Atos Se · EURONEXT:ATO
Atos — Gigamon — On-line seminar: Cybersecurity in Healthcare: Revealing Hidden Weaknesses in Your Infrastr (December 2020)
18 slides from Atos's conference presentation, December 2020
Slide 1: Network & Security Visibility
On-line seminář – Kybernetická bezpečnost ve zdravotnictví: Odhalení skrytých slabin vaší infrastruktury. Network & Security Visibility You can only protect what you see. Increase Your Visibility, Enhance Network Security Dejan Laketić | Senior Sales Engineer, Gigamon 1
Slide 2: A Trusted & Innovative Market Leader
DIVIDER OPTION 2 A Trusted & Innovative Market Leader Gigamon provides network visibility and analytics on all traffic across physical, virtual and cloud networks to solve critical security and performance needs – freeing you to drive business optimization ABOUT GIGAMON INNOVATION SERVING VERTICALS
Slide 3: Network & Security Visibility Challenges
Network & Security Visibility Challenges Remote Internet Public Full Visibility ? IPS/IDS IPS/IDS sites cloud IPS/IDS Network Upgrades ? WAF WAF WAF Data Volume Increase ? SIEM SIEM SIEM Firewall Security Tool Load & Performance ? CEM CEM CEM Routers New Security & Monitoring Tools ? APT APT APT Spi
Slide 4: Solution for better visibility – Visibility Fabric (NG-NPB)
Solution for better visibility – Visibility Fabric (NG-NPB) Gigamon Visibility Fabric Remote Internet Public IPS/IDS IPS/IDS sites cloud IPS/IDS Application & Subscriber WAF WAF WAF Intelligence SIEM SIEM SIEM Firewall Packet & Flow Data CEM CEM CEM Transformation Routers APT APT APT Spine switches
Slide 5: Complete Visibility into Data-in-Motion
Complete Visibility into Data-in-Motion REST APIs Cloud TAP Automation Public Cloud Centralized Tools Regional Center De-duplication FlowVUE Application Sampling Performance Management Core Core GTP, SIP & RTP NetFlow & Correlation Metadata Forensics, Detection, Security SSL Application Prevention D
Slide 6: Network & Security Visibility Implementation Use Cases
Network & Security Visibility Implementation Use Cases
Slide 7: Use Case 1: First Step to Visibility: Reliable Data Access for Tools
Use Case: INTERNET 1. First Step to Visibility: Get Reliable Data Access for Tools REMOTE SITES PUBLIC CLOUD ROUTERS FIREWALL SPINE SWITCHES LEAF SWITCHES VIRTUALIZED SERVER FARM
Slide 8: Use Case 1: First Step to Visibility: Reliable Data Access for Tools
PUBLIC CLOUD INTERNET FIREWALL ROUTERS SPINE SWITCHES REMOTE SITES LEAF SWITCHES SERVER FARM VIRTUALIZED 1. First Step to Visibility: Get Reliable Data Access for Tools P WR1 P WR2 S YSTEM FA N X49 – X52 | Q1 X57 – X60 | Q3 1G/10G PORTS ( SFP+) 1G/10G PORTS ( SFP+) 1G/10G PORTS ( SFP+) 1G/10G PORTS
Slide 9: Use Case 1: Tools and GigaSMART Functionalities
Use Case: … IDS ATP DLP APM NAC NPM Tools X X De-Duplication Smart Flow Mapping Netflow / Metadata OOB SSL Decryption GigaSMART Functionalities Pwr SX / SR 62.5 um Rdy M/S Lock PPS Fan Rear O ff = Bypass O n = Inline PTP Rdy Rd y IEEE 1588 H/S MODE (M) SMT-HC0-X16 P wr X1 X3 X5 X7 X9 X1 1 X1 3 X 15
Slide 10: Use Case 2: Improve Threat Prevention Efficacy with Inline Bypass
Use Case: INTERNET 2. Improve Threat Prevention Efficacy with Inline Bypass REMOTE SITES PUBLIC CLOUD ROUTERS FIREWALL Pwr Rdy M/S SX / SR 62.5 um Inline Tool TAP-HC0-G100C0 Lock PPS Fan Rear Off = Bypass On = I nlin e PTP Rdy Rd y IEEE MODE (M) 1588 Pwr X1 X3 X5 X7 X9 X11 X1 3 X15 A B M A B M A B M
Slide 11: Use Case 2: Improve Threat Prevention Efficacy with Inline Bypass
Use Case: 2. Improve Threat Prevention Efficacy with Inline Bypass Maximize availability & resiliency (for network teams) WAN Router IPS IPS WAF • Maximize tool efficacy • Increase scale of security monitoring Firewall • Bypass protection with advanced health checks to maximize availability 2x IPS M
Slide 12: Encrypted Traffic Management: Need for Efficient SSL/TLS Inspection
Use Case: 3. Encrypted Traffic Management (TLS Decryption) Need for Efficient SSL/TLS Inspection 80% of enterprise traffic will be encrypted through 20191 50% of malware will use encryption by 20191 100% need for visibility into SSL traffic entering or leaving an organization 80% performance degrada
Slide 13: SSL Decryption Options
Use Case: 3. Encrypted Traffic Management (TLS Decryption) IPS IPS WAF SSL Decryption Options: Do nothing? Not the right answer WAN router Enable SSL decryption on each tool? Serious performance hit on tools (>50% up to 80% capacity lost) Firewall Multiple decrypt/encrypt latency, troubleshooting di
Slide 14: Encrypted Traffic Management Highlights
Use Case: 3. Encrypted Traffic Management (TLS Decryption) 3 Inline Tool Group SSL Session (Decrypted Traffic) Leg 2 (Encrypted) 4 Highlights Web Monitor Tool • Servers and clients located internally (Decrypted Traffic) or externally • Private keys not needed 1 • RSA, DH, PFS can be used SSL Session
Slide 15: The Power of the Platform: NetFlow/IPFIX Generation
Use Case: 4. Centralized NetFlow/IPFIX & Metadata Generation The Power of the Platform: NetFlow/IPFIX Generation Without Gigamon With Gigamon Production Network Tools and Analytics Production Network Tools and Analytics NetFlow N Security Generation Security NetFlow Records Application Application N
Slide 16: Leverage Application Intelligence to Optimize Tool Stack
Use Case: 5. Leverage Application Intelligence to Optimize Tool Stack Internet Tools and Analytics Firewall Security Routers Application Filter Application Performance Performance Spine Switches Network DLP Visibility Platform Leaf Switches CASB Virtualized Server Farm Filter out (not sent to any to
Slide 17: Application Intelligence Traffic Filtering Example
Use Case: 5. Leverage Application Intelligence to Optimize Tool Stack Network Ingress 10 Gbps 10 Gbps Split Tunnel Traffic - 1.5 Gbps Zoom, Webex, MS Teams,… Streaming Video - 3.0 Gbps -Split Tunnel Youtube, Netflix, Hulu,… 10 -Streaming -Backups Backups and Updates - 1.2 Gbps Gbps 4.3 Gbps Windows,
Slide 18: Q&A
Q&A 18 Confidential and Proprietary. Not to be distributed without express written consent from Gigamon. © 2019 Gigamon. All rights reserved. 18