SONICWALL GDPR ALEXIS HOLMES CHANNEL SE UK I

SONICWALL & GDPR ALEXIS HOLMES, CHANNEL SE UK & I

WHAT DOES THIS MEAN FOR YOU?

DURING 2017 - 2018… UK based SMB consumers WILL be attacked! 1. 2. 3. 4. This attack is likely to be in the form of Ransomware It will enter your network either via an email or encrypted traffic Initial demands average 1 bit coin The ramifications of this with GDPR huge… © Copyright Sonic. WALL

The Sonic. Wall solution: REAL-TIME BREACH PREVENTION THE CHALLENGE THE NEED KEY ENABLERS THE SOLUTION Advanced Threats Real-Time Breach Prevention Critical Components The Sonic. Wall Platform Value Ransomware Zero-Day Malvertising Any Vehicle • Email, Browser, Apps, Files Any Traffic • Encrypted, Unencrypted Encrypted Malware Any Network DDo. S • Wired, Wireless, Mobile, Cloud Phishing Any Device • PC, Tablet, Phone, Io. T Inspect all SSL/encrypted traffic Multi-engine cloud sandbox Block unknown files until a verdict is reached in near real-time • Next-generation firewall • Capture: Triple-engine cloud sandbox for both network and email • High performance SSL inspection • Wireless/mobile access security • Email security © Copyright Sonic. Wall

SONICWALL & GDPR

SONICWALL & GDPR • Data Loss Protection - DPI SSL Application Control Email Compliance Secure connectivity • Day Zero Threats - Capture • Management & Reporting - Global Management System & Analyzer - Analytics

DATA LOSS PROTECTION

Why SSL/TLS Decryption is Important 38% Unencrypted 62% Encrypted Without SSL/TLS decryption the advertised malware capture rate of any device is effectively cut in half.

SONICWALL DPI-SSL ELIMINATES BLIND SPOTS IN SSL TRAFFIC HTTPS, SMTPS, NNTPS, LDAPS, FTPS, Telnet. S, IMAPS, IRCS, and POPS — and regardless of the port How much of your network traffic is HTTPS? Organizations not inspecting SSL traffic are blind to as much as 2/3 of the traffic on the network.

DPI-SSL inspection Traditional SSL connections

DPI-SSL inspection DPI SSL traffic connections

Application Control Take control… • Block unwanted applications • Throttle acceptable applications • Prioritise critical applications • Real-time monitoring

Application Intelligence & Control Identify Application Chaos Many on Port 80 ? ? Users/Groups Policy Critical Apps: Prioritized Bandwidth ? ? ? Control Categorize Reassembly-Free Deep Packet Inspection ? ? Acceptable Apps: Managed Bandwidth Unacceptable Apps: Blocked Cloud-based Extra-Firewall Intelligence Malware Blocked Visualize & Manage Policy

Real-time Visualisation & Control See traffic in real-time… and react

SONICWALL EMAIL SECURITY - FLEXIBLE DEPLOYMENT OPTIONS Configurations To Accommodate Varied Environments Comprehensive Anti-Spam Service (CASS) On-Premise Hosted 15

Sonic. WALL Email Security Solutions Superior email protection for small, medium, enterprise and MSP businesses • Multi-layer anti-spam, anti-virus protection • Compliance management • Multi-tenant • Flexible deployment options • Scalable, redundant • Enterprise deployment ready

Integrated Email Encryption Employee Email Server Sonic. WALL Email Security Sonic. WALL Email Encryption Customer Compliance: Minimize exposure to regulatory violations, litigation and penalties. Trustworthy communication with your customers and partners: With robust encryption and easily-tracked delivery paths, you can send sensitive information with confidence. Cost Containment: Cut costs of faxes, printing, postage, and courier services. Better Control: Messages are monitored, tracked and reported on every step of the way. Simplicity: Have all your users securely exchanging information within hours.

INTRODUCING E-CLASS SECURE MOBILE ACCESS Sonic. Wall SMA 8200 v Virtual Appliance Sonic. Wall SMA 6200 Sonic. Wall SMA 7200 The Dell Sonic. WALL Aventail Family of E-Class Secure Remote Sonic. Wall SMA EX 9000 Access Appliances

DETECT, PROTECT, CONNECT • Best of Breed Secure Mobile Access that ensures the appropriate level of access for any remote access use case Protect Detect Remote Access Traveling Employee at a Kiosk Sonic. Wall SMA solution Connect Corporate Data Center Day Extender Directories Applications Employee Using a Wireless Hotspot LDAP Web Apps LDAP AD Employee Smartphone / Tablet Extranet Access RADIUS Internal Access Business Partner from any Browser Customer/Supplier Behind a Firewall Internal Users Client/Server Apps File Shares Databases Vo. IP VDI Solutions

