HP Pro Curve Alliance Dr Carl Windsor CISSP

HP Pro. Curve Alliance + Dr Carl Windsor CISSP Major Account Manager cwindsor@fortinet. com February 2008

What is the HP Pro. Curve Alliance? • Membership alliance program run by HP Pro. Curve to offer customers security and mobility solutions with interoperability with HP Pro. Curve products • Members are Fortinet, Mitel, Air. Wave, DVTel and Shore. Tel Fortinet Confidential

Why Pro. Curve? • Complete portfolio of LAN, WLAN segments • Strong product features, combined with very cost-effective pricing • Pro. Curve provides Industry Standard Solutions • Best Warranty in the Industry • Lifetime hardware warranty • Free phone support • Free software updates

Why Pro. Curve? - Synergies with Fortinet • Cisco growing presence in the security space § Traditionally Cisco has taken a “build everything” approach • Pro. Curve provides an attractive alternative to Cisco § Pro. Curve will establish alliances to build up security functionality • Pro. Curve and Fortinet are leaders in their respective industries • Opportunity for Fortinet to grow its presence in new markets

Why Fortinet? - Synergies with Pro. Curve § External threat protection • UTM feature set (Firewall, IPS, VPN, Anti-virus, Anti-spam, Content Filtering) § Internal threat protection • IDS/IPS § Broad portfolio of UTM appliances and management tools • SMB to Enterprise level solutions § UTM appliances are interoperable with Pro. Curve Network Immunity Manager

Why Pro. Curve and Fortinet? Unified Threat Management Network Deployment Location Edge – Users Connect Distribution – Aggregation Core & Data Center Perimeter Distribution Core & Data Center Security Functionality NBAD (via s. Flow) L 2/L 3 Switching Vo. IP Firewall, IPS, Antivirus, Antispyware, Antispam, IM/P 2 P Control, Web Filtering + All deployment scenarios Complete security from L 3 -L 7 plus application layer

Network Immunity Manager Standalone Detection Analysis • • Duplicate IP IP spoofing IP fan out DNS tunneling Packet size deviation used Protocol anomalies TCP/UDP Fan out • Pro. Curve Manager • Network Immunity Manager § NBAD/s. Flow based virus alert s. Flow samples Possible Virus or attack identified by anomaly engine Per port response, Reconfiguration of switch Risk that traffic is misidentified Network switches Response Methods • Quarantine VLAN • Offender MAC lockout • Offender port shutdown • Offender port rate limiting • Offender port mirroring for deeper analysis • Enable sflow at the offender port • Email notification

Network Immunity Manager with Forti. Gate One Arm IPS Detection Analysis • Pro. Curve Manager • Network Immunity Manager § NBAD/s. Flow based virus alert • • • Duplicate IP IP spoofing IP fan out DNS tunneling s. Flow samples Packet size deviation used • Protocol anomalies • TCP/UDP Fan out Possible Virus or attack identified by anomaly engine IDS/AV alert Traffic correctly identified Per port response, Reconfiguration of switch Mirror Suspect Traffic Network switches Response Methods • Quarantine VLAN • Offender MAC lockout • Offender Port shutdown • Offender Port rate limiting • Offender Port Mirroring for deeper analysis • Enable sflow at the offender port • Email notification One-Arm IPS Build

Network Immunity Manager with Forti. Gate Inline Detection Analysis • • Pro. Curve Manager • Network Immunity Manager Duplicate IP IP spoofing IP fan out DNS tunneling Packet size deviation used Protocol anomalies TCP/UDP Fan out IPS alert Inline UTM Per port response, Reconfiguration of switch Network switches Response Methods • • Quarantine VLAN Offender MAC lockout Offender port Shutdown Offender port rate limiting Offender port mirroring for deeper analysis Enable sflow at the offender port Email notification

Pro. Curve / Fortinet Integration • The sensitivity with which the HP Pro. Curve switch port detects traffic anomalies is configured as appropriate

Pro. Curve / Fortinet Integration • Network Immunity Manager is configured to understand the Fortinet SNMP Trap format and Signature ID

Pro. Curve / Fortinet Integration • When the Forti. Gate identifies malicious traffic, it notifies the Network Immunity Manager via an SNMP Trap

Pro. Curve / Fortinet Integration • The Network Immunity Manager responds by reconfiguring the switch according to the pre-set rules

Questions? For more information please visit http: //www. fortinet. com

Backup Slides For more information please visit http: //www. fortinet. com

Pro. Curve Switch Functionality