ha架构 - tanet竹苗区域网路中心.ppt

教育網路聯合安全防護最佳化 Jacob Chen Fortinet Taiwan SE 校園資訊防護範圍 The Power of Security + Performance The FortiASIC? Family Network ASIC (NP) Firewall acceleration VPN (IPSEC and SSL) IPS anomaly Application ASIC (CP) Antivirus (+Antispyware) Acceleration Web Filtering and Antispam Advantage from Accelerated AV scanning Traffic Shaping FortiGuard Center 零時差全球同步防護技術能力 FortiGate 網路實用規劃 部署6: 大型產險/壽險業UTM解決方案 部署10: IDC Server Farm for Online Game 企業內部安全防護 (FW, AV IPS) Internet 上網安全防護 (未架設前) Internet 上網安全防護 (架設FortiGate) Firewall – Fortigate with FREE SSL VPN Clientless VPN for remote access No pre-installed client software Utilizes client’s browser Embedded support for SSL support Application aware VPN Creates SSL session between client and gateway Tunnels (encapsulates) application protocols over SSL session Simplified deployment User only requires network login and URL FortiGate 支援 3G Modem FortiGate-60B and FortiWiFi-60B 以上機型皆支援 3G Modem Card. Tested devices in FortiOS 3.0 MR5 PC Cards modems: Merlin S620 (EV-DO) Merlin S720 (EV-DO) Sierra AC595 (EV-DO) Novatel S720 (EV-DO) Pantech PX-500 O2 (EV-DO) Sierra Aircard 850 (HSDPA, UMTS, EDGE, and GPRS networks) Sierra Aircard 875 (HSDPA) ZTE MY39 (EV-DO) USB Sierra 595U (EV-DO) Novatel U720 (EV-DO) 線路備援與機動性… One of the basic application is to use EVDO links as primary lnternet connection. FG-60B and FW-60B support the use of EVDO as a primary or secondary link. What is primary and what is secondary is just a network interface configuration setting Policy-based routing can be used to split the traffic load between Wan1 and Wan2 links. EVDO can take over for a failed load balanced ethernet link. FG-60B and FW-60B protect the communication. All the standard protection features (Firewall, VPN, IPS, Antivirus, AntiSpam, URL Filtering) work and apply to an EVDO link. Fortinet UTM 帶給客戶的好處 國際資安認證(ICSA, EAL4+, FIPS, NSS, VB) FortiNet 公司簡介 IDC “Fortinet Ranked the Fastest Growing Major Security Vendor” Unified Threat Management (UTM)