Recommended
Recommended
More Related Content
Similar to F5 Suite Whiteboard.pptx
Similar to F5 Suite Whiteboard.pptx (20)
Recently uploaded
Recently uploaded (20)
F5 Suite Whiteboard.pptx
- 1. F5 Product & Security Overview Gordon Bailey-McEwan Systems Engineer g.baileymcewan@f5.com
- 2. © F5 Networks, Inc F5 SUITE OFFERING
- 3. © F5 Networks, Inc 3 DNS IAM WAF SSLO ADC VDI WEB APPS DATA CENTER FIREWALL SSL Visibility IP Reputation DB Global Application Availability DNS Security END USER EXPERIENCE DDoS Mitigation APPLICATION SECURITY Bot Detection/Web Scraping Data Protection PCI Compliance AAA Integration Multi-Factor Auth SSO EPI/BYOD END USER EXPERIENCE Server Load-Balancing Application Monitoring SSL Visibility Inbound & Outbound Dynamic Service Chaining FW Employees Customers Attackers Persistence Software Defined Networks Business Continuity Cloud Federation/SAML High Performance Services Fabric Flexibility Scalability Multi-tenancy Programmability Performance HPSF
- 4. © F5 Networks, Inc 4 DNS IAM WAF SWG ADC VDI WEB APPS DATA CENTER FIREWALL SSL Visibility IP Reputation DB Global Application Availability DNS Security END USER EXPERIENCE DDoS Mitigation APPLICATION SECURITY Bot Detection/Web Scraping Data Protection PCI Compliance AAA Integration Multi-Factor Auth SSO EPI/BYOD END USER EXPERIENCE Server Load-Balancing Application Monitoring SSL Visibility Inbound & Outbound Dynamic Service Chaining Employees Customers Attackers Persistence Software Defined Networks Business Continuity Cloud Federation/SAML High Performance Services Fabric Flexibility Scalability Multi-tenancy Programmability Performance Silverline FW Anti-Fraud ANTI-FRAUD PROTECTION Malware Detection Anti-Phishing Transaction Monitoring/Analysis Application level Encryption CLOUD BASED DDoS MITIGATION
- 5. © F5 Networks, Inc F5 APPLICATION ROADMAP EXAMPLE
- 6. Load-Balancing an Internal Web Application VDI APPS FW DNS DDo S GSL B SSL OFFLOA D IPS WAF AUTH PROX Y 2FA/MFA FRAUD PREVENTIO N DLP NG- FW SW G WE B
- 7. Mitigating web vulnerabilities & securing data in transit VDI APPS FW DNS DDo S GSL B IPS AUTH PROX Y 2FA/MFA FRAUD PREVENTIO N DLP NG- FW SW G WE B WAF SSL OFFLOA D
- 8. Protecting the Web Application from distributed attacks VDI APPS DNS GSL B IPS AUTH PROX Y 2FA/MFA FRAUD PREVENTIO N DLP NG- FW SW G WE B WAF SSL OFFLOA D FW DDo S
- 9. Adding authentication/SSO to our Web Application(s) VDI APPS DNS GSL B IPS FRAUD PREVENTIO N DLP NG- FW SW G WE B WAF SSL OFFLOA D FW DDo S 2FA/MFA AUTH PROX Y
- 10. © F5 Networks, Inc F5 A SMALL LAB (TIME PERMITTING)
Editor's Notes
- FW - F5 is an ICSA Certified Firewall NGFW are typically outbound firewalls (browsing FB; Youtube etc) F5 is not a NGFW but a DCFW – we can handle SSL & DDoS better than a NGFW can. This is a L3/4 firewall IAM We integrate with AAA servers (LDAP; AD; Tacacs; Radius etc) Users are required to authenticate before they gain access to a web applicaition Authentication can be basic (username/password); or more advanced (multifactor auth) F5 supports SSO (credentials can be cached & passed onto other applications – removes the need to login multiple times) WAF L7 Web firewall (HTTP/HTTPS) F5 can detect if traffic is coming from a user or bot We issue javascript challenges & look for human characteristics (mouse movement; keyboard strokes etc) ADC Persistence is always sending a user to the same backend server despite the load-balancing used by the F5 Our platform is programmable making us highly agile SWG We perform URL categorization (for outbound traffic) & malware protection DNS DNS is unintelligent F5 DNS actively monitors backend servers to ensure they’re available If services are unavailable, F5 DNS redirects users to DR resources without the need to update DNS records manually
- Silverline Silverline is F5’s managed cloud service for L3-7 DDoS Mitigation & WAF Antifraud Antifraud detects & mitigates against malware on client devices (e.g. laptops/phones)
- Internal user accessing HTTP web application…..
- …so maybe you might choose to enable SSL Offload and WAF functionality….
- You might choose to also add FW and DDoS protection….
- And maybe two-factor auth….