Effective Network Security in a Dynamic World .pptVIP

Strong Performance The Best Detection App Coverage Next Generation Firewall NGFW Sourcefire NGFW Start with the best NGIPS and add firewalling One vendor for NGIPS and NGFW Ideal for people who want application control but have already standardized on a firewall platform Choose how and where to deploy application control Support for deep inspection at high-throughput in large scale enterprise environments “You’re not a Firewall Vendor!” What is Immunet? Mission - to reinvent endpoint defense by leveraging the networked nature of computers today Sourcefire acquired Immunet in January, 2011 Immunet Foundations Cloud-based - always updated, real-time protection Compatible - co-exist with host protections Customizable - custom signatures for unique situations Collective Immunity? - leverages community intelligence How is it Different? PC AV Agent 30-350MB File Definitions ~1GB 1:1 Only CLOUD How is it Different? PC Immunet Agent 8MB File Immunet Community 1:1 Prevalence Generics Temporal Immunet Cloud CloudRecall Comparing Immunet Traditional AV Immunet Sample Collection 1 Day - 1 Month Real-time Sample Processing 1 Day - 2 Weeks Real-time Protection Publishing 1 Hour - 1 Day Real-time Agent Footprint 28 - 352MB 8 MB Detection Technology File Based, Sig Focused Data Mining, Network-Centric Immunet Protect 4.0 Web-based SaaS management Group policies for Protection settings Cloud vs signature footprint Updates and scan schedules Central management White/black list Custom signatures and removal script Reporting - compliance/threat/infection APT and retrospective discovery Intelligent Protection: Cloud to Core CUSTOMER NETWORK SOURCEFIRE DEFENSECENTER SOURCEFIRE 3D SENSOR NGIPS Command Control/Events Capabilities: IPS RNA RUA Flow Analysis Impact Analysis Today CUSTOMER NETWORK SOURCEFIRE DEFENSECENTER SOURCEFIRE 3D NGIPS/ NGFW RAZORBACK? FRAMEWORK Blacklist Content Events Malware Detection IMMUNET/CLOUD ANTI-MALWARE Command Control/Events Capabilities: NGI