END POINT CONTROL Sonic. Wall End Point Control interrogates managed and non-IT-managed devices prior to connecting to identify the device and determine the overall trust level EPC Device Interrogation Interrogate by Device Profile q IT Managed q Windows q Non-Managed q Windows Mobile q Macintosh q Linux q i. OS/Android Work. Place Access (Clientless Web Access) For Device Identity q Mapped Directory q Windows Domain Membership q Device Watermark/ Certificate q Any Resident File q Windows, Mac, Linux Device ID q Mobile Device ID And Device Integrity q Anti-Virus q Registry Key q Windows OS Level q Personal Firewall q Anti-Spyware With Data Security q Cache Control q Secure Virtual Desktop Corporate Network Vo. IP Applications File Shares Connect Access (Client. Installed Access) Traditional Client/Server Applications

MOBILE CONNECT FOR IOS & ANDROID Sonic. Wall Aventail E-Class SMA Appliances Step 1: Download Mobile Connect Step 3: Configure SSL VPN Connection Sonic. Wall SMA Appliances Sonic. Wall Next-Generation Firewalls Step 2: Install Mobile Connect

DAY ZERO THREATS

HOW DAY ZERO ATTACKS WORK Spam + malicious file or link Infection/file encryption File encryption Email filter Exploit Kit Exploitation / Infection File encryption Propagation File encryption Malicious or compromised site + exploit kit or malware Infection/file encryption Even payment does not guarantee success hello Encrypt hell o Decrypt

HOW DAY ZERO ATTACKS WORK Spam + malicious file or link Infection/file encryption File encryption Email filter Exploit Kit Exploitation / Infection File encryption Propagation File encryption Malicious or compromised site + exploit kit or malware Infection/file encryption Even payment does not guarantee success hello Encrypt hell o Decrypt

STOPPING RANSOMWARE IN WEB & DEVICE TRAFFIC 1) 2) 3) 4) 5) 6) Content filtering SSL decryption (man in the middle) FW and SMA inspection CGSS Sandbox Client AV

STOPPING RANSOMWARE IN EMAIL 1) 2) 3) 4) 5) 6) FW inspects for… EMS inspects for… DMARC Signatures applied Policies checked Sandbox inspection

MULTIPLE ENGINES ARE ESSENTIAL • Multi-engine advanced threat analysis detects more threats, can’t be evaded • Virtualized sandbox • Full system emulation • Hypervisor level analysis • Broad file type and OS environment analysis • PE, MS Office, PDF, archives, JAR, APK • Windows, Android and Mac OS (H 1. 17) • Automated and manual file submission 27

HOW THE MULTIPLE LAYERS OF CAPTURE WORK .

UNDERSTANDING LAYERS OF SECURITY WITH CAPTURE Internet u at p eu s Sonic. Wall GRID Data Center & Threat Research Team d e at r n g i S Malicious file Sonic. Wall Firewall Sonic. Wall Capture cloud service SSL Decryption Download requests End User Gateway AV, Cloud AV Intrusion Prevention ? ? Capture file pre-process Capture. ATP r o t s y File Verdict s s, hi g tin ort t se rep e r s tu lysi p Ca ana e ag file Instant malicious file notification/email n a ess M cc A Admin Capture database Access file analysis reports, history File Verdict My. Sonic. Wall portal Capture multiengine sandbox

MANAGEMENT & REPORTING

SECURE ALL NETWORKS WITH CENTRALIZED MANAGEMENT CONSOLE The unified security management platform 1. Global Management System (GMS) manages firewalls 2. Firewalls control • Wireless Access Points • Switches • Enforced Endpoints • WAN Acceleration Sonic. Wall NGFW Sonic. Wall WAN Acceleration Dell X-Series Switch with Po. E Sonic. Wall Sonic. Point Sonic. Wall Advantage GMS Single Management Console Lower Operating Costs Converged Infrastructure Port Expansion Scalability

GMS FLOW ANALYZER High-performance, low-storage visualization and reporting engine • • Easy-to-use, intuitive “top” events dashboards Real-time mouse-overs and drill-downs for analytics One-click data pivoting for correlation of data Historical statistics and packet capture forensic analysis

CONCLUSION

WHERE DOES THIS LEAVE US WITH GDPR? May 2018 What Sonic. Wall Achieves • Data integrity - Firewall, Secure Mobile Access, Email Security • Reporting and auditing - GMS, Analyzer & Flow analytics 34

SONICWALL NETWORK SECURITY PRODUCT PORTFOLIO PROVIDE DEEP SECURITY WITHOUT COMPROMISING NETWORK PERFORMANCE Scan every byte of network traffic, including SSL encrypted Firewalls • Advanced IPS/ Malware protection with anti-evasion technology • Context aware application control • Reassembly-free network based malware protection Policy enforced mobile access URL, spam and phishing protection SSL VPN / (SMA) Email Security • Per app SSL VPN access to mission critical apps and data • Cross platform support for i. OS, Android Mac OSX, Kindle Fire, Windows and Linux • Advanced endpoint control with client interrogation • Global TO + License Pool • Advanced anti