACME CORPORATION
  8. 8. Cyberoam’s Layer 8 Advantage – Identity-based Controls Internet Tony Bandwidth control Duration / Quota control Schedule Control Reporting Apply these controls on Employees as well as Guests CR 15wi
  9. 9. Traditional Wi-Fi without network segmentation Common Pre-Shared key <ul><li>Guest can access internal network </li></ul><ul><ul><li>Risk of Information Theft </li></ul></ul><ul><li>Unmonitored Internet Access </li></ul><ul><ul><li>Risk of Internet Abuse </li></ul></ul>Internet Firewall - Router Wi-Fi Router Employee Guest Accounting/ERP Software E.g. Tally, Quicken, PeachTree Shared Network Drives Switch ACME CORPORATION
  10. 10. Cyberoam Wi-Fi allows Separate Guest and Employee Network Access CR15wi <ul><li>Segmented network for Employees & Guests </li></ul><ul><li>Layer 8 Authentication </li></ul><ul><ul><li>Guests get limited access </li></ul></ul><ul><ul><ul><li>Can only access Internet </li></ul></ul></ul><ul><ul><ul><li>No access to network resources </li></ul></ul></ul><ul><li>Identity-based Reporting for every user </li></ul>Internet Switch Employee Layer 8 Advantage Accounting/ERP Software E.g. Tally, Quicken, PeachTree Guest Shared Network Drives ACME Guest ACME Employees
  11. 11. CR15wi Layer 8 Advantage Multiple Virtual Access Points – 8 SSIDs for network segmentation ACME Marketing Internet Switch Accounting/ERP Software E.g. Tally, Quicken, PeachTree Guest Shared Network Drives Engineering ACME Guest ACME Engineering Marketing
  12. 12. Cyberoam Wi-Fi Advantage
  13. 13. Cyberoam Wi-Fi Advantage Reduced TCO Enhanced Security
  14. 14. Cyberoam Wi-Fi Reduces TCO + + = CR 15wi Wi-Fi Router Other Network Security Devices <ul><li>Reporting </li></ul><ul><li>Content Filtering </li></ul><ul><li>Bandwidth Mgt </li></ul>- Antivirus - Antispam - IPS - VPN and many more <ul><ul><li>Reduces cost of managing WLAN </li></ul></ul><ul><ul><ul><li>- Eliminates need for separate Wi-Fi routers and firewall </li></ul></ul></ul>Firewall - Router
  15. 15. <ul><li>Get Higher Throughput and range with 802.11n MIMO Technology </li></ul><ul><ul><li>Multiple Input – Multiple Output MIMO technology </li></ul></ul><ul><ul><li>Fine-tune Coverage & Bandwidth </li></ul></ul><ul><ul><li>Higher performance by aggressively transmitting and receiving data over WiFi channels </li></ul></ul><ul><ul><li>Faster handling of video streaming and high bandwidth downloads </li></ul></ul><ul><li>2 x 3 </li></ul><ul><li>2 Transmit antennas </li></ul><ul><li>3 Receive antennas </li></ul>Coverage Bandwidth Ability to fine-tune coverage with bandwidth
  16. 16. Cyberoam Wi-Fi Security Advantage <ul><li>High performance, integrated security over WLAN </li></ul><ul><li>Supports 802.11 n/b/g wireless standard </li></ul><ul><li>Multiple Virtual Access Points </li></ul><ul><ul><li>Supports upto 8 SSIDs </li></ul></ul><ul><li>Supports IP-address pool </li></ul>
  17. 17. <ul><li>High performance, integrated security over WLAN </li></ul><ul><ul><li>Includes entire set of UTM security features </li></ul></ul><ul><ul><li>Secures wireless networks to the extent of wired networks </li></ul></ul>
  18. 18. <ul><li>Multiple Virtual Access Points for Network Segmentation </li></ul><ul><ul><li>Supports upto 8 SSIDs </li></ul></ul><ul><ul><li>Create segregated networks in same physical area </li></ul></ul><ul><ul><li>Various departments like Marketing, Sales, Engineering can be on separate zones </li></ul></ul><ul><ul><li>Separate zone for Guest </li></ul></ul><ul><ul><ul><li>No need to share corporate network username, password </li></ul></ul></ul><ul><ul><ul><li>Separate pre-shared key </li></ul></ul></ul>Extend 1 Access Point to 8 Virtual Access Points
  19. 19. CR 15wi Specs
  20. 20. Cyberoam WiFi Appliance – CR 15wi 802.11 n/b/g (WEP, WPA, WPA2, 802.11i ,TKIP, AES, PSK, 802.1x EAP) Antenna Detachable 2x3 MIMO Access Points Up to 8 bssid Transmit Power (EIRP) 11n HT40 : +17dBm 11b CCK: +19dBm 11g OFDM:+17dBm Receiver Sensitivity - 65dBm at 300Mbps - 70dBm at 54Mpbs 10% PER - 86dBm at 11Mpbs 8% PER
  21. 21. CR 15wi GUI Preview
  22. 22. Configuring Wireless Access Point
  23. 23. Firewall Rule Page Comprehensive Network Security www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
  24. 24. Configuring Firewall Rule Page Comprehensive Network Security www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
  25. 25. DHCP Server www.cyberoam.com © Copyright 2010 Elitecore Technologies Ltd. All Rights Reserved.
  26. 26. DHCP Configuration Option
  27. 27. Thank You [email_address] www.cyberoam.com

×