UAC Overview Slide Show Instructions

UAC Overview Slide Show Instructions ,[object Object],[object Object],[object Object],[object Object]

Creating your own Custom Show ,[object Object],[object Object],[object Object],[object Object]

Access Control Solutions Unified Access Control

Agenda ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Agenda ,[object Object],[object Object],[object Object],[object Object],[object Object]

Market Trends and Needs Worldwide economic crisis Layoffs and RIFs abound Financial institutions failing Market values falling Decreased budgets Severe credit crunch Proliferation of network threats Insider threat incidences rise Escalation in outsourcing and off-shoring Build-up of mergers and acquisitions Increased emphasis on regulatory compliance … However, need to do more, but with less Networks now more strategic than ever to corporate growth…

Fully Coordinated Security Infrastructure UAC “Nerve Center” Management/ Visibility 802.1X NAC Identity-Aware Security Enterprise-Wide Access Control Device Control Coordinated Threat Control

Use Case – Insider Threat Mitigation ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],% of Participants Who Experienced an Insider Incident 2007 e-Crime Watch Survey 671 respondents 41 39 55 49

Use Case – Addressing Compliance ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Use Case – Secure Guest Access ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Mike Fratto | InformationWeek Analytics | 2008 NAC Survey 58% 57% 47% 44% 42% 30% Guests Employee, remote access Employee, connected wireless to LAN Contractors/outsourced labor Unmanageable devices such as printers, VoIP phones, card readers, cameras Employee, connected via wired LAN Note: Percentages based on a rating of 4 to 5 on a five-point scale where 1 is “low” and 5 is “High” Note: Percentages based on a rating of 4 to 5 on a five-point scale where 1 is “low” and 5 is “High” LAN Threat by Users Rate the following types of users by their degree of threat for your LAN.

Use Case – Secure Outsourcing/Off-shoring ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Estimated Number of U.S. Jobs Moving Offshore, 2003-2015 2003 2004 2005 2006 2007 2008 2010 2015 Management 3,500 15,000 34,000 42,000 48,000 64,000 106,000 259,000 Business 30,000 55,000 91,000 105,000 120,000 136,000 176,000 356,000 Computer 102,000 143,000 181,000 203,000 228,000 247,000 322,000 542,000 Architecture 14,000 27,000 46,000 54,000 61,000 70,000 93,000 191,000 Life Sciences 300 2,000 4,000 5,500 6,500 9,000 16,000 39,000 Legal 6,000 12,000 20,000 23,000 26,000 29,000 39,000 79,000 Art, Design 2,500 4,500 8,000 9,000 10,000 11,000 15,000 30,000 Sales 11,000 22,000 38,000 47,000 55,000 67,000 97,000 218,000 Office 146,000 256,000 410,000 475,000 541,000 616,000 815,000 1,600,000 Total 315,000 540,000 830,000 960,000 1,100,000 1,200,000 1,700,000 3,400,000

UAC – NAC Market Leader The Forrester Wave™: Network Access Control, Q3 2008

Central Policy Coordination ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],UAC “Nerve Center” IC Series IDP Series SA Series Firewall STRM Series 802.1X Switches & APs EX Series SRX Series

Complete 802.1X NAC ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],IC Series EX Series Any 802.1X Switch/AP 802.1X NAC

Identity-Aware Security ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],SSG Series SRX Series IDP IC Series Corporate Data Center Identity-Aware Security Apps Data Finance Video

Proven Endpoint Control ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Endpoint Control

Enterprise-Wide Access Control ,[object Object],[object Object],[object Object],[object Object],[object Object],Corporate Data Center Apps Finance Video Local User SA-Series Internet IC Series IF-MAP UAC Enforcer NSM Policies Policies Enterprise-Wide Access Control

Management and Visibility ,[object Object],[object Object],[object Object],Management/ Visibility

[object Object],[object Object],[object Object],[object Object],[object Object],Coordinated Threat Control IDP Series EX Series IC Series Application Servers Firewalls UAC Enforcement Points 802.1X Switches/APs Coordinated Threat Control

Odyssey Access Client (OAC) STRM Series UAC Agent UAC Agent-less Mode Policies NSM Policies Cross-Portfolio, Integrated Access Control EX3200 EX4200 IDP Series Firewall SSG Series ISG Series SRX Series Application Servers IC Series UAC Appliance SBR Series SA Series SA Series

Basic NAC Enforcement Local User Patch Remediation SRX Series IDP Series IC Series Corporate Data Center 1 2 EX Series 3 3 4 4 1. “Sales” user logs in from unpatched machine 2. EX quarantines user – access patch server only – automatically remediated 3. Remediation success; full access granted IC-EX establish VLAN, ACLs, and QoS for Session UAC pushes role-based FW policies to SRX UAC pushes application-layer policies to IDP 4. User attempt to access “Finance” data blocked Apps Data Finance Video

Enterprise-wide Access Control Internet Mobile User Patch Remediation SRX Series IDP Series IC Series Corporate Data Center 1. “Sales” user logs in from unpatched machine 1 2. Quarantined for automatic patch remediation 2 SA Series 3. Remediation success; full access granted SA Session pushed to IC via IF-MAP UAC pushes role-based FW policies to SRX UAC pushes application-later policies to IDP 3 3 4. User attempt to access “Finance” data blocked 4 4 5. IDP Senses attack, informs IC SA terminates user session IC removes SRX/IDP access 5 Apps Data Finance Video

Coordinated Threat Control UAC and IDP Series ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Corporate Data Center 1 2 3 4 5 6 7 Local User Apps Data Finance Video EX Series Firewalls UAC Enforcement Points 802.1X Switches/APs IC Series IDP Series

Case Study – Bangchak Petroleum Public Co. Ltd. ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],http://www.juniper.net/company/presscenter/pr/2008/pr_2008_09_10-12_47.html Who 1 Challenges 2 Why Juniper 3 Juniper Products 4

Case Study – Portland Community College ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],http://www.juniper.net/solutions/customer_profiles/352262.pdf Who 1 Challenges 2 Why Juniper 3 Juniper Products 4

Case Study – Equifax ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],“ Equifax Bolsters Border Security”, Network World, 7/3/08 http://www.juniper.net/solutions/literature/misc/equifax_on_uac.pdf Who 1 Challenges 2 Why Juniper 3 Juniper Products 4

UAC: Identity-Aware Security and Access Control Data Center Campus HQ Wired/Wireless BRANCH OFFICE INTERNET Dynamically handles guests, partners, contractors, unmanageable devices Mitigate threats by controlling access across wired/wireless networks Leverage IDP for correlating network threat information to dynamically protect the network Control access to applications Gain visibility and control for user/device access to network, resources and applications Flexible solution to support access control in distributed networks Centralized policy management across remote and local access CORPORATE OFFICES DATA CENTER ,[object Object],[object Object],[object Object],[object Object],Applications IC Series UAC Appliance HQ User EX Series ISG Series SRX Series IDP Series ISG Series with IDP Branch User SSG Series SA Series NSM Policies

IC/IC + SA/IC Federation (IF-MAP) UAC Enforcer Corporate Data Center Apps Data Finance Video IC/IC Federation IC 1 Local User UAC Enforcer IDP Enforcer IC 2 IF-MAP EMEA HQ US HQ SA/IC Federation Local User SA-Series Internet IC-Series IF-MAP UAC Enforcer

UAC and IF-MAP – Open Access Control ,[object Object],[object Object],[object Object],[object Object],[object Object],IC Series IDP Series SA Series DLP IDS Third-Party Appliance Firewall Third-Party Firewall STRM Series 802.1X Switches & APs SIEM/SEM EX Series SRX Series

Additional, New UAC 3.0 Features ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

IC Series UAC Appliance Family ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Juniper UAC and EX Series Ethernet Switches: Seamless Network Access Control 802.1X PROTECTED RESOURCES ,[object Object],[object Object],[object Object],Dynamic role provisioning AAA/Identity Stores AAA User, endpoint, location-based policies 1 2 2 3 1 UAC Agent EX Series IC Series UAC Appliance Firewall Apps Server

UAC and EX Series Features Identity-based QoS Guest User Internet Gateway Router Bandwidth-limit guest traffic; mark with low-priority DSCP ERP Servers QoS policies stored on IC Series appliance and sent to the EX Series switch, implementing dynamic QoS policies per user session Marketing User Place ERP traffic in high-priority queue; mark with high- priority DSCP Place e-mail traffic in best-effort queue; mark with medium-priority DSCP Email Servers Finance User EX Series CORPORATE NETWORK IC Series UAC Appliance INTERNET

Customer Profile – Australian Unity ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Standards-based Architecture ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Access Requester (AR) Policy Enforcement Point (PEP) Policy Decision Point (PDP) Wired Network Perimeter UAC Agent Metadata Access Point (MAP) Wireless IF-MAP Server IF-MAP Clients EX Series Firewall SRX Series SA Series DLP IDS Third-Party Appliances Third-Party Firewalls SIEM/SEM IC Series IC Series

Windows Statement of Health (SOH) and Embedded NAP Agent Support UAC Agent OR NAP Client 802.1X Switches & Access Points Juniper Firewall Platforms Policy Server Identity Stores Applications and Data UAC Enforcement Points Microsoft NPS 1 Authenticate user, Profile endpoint, Determine location 2 2 Dynamically provision policy enforcement 1 3 External enforcement/ validation of SOH, transmits info back for use in policy decisions 4 Control access to protected resources IF-TNCCS-SOH SRX Series ISG Series ISG Series with IDP SSG Series IC Series EX Series

St. Mary ’s County (MD) Public Schools ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],http://www.juniper.net/solutions/customer_profiles/352264.pdf Who 1 Challenges 2 Why Juniper 3 Juniper Products 4

St. Monica ’s College (Australia) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],http://www.juniper.net/solutions/customer_profiles/352267.pdf Who 1 Challenges 2 Why Juniper 3 Juniper Products 4

UAC Overview Slide Show Instructions

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (12)

Similar to UAC Overview Slide Show Instructions

Similar to UAC Overview Slide Show Instructions (20)

Recently uploaded

Recently uploaded (20)

UAC Overview Slide Show Instructions