Simple security is better security Or: How complexity became the biggest security threat

What do they have in common?

Security is HARD!

Components of good security

1. Careful planning

2. User education

3. Choosing the right tools

0 1 3 8 50 ,0 10,0 20,0 30,0 40,0 50,0 60,0

Sophos’ core customers

Protect My Data Go Wireless Users Are Everywhere What About Securing My Servers? Downtime Unacceptable “Console Proliferation” & “Agent Pollution” Transition to the Cloud Regulations & Compliance Help Desk Queries New Attack Surfaces (Android, iOS) 250,000 New Polymorphic Threats Affect Everyone Macs Are No Longer Immune

Not Just A “Big Company”

Problem

UTM overview

-

Security, Made Simple

Security…

Made Simple.

Security technologies

Simple Deployment Simple Protection Simple Management

• Hardware • Software • Virtual • Cloud

• Active Protection – real-time protection powered by SophosLabs

• Live lookups via the Cloud

• SophosLabs experts tune the protection so you don’t have to

Next Gen Firewall URL Filtering Wireless VPN Anti-Spam Email Encryption Endpoint Web Protection Webserver Protection Intuitive consoles Centralised management Backed by expert support

Anti-malware

Sophos UTM – a truly simple firewall

Complete Security in a single solution

Network firewall - the first line of defense

• Any computer connected to the internet is at risk

• A computer outside a firewall can be attacked and compromised within minutes

• Hardware firewalls can be complex to configure

Network firewall

• Easy management with object-based rules

• Stateful packet inspection

• NAT and Masquerading

• Dynamic (OSPF, BGP) and static routing

• Bridging and multicast routing

• IPv6 Support

• Amazon Virtual Private Cloud Connector

• Easy tunneling with Windows Remote Access (PPTP & L2TP)

Network protection - detect and stop threats

• Firewalls only deal in ports, addresses and protocols

• Malicious network traffic can still come through allowed ports

• You want to get the best from your web connection

• You need a way to let remote workers and offices connect

• You need protection from today’s most advanced threats

Network protection

• Intrusion prevention system

• Site-to-site VPN (IPsec and SSL)

• IPsec and SSL Client VPN (Cisco supported*)

• HTML 5 VPN portal

• WAN link balancing

• High Availability (active/passive and active/active)

• Advanced Threat Protection

￮ _{Botnet/Command-and control detection}

￮ _{Cloud-based selective sandbox (requires Web Protection)}

Wireless Protection -WiFi should be easy

• Separate wireless management solutions can be expensive

• Many built in wireless hardware doesn’t give complete coverage

• Configuring wireless networks in remote offices can be a hassle

• Guest and visitor access can be complex

Wireless Protection

• Central management

• Plug & play deployment

• Connect access points anywhere

• Easy hotspot configuration with full customization

• Wireless repeating and bridging (AP50)

• Fully customizable login pages and vouchers with QR code support

• Support for two-factor authentication

• Same Intel platform • 3 x 3 MIMO, one radio • Being introduced as Rev.2 • Integrated SSD

• Can also add external APs

An industry first!

UTM + integrated 802.11ac Wi-Fi

SG 125w and SG 135w

beat DELL’s new TZ appliances…

Dell claims:

• Fastest small deep packet inspection firewall • SSL inspection eliminates encrypted threats • Integrated 802.11ac wireless controller

Sophos facts:

Email Protection - Still a risk

• Over 98% of all email is spam

• Many spam emails combine links to infected websites

• Phishing attacks are on the rise

• Data protection is a key concern for businesses

• Email encryption not easy to use

Email protection

• Filter spam and stop malware

• Let users manage their own quarantined items

• Detects phishing URLs in emails

• Supports S/MIME and OpenPGP for encryption

• Simple SPX encryption requiring no infrastructure

• DLP for automatic policy-based encryption and filtering

Email protection

• Recipient self registration for easier password management and improved confidentiality

Encrypting emails via SPX

2. UTM sends a registration request to

the recipient

3. The recipient opens the request and browses to the

Web Protection - Why worry about the web?

• Lack of control can impact productivity

• 85% of all malware comes from the web

• Web threats are invisible

• Targeted and controlling computers and stealing data

Web protection

• Gateway anti malware

• Transparent and proxy-based filtering

• URL Filtering both HTTP and HTTPS

• Web application control (NGFW)

• Interactive usage and user reporting

• Transparent user authentication with SSO for AD

• Transparent HTTPS filtering without certificate deployment

• Device-specific authentication

Web Protection

UTM v.9.3 Introduced more enterprise level features – powerful, flexible, simple

• Site tagging – enables sites to be tagged and tags to be used

in policies (e.g. “customer sites” or “research sites”)

• Time quota policy - users can browse specified categories for

a set period per day

• Selective HTTPS Scanning – automatically determines which

Web Protection

Site tagging - Tag sites to create unlimited custom categories

Web Protection

Web Surfing Quotas Policy: Select the categories and the time quota…

User Experience

Web Protection

Site tagging - Tag sites to create unlimited custom categories

Web Protection

Endpoint Protection - Devices everywhere

• The anywhere network

• Accessing the web outside your protection

• Malware carried on USB sticks

• You need more than signature-based AV

Endpoint protection

• Endpoint anti-malware

• Live protection

• Device control

• Web in Endpoint

• Manage anywhere through our LiveConnect service

Web in Endpoint

Consistent protection everywhere

• Combines Gateway, Endpoint and Cloud

• Web in Endpoint set policy once to apply everywhere

• On or off the network, it doesn’t matter

Instant insight and visibility

• See user activity no matter where they are

• Activity from offsite endpoints is instantly available

No extra cost

With the following subscriptions:

Web Server Protection – Don’t make headlines

• More than 30,000 websites infected every day

• 80% of infected websites are legitimate

• Exploits will often redirect users to malicious sites

Web Server Protection

• Web application firewall

• Anti malware scanning

• Form hardening

• URL hardening

• Cookie protection

• SQL Injection and XSS filtering

• Reverse proxy authentication (offloading and delegation)

￮ _{With Single Sign-On}

• Best TMG replacement currently available

RED - Remote and branch offices made easy

• As a result, they often have inferior security

• Central IT staff can’t always solve problems remotely • Easily become the weak spot in the network

Sophos RED

Simple, plug & play branch office security

• Securely connect remote locations

• Completely configuration free

• Same protection for all offices

• Fully encrypted traffic

• No hassle

New in UTM 9.2

Wi-Fi & VPN Configuration

Wi-Fi & VPN Access