BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

21
© Copyright Fortinet Inc. All rights reserved. BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ 5. 9. 2017 Ing. Horymír Šíma, MAM e-government 20:10

Transcript of BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

Page 1: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

© Copyright Fortinet Inc. All rights reserved.

BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ

5. 9. 2017 Ing. Horymír Šíma, MAM

e-government 20:10

Page 2: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

2

Page 3: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

3

Page 4: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

4 4

Enterprise SMBTelco

Slow Is BrokenToday’s Network Is Borderless Complexity Is The Enemy of Security

Enterprise Firewall Cloud Security ATP Application Security Security OperationsSecure Access

Emerging Security Challenges

Fortinet’s mission is to deliver the most innovative, highest performing network security fabric to secure and simplify your IT infrastructure

Page 5: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

5 5

Enterprise SMBTelco

Slow Is BrokenToday’s Network Is Borderless Complexity Is The Enemy of Security

Enterprise Firewall Cloud Security ATP Application Security Security OperationsSecure Access

Emerging Security Challenges

Fortinet’s mission is to deliver the most innovative, highest performing network security fabric to secure and simplify your IT infrastructure

Page 6: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

6

Advanced Threat

Intelligence

Access

Client Cloud

Partner API

NOC/SOC

Network

Application

BROAD POWERFUL AUTOMATED

Page 7: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

7

Flexible/Open

Broad – The Fabric Gives You Complete Visibility, Coverage and Flexibility Across The Entire Dynamic Attack Surface

CoverageVisibility

Application Security

Cloud Security

Client/IoT Security

Access Security

Network Security

Page 8: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

8

Broad – The Fabric Allows Flexible, Open Integration of Other Security Partners

Virtualization & SDN/NFV CLOUD ENDPOINT & IoT

MANAGEMENT SYSTEMS INTEGRATORSIEM

Page 9: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

9

Powerful – Increasing Performance Reduces The Burden on Infrastructure

Comprehensive Range

Parallel Path Processing

Security Processors (SPU’s)

Accelerates Content Inspection

Optimized Performance for Entry Level

Accelerates Network Traffic

High End

Mid Range

Entry Level

1 Tbps

Page 10: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

10

Automated to Provide a Fast, Coordinated Response to Threats

CoordinatedAudit & RecommendGlobal & Local

Known Threats FortiGuard

Unknown Threats FortiSandbox

ISFW-PRI

Demo_ISFW-Sales

Demo_ISFW-Finance

Demo_ISFW-ENG

FP320C3X15002440

2.62 GB

Page 11: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

11

Apply to FabricFabric TranslationBusiness Language

“Add This Mobile Phone to This Application Securely”

“Convert into Policies, Ports, Connections…”

Intent-based Network Security, Powered by FabricAutomatically Translate Business Needs To Infrastructure Policies

Page 12: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

12

THE FORTINET SECURITY FABRICThe Fortinet Security Fabric is the vision that delivers on the promise of Security without Compromise: Broad, Powerful and Automated

Advanced Threat Intelligence

Access

Client Cloud

Partner API

NOC/SOC

Network

Application

Page 13: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

THE FORTINET SECURITY FABRIC REALIZED

Page 14: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

14

FORTINET SECURITY FABRIC

DDoS Protection

Web Application Firewall

Application Delivery Controller

Top-of-Rack

BRANCH OFFICE

Distributed Ent FW

LTE Extension

Endpoint Protection NGFWSecure Access

Point

IP Video Security

Email Server

Web Servers

SDN, Virtual Firewall

DCFW/ NGFW

Sandbox

Internal Segmentation FW

Sandbox

Switching

Internal Segmentation FW

Email Security

Internal Segmentation FW

CAMPUS

Internal Segmentation FW

DATA CENTER/PRIVATE CLOUD

Cloud-SaaS

Cloud-IaaS

Virtual Firewall

FortiCloud

Client DevicesClient Devices

PUBLIC CLOUD

OPERATIONS CENTER

Page 15: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

15

FORTINET SECURITY FABRIC

DDoS Protection

Web Application Firewall

Application Delivery Controller

Top-of-Rack

BRANCH OFFICE

LTE Extension

Endpoint Protection

FortiGate NGFWSecure Access

Point

IP Video Security

Email Server

SDN, Virtual Firewall

FortiGate DCFW/ NGFW

Sandbox

FortiGate Internal Segmentation FW

Sandbox

Switching

FortiGate Internal Segmentation FW

Email Security

FortiGate Internal Segmentation FW

FortiGate Internal Segmentation FW

CAMPUS

Client Devices

DATA CENTER/PRIVATE CLOUD

Web Servers

ENTERPRISE FIREWALL

FortiGate/FortiWiFi Distributed Ent FW

Client Devices

FortiManager

FortiAnalyzer

FortiSIEM

OPERATIONS CENTER

Cloud-SaaS

Cloud-IaaS

Virtual Firewall

FortiCloud

PUBLIC CLOUD

Page 16: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

16

FORTINET SECURITY FABRIC

DDoS Protection

Web Application Firewall

Application Delivery Controller

Top-of-Rack

BRANCH OFFICE

LTE Extension

CAMPUS

Secure Access Point

IP Video Security

Switching

FortiGate NGFW

FortiGate DCFW/ NGFW

FortiGate Internal Segmentation FW

FortiGate Internal Segmentation FW

FortiGate Internal Segmentation FW

FortiGate Internal Segmentation FW

FortiGate VMX SDN, Virtual

Firewall

DATA CENTER/PRIVATE CLOUD

Web Servers

ENTERPRISE FIREWALL

Client Devices

CLOUD SECURITY

Client Devices

Endpoint Protection

Email Server

Sandbox

Sandbox

Email Security

OPERATIONS CENTER

Cloud-IaaS

Fortinet Virtual Firewall

FortiManager

FortiAnalyzer

FortiSIEM

FortiCloud

Cloud-SaaS

PUBLIC CLOUD

FortiGate/FortiWiFi Distributed Ent FW

Page 17: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

17

FORTINET SECURITY FABRIC

DDoS Protection

Application Delivery Controller

Top-of-Rack

BRANCH OFFICE

LTE Extension

CAMPUS

FortiClient Secure Access Point

IP Video Security

Switching

FortiGate NGFW

FortiGate DCFW/ NGFW

FortiGate Internal Segmentation FW

FortiGate Internal Segmentation FW

FortiGate Internal Segmentation FW

FortiGate Internal Segmentation FW

FortiGate VMX SDN, Virtual

Firewall

DATA CENTER/PRIVATE CLOUD

Web Servers

CLOUD SECURITYADVANCED THREAT PROTECTION

ENTERPRISE FIREWALL

FortiClient

FortiSandbox

FortiClient

FortiSandbox

FortiMail Email Security

Email Server

FortiWeb Web Application

Firewall

OPERATIONS CENTER

FortiManager

FortiAnalyzer

FortiSIEM

Cloud-IaaS

Fortinet Virtual Firewall

FortiCloud

Cloud-SaaS

PUBLIC CLOUD

FortiCloud Sandboxing

FortiGate/FortiWiFi Distributed Ent FW

Page 18: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

18

FORTINET SECURITY FABRIC

Top-of-Rack

BRANCH OFFICE

LTE Extension

CAMPUS

FortiClient Secure Access Point

IP Video Security

Switching

FortiGate NGFW

FortiGate DCFW/ NGFW

FortiGate Internal Segmentation FW

FortiGate Internal Segmentation FW

FortiGate Internal Segmentation FW

FortiGate VMX SDN, Virtual

Firewall

FortiDDoS Protection

FortiWeb Web Application

Firewall

FortiADC Application Delivery Controller

DATA CENTER/PRIVATE CLOUD

Web Servers

FortiGate Internal Segmentation FW

APPLICATION SECURITY

ENTERPRISE FIREWALL

FortiClient

FortiSandbox

FortiClient

FortiSandbox

FortiMail Email Security

CLOUD SECURITYADVANCED THREAT PROTECTION

Email Server

OPERATIONS CENTER

FortiManager

FortiAnalyzer

FortiSIEM

Cloud-IaaS

Fortinet Virtual Firewall

FortiCloud

Cloud-SaaS

PUBLIC CLOUD

FortiCloud Sandboxing

FortiGate/FortiWiFi Distributed Ent FW

Page 19: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

19

FORTINET SECURITY FABRIC

FortiWeb Web Application

Firewall

FortiADC Application Delivery Controller

Top-of-Rack

BRANCH OFFICE

FortiExtender LTE Extension

CAMPUS

FortiClient Secure Access Point

IP Video Security

FortiGate NGFW

FortiGate DCFW/ NGFW

FortiGate Internal Segmentation FW

FortiGate Internal Segmentation FW

FortiGate Internal Segmentation FW

FortiGate VMX SDN, Virtual

Firewall

FortiDDoS Protection

FortiGate Internal Segmentation FW

DATA CENTER/PRIVATE CLOUD

Web Servers

SECURE ACCESS APPLICATION SECURITY

ENTERPRISE FIREWALL

FortiClient

FortiSandbox

FortiClient

FortiSandbox

FortiMail Email Security

FortiSwitch Switching

CLOUD SECURITYADVANCED THREAT PROTECTION

FortiSwitch Switching

Email Server

OPERATIONS CENTER

FortiManager

FortiAnalyzer

FortiSIEM

Cloud-IaaS

Fortinet Virtual Firewall

FortiCloud

Cloud-SaaS

PUBLIC CLOUD

FortiCloud Sandboxing

FortiCloud AP Management

FortiGate/FortiWiFi Distributed Ent FW

Page 20: BEZPEČNOST KYBERPROSTORU VE STÁTNÍ SPRÁVĚ - …

20

Security Fabric Secured by FortiGuard

App Control Antivirus Anti-spam

IPS Web App

WebFiltering

VulnerabilityManagement

IPReputation

Mobile Security

Firewall

VPN

Application Control

IPS

Web Filtering

Anti-malware

WAN Acceleration

Data Leakage Protection

Wi-Fi Controller

Advanced Threat Protection