Rethinking Network Security and Solving for SD-WAN: The intersection of Cloud, Network, and Security.

1. RETHINK
NETWORK SECURITY
Larry Austin
Senior Client Executive
March 2018

2. 2
DAT
A
PEOPL
E
FOCUS ON THE TRUE CONSTANTS
PEOPLE DATA
Understanding the intersection
of people, critical data and IP
over networks of different
trust levels.
THE HUMAN POINT

3. THE FLOW
OF DATA
THE
RHYTHM OF
PEOPLE
EACH PRODUCT ELEMENT:
ANALYTICS MANAGEMEN
ORCHESTRATION
Forcepoint
UEBA
Forcepoint
NETSEC
Forcepoint
Insider
Threat
Forcepoint
Web & Email
Security
Forcepoint
Data Guard
Forcepoint
DLP
Forcepoint
CASB
 Has best in class capabilities
 Can be your starting point
 Integrates together as a system with
unified management and policy
 Works with an existing environment
DESIGN TENETS OF THE HUMAN POINT SYSTEM

4. Copyright © Forcepoint. | 4
NETWORK SECURITY SOLUTIONS THAT ARE TRULY DIFFERENT
100x reduction in
malware incidents when
deploying Forcepoint.
Forcepoint
Web & Email
Security
Forcepoint
Data Guard
Forcepoint
SD-WAN
NETSEC
Cuts network expenses by 50%, reduces
cyberattacks by up to 86%, slashes incident
response time as much as 73%.
Forcepoint
CASB
Broadest cloud application support with unique
customized risk assessment based on user
behavior and data access classification.
Forcepoint
Insider Threat
Forcepoint
DLP
Forcepoint
UEBA
Made possible by the
Human Point System

5. Copyright © Forcepoint. | 5
FORCEPOINT – A NEW APPROACH TO CONNECTIVITY & SECURITY
Enterprise SD-WAN
Distributed connectivity for
branches, offices, cloud, data centers
High availability and scalability
#1 Network Security
Distributed protection, encryption, control
NGFW + IPS + VPN + Proxies and more
Management at Scale
Centralized admin of 2000 devices in minutes
Immediate deployment, updates, upgradesForcepoint NGFW
Enterprise
SD-WAN
#1
Network
Security
Management
at Scale

6. Copyright © Forcepoint. | 6
AWS, Azure
Cloud Data Centers
ONE SECURITY PLATFORM, MANY USES – MANAGED TOGETHER
Security
Management
Center
NGFW
VPN
NGFW
VPN
VPN
VPN
App Web
interfaces
Subcontractors
Data
Stores, Branches,
Remote Offices
Headquarters
Mobile
Users
Partners
DMZ
SD-WAN
VPN
NGFW
Virtualized
Data Centers
NGFW
VPN
NGFWIPS
IPS IPS
IPS
Internet
Corporate Network

7. Copyright © Forcepoint. | 7Copyright © 2017 Forcepoint. | 7
#1
Network
Security
86%
Fewer Cyberattacks
69%
Fewer Breaches
Source: IDC Research

8. Copyright © Forcepoint. | 8
FORCEPOINT HAS HIGHEST SECURITY AND EXCELLENT TCO
“The security effectiveness of the Forcepoint
NGFW 3301 was unsurpassed in the NSS Labs
2017 NGFW test. The Forcepoint NGFW
should be on every company’s short list.”
Thomas Skybakmoen,
Distinguished Research Director
NSS Labs
NGFW
5th Consecutive Time
Forcepoint
BEST TCO 
STRONGESTSECURITY
NGIPS
2nd Consecutive Time
NSS Labs 2017 NGFW Test

9. Copyright © Forcepoint. | 9
FORCEPOINT IS THE TOP-RATED IPS,
EVEN OUTPERFORMING IPS-ONLY BOXES
NSS Labs 2017 NGIPS Test
Forcepoint
Evasion defenses are a must-
have to prevent Exploits
“Providing exploit protection results
without fully factoring in evasion
can be misleading.”
– NSS Labs

10. Copyright © Forcepoint. | 10
THE EVASION GAP – MOST VENDORS LEAVE NETWORKS EXPOSED
Evasions increase the effectiveness of
exploits & malware
Many NGFW & IPS fail to stop evasions
Exploit Kits now make evasions easy
Metasploit & Shadow Brokers leaked toolkit
Attacks combining techniques to spread
Learning from WannaCry  Petya

11. Copyright © Forcepoint. | 11
SEEING HOW EVASIONS CAN LET RANSOMWARE RUN RAMPANT
www.forcepoint.com/evader

12. Copyright © Forcepoint. | 12
WHAT CUSTOMERS SAY ABOUT SECURITY EFFICACY
Senior Security Engineer
Major US Enterprise
“This is Kick A$$ Technology… It took 60 seconds to bypass our
existing platform with well known exploits and the system was
oblivious to the attempts.
I spent weeks trying to get around the Forcepoint platform and it
stopped everything I tried. We don’t want to be the next company in
the news over a breach.”

13. Copyright © Forcepoint. | 13
NETWORK SECURITY POWERED BY THE HUMAN POINT SYSTEM
Cloud Services CASB
w/ DLPCASB
App Risk
Threat
Intelligence
Install
Cloud
IP & File
Reputation
URL
Filtering
Web
Security
Advanced
Malware
Detection
Security Management Console
Unified Policies, Dashboards & Reports
Endpoint
Context
ECA
Endpoint
Integration
Unified Appliance with Deep Security Built-in
Physical, Virtual, Cloud
SD-WAN NGFW IPS
Anti-
Evasion
Decryption Proxies
Virtual
Contexts
VPN
Endpoint
Awareness
Segmentation
Centralized Management • High Availability
Insider Threat
Data Loss Prevention
UEBA
DLP
IT
coming

14. Copyright © Forcepoint. | 14
Other Vendors Forcepoint NGFW & IPS
FORCEPOINT DIFFERENCE: UNIFIED PHYSICAL-VIRTUAL-CLOUD
Start from Chips & Hardware mindset
Different (slower) code in virtual firewalls
Often with different features / much lower performance
Even incompatible management consoles
Start from SOFTWARE mindset
Same FAST software on all platforms
High performance in virtual & physical environments
Uniform features / management across all deployments
Rapid innovation
Cloud
Virtual
Cloud
Virtual
“Frankenfirewalls”
Different code

15. Copyright © Forcepoint. | 15
FORCEPOINT DIFFERENCE: THE POWER OF THE CLOUD
Advanced Malware Detection
URL categorization and Threat Intelligence
Policy-driven redirection of traffic to Web Security
Offloads page inspection
Consistent protection across remote/mobile/on-premises
CASB Application Risk intelligence
Shadow IT risk
Report generation from NGFW logs
Service chaining – bringing it all together
Extending incrementally: Web Security + CASB + DLP
WebApps
CASB
Web
Security
AMD URL
Stores,
Branches
HQ,
Offices,
Data Centers

16. Copyright © Forcepoint. | 16
Feature Transparently forward HTTP/HTTPS traffic to Cloud proxy
Restrictions /
Requiurements
None
Clustering Full clustering and multi-link support
High Availability Proxy load balancing and high availibility
Functionality
IPv4 & IPv6
Support NGFW inspection features (DPI, File filtering)
Cloud or On-premises
REDIRECTION OF HTTP(S) TRAFFIC TO WEB SECURITY CLOUD
Simplified redirection of Web traffic (HTTP or HTTPS) from NGFW Engine to Web proxy service in a
cloud or on premises
Technical Benefits
► Easy Configuration. No longer
necessary to use a policy-based
VPN to redirect HTTP or HTTPS
traffic to Forcepoint Web Cloud.
► Support for link and HA services
► User info delivery to the Cloud if FW
aware of User ID
► NGFW features such as DPI, File
filtering, etc can be used also for
redirected traffic.
► No VPN encryption overhead
► Support for IPv4 & IPv6
Outcome
► Easy to deploy SaaS security
from anywhere the branch office
workers are
► Forward Web traffic to the
nearest Forcepoint Web Security
Cloud DC for advanced Web
content analysis
► Outsource CPU intensive Web
content inspection from local
proxies to the Forcepoint Web
Security Cloud
Internet
Forcepoint
Web Security
Cloud
HQ or Remote Office
Web
Server
Internal
clients are
trying to get
access to
Web Server.

17. Copyright © Forcepoint. | 17
AS SIMPLE AS ADDING A SINGLE RULE IN POLICY
Capability to inspect
redirected traffic
locally

18. Copyright © Forcepoint. | 18
TRUE ENTERPRISE SOLUTION
Greater Agility with Lower TCO
SD-WAN: WHY ORGANIZATIONS CHOOSE FORCEPOINT
CLUSTERING
& HIGH
AVAILABILITY
The best clustering
capabilities available
on the market place
SD-WAN
MULTI-LINK™
OPTIMIZATION
Unique and praised
by end users VPN
Mesh technology
OPERATIONAL
EFFICIENCY
Zero-touch deployments
and one-click
updates/upgrades
CENTRALIZED
MANAGEMENT
Simply the smartest
management system
in the industry
#1 NGFW & IPS
SECURITY
Top-ranked security on
NSS Labs’ NGFW and
NGIPS tests

19. Copyright © Forcepoint. | 19
CHOSEN THROUGHOUT THE WORLD
Enterprise
SD-WAN
#1 Network
Security
Management
at Scale

20. Copyright © Forcepoint. | 20Copyright © 2017 Forcepoint. | 20
Enterprise
SD-WAN
38%
Fewer Outages
70%
Faster Deployment
Source: IDC Research

21. Copyright © Forcepoint. | 21
FORCEPOINT VISION: SD-WAN WITH CLOUD-BASED SECURITY
• ISP multi-homing (HA & LB)
• Route Based Multi-Link VPN
• QoS and Bandwidth throttling
• Cloud-assisted security (AMD, URL, etc..)
Multi-Link VPN and
cloud-assisted security
(Forcepoint NGFW 2017)
• Seamless cloud security service chaining
(Web & CASB)
• Application routing
• Dynamic and scalable full-mesh VPN
• SD-WAN dashboard
SD-WAN &
Cloud Service Chaining
(Forcepoint NGFW 2018)
• NGFW-as-a-service
• Same policies across Cloud and on-premises
• Mobile users connect to the closest point
• Fast-path routing for SaaS apps
Integrated Cloud
(2019 and forward)
Endpoint
Site 1
DC
Private
Virtual
SaaS cloud
apps
DC PaaS
Virtual
3rd party
router
MPLS
Internet
Multilink Multilink
Web SaaS

22. Copyright © Forcepoint. | 22
BETTER RESILIENCE, FLEXIBILITY & OPERATIONS SAVINGS
Business
Continuity
• Transparent failover
• Load-balancing
or back-up links
Unified connectivity
over multiple ISPs
• Heterogeneous access technologies
• Fast, active-active performance
• QoS and bandwidth optimization
• High security inspection & encryption
Replacing MPLS
with broadband
• Eliminate ISP lock-in
• Add bandwidth easily
• Provision quickly
(esp. where MPLS takes time)
• Manage everything centrally
ISP 1
ISP 2
ISP N
Multi-Link
Optimization
Cable
3/4G
DSL 1
DSL 2
MPLS
Regular
Traffic &
Back-up
links
Critical
Traffic
Up to 90%
Savings vs
MPLS costs

23. Copyright © Forcepoint. | 23
Head of IT Production
Carglass
“We saw an opportunity to combine router and advanced firewall
capabilities to strengthen security across every site and accelerate
throughput. We needed a solution with centralized administration
that could be easily replicated every time we added a new mobile
site, easing the management burden on our IT staff.”
WHAT CUSTOMERS SAY ABOUT SD-WAN CONNECTIVITY

24. Copyright © Forcepoint. | 24
Other Vendors Forcepoint NGFW & IPS
FORCEPOINT DIFFERENCE: MOST SCALABLE, HIGHEST AVAILABILITY
Basic Redundancy bolted on top
Often just 2 or 4 nodes of same model
Updates are painful – clusters go offline
Each firewall updated separately
After all done, cluster reassembled and brought online
Advanced Clustering built in
Up to 16 nodes of mixed models, software versions
Updates are seamless – clusters stay running
Updates applied progressively
Cluster never drops traffic

25. Copyright © Forcepoint. | 25
WHAT CUSTOMERS SAY ABOUT HIGH AVAILABILITY
Hendrik Walter
IT Director
Avency
MSSP & Hosting Provider
“With Forcepoint deployed, we have had 6 years with zero downtime.
That wasn't possible with Check Point because we had downtime when
upgrading or changing hardware. With Forcepoint we don't have any
worries with upgrades because we don't experience downtime.”

26. Copyright © Forcepoint. | 26Copyright © 2017 Forcepoint. | 26
Management
at Scale
Source: IDC Research
53%
Less
IT Staff Time
73%
Faster Incident
Response

27. Copyright © Forcepoint. | 27
CENTRAL MANAGEABILITY WITH UNPARALLELED VISIBILITY & CONTROL
Manage Data Centers • Edge • Branches • Cloud from one console
See what’s happening everywhere & interactively drill down
Turn sophisticated business processes into automated policies
Update hundreds of NGFWs, VPNs & IPSs in minutes, not hours

28. Copyright © Forcepoint. | 28
Other Vendors Forcepoint NGFW & IPS
FORCEPOINT DIFFERENCE: POLICY-CENTRIC MANAGEABILITY
Remote, configuration – relatively manual
Rolls up individual configurations
Often highly redundant, labor-intensive
Centralized, policy-based management – automated
Pushes down policies to each cluster & device
Hierarchical policies automate firewalls & IPS

29. Copyright © Forcepoint. | 29
WHAT CUSTOMERS SAY ABOUT MANAGEMENT EFFICIENCY
Customer Cited in
“Quantifying the Operational and Security Results of
Switching to Forcepoint NGFW”
IDC Research, May 2017
“There are just two of us to manage everything related to network
security, so we need central management and to do administrative
tasks easily. Forcepoint is one of the best solutions for doing this.”

30. Copyright © Forcepoint. | 30
FORCEPOINT CUTS THE TOTAL COST OF OWNERSHIP (TCO)
 Modular, extensible appliances
 Rich capabilities built-in without add-ons
 High quality support
 Integrated SD-WAN, IPS, VPN, NGFW
 Zero-Touch Deployment via the cloud
 Centralized One-Click Updates/Upgrades
 High Availability at Every Level
 Clustering of Multi-ISP Broadband
 Upgradable Software, Reusable Appliances
 Uniform across Physical, Virtual, Cloud
HOW
FORCEPOINT
CUTS OPERATING
COSTS

31. Copyright © Forcepoint. | 31
CTO
Fusion Media Networks
“Our experience with Forcepoint Stonesoft NGFW has exceeded our
expectations…. By making use of the security management center
(SMC) to manage all queries from one centralized system, we have
been able to cut costs by 30 percent.”
WHAT CUSTOMERS SAY ABOUT EFFICIENCY