App-IDIdentification of ApplicationUser-IDIdentification of UsersContent-IDContent Inspection
Single Pass• Operations once perpacket- Traffic classification (appidentification)- User/group mapping- Content scanning –...
PerimeterDatacenterSame Next-Generation Firewall, Different Benefits…InternesNetzwerkInternetDMZ
StorageSANServerLANClientsPerimeterSecurityInternet
StorageSANServerLANClientsSecurityLayerInternetPerimeterFirewallDatacenter Firewall
Visibility Transparent In-Line Firewall Replacement• Application, user and contentvisibility without inlinedeployment• IPS...
PA-30202 Gbps FW/1 Gbps threatprevention/250,000 sessions8 SFP, 12 copper gigabitPA-500250 Mbps FW/100 Mbps threatpreventi...
Pro& Contra Next Generation Firewalls
Pro& Contra Next Generation Firewalls
Pro& Contra Next Generation Firewalls
Pro& Contra Next Generation Firewalls
Upcoming SlideShare
Loading in …5
×

Pro& Contra Next Generation Firewalls

1,224 views

Published on

Belsoft Best Practice - Next Generation Firewalls
pro und contra
Urs Bühler, CEO Belsoft AG

Published in: Technology
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
1,224
On SlideShare
0
From Embeds
0
Number of Embeds
346
Actions
Shares
0
Downloads
0
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Pro& Contra Next Generation Firewalls

  1. 1. App-IDIdentification of ApplicationUser-IDIdentification of UsersContent-IDContent Inspection
  2. 2. Single Pass• Operations once perpacket- Traffic classification (appidentification)- User/group mapping- Content scanning –threats, URLs,confidential data• One policyParallel Processing• Function-specificparallel processinghardware engines• Separate data/controlplanesUp to 20Gbps, Low Latency
  3. 3. PerimeterDatacenterSame Next-Generation Firewall, Different Benefits…InternesNetzwerkInternetDMZ
  4. 4. StorageSANServerLANClientsPerimeterSecurityInternet
  5. 5. StorageSANServerLANClientsSecurityLayerInternetPerimeterFirewallDatacenter Firewall
  6. 6. Visibility Transparent In-Line Firewall Replacement• Application, user and contentvisibility without inlinedeployment• IPS with app visibility & control• Consolidation of IPS & URLfiltering• Firewall replacement with appvisibility & control• Firewall + IPS• Firewall + IPS + URL filtering
  7. 7. PA-30202 Gbps FW/1 Gbps threatprevention/250,000 sessions8 SFP, 12 copper gigabitPA-500250 Mbps FW/100 Mbps threatprevention/50,000 sessions8 copper gigabitPA-505010 Gbps FW/5 Gbps threatprevention/2,000,000 sessions4 SFP+ (10 Gig), 8 SFP (1 Gig), 12copper gigabitPA-50205 Gbps FW/2 Gbps threatprevention/1,000,000 sessions8 SFP, 12 copper gigabitPA-506020 Gbps FW/10 Gbps threatprevention/4,000,000 sessions4 SFP+ (10 Gig), 8 SFP (1 Gig), 12copper gigabitPA-200100 Mbps FW/ 50 Mbps threatprevention/ 64,000 Sessions4 copper gigabitPA-30504 Gbps FW/2 Gbps threatprevention/ 500,000 sessions8 SFP, 12 copper gigabit

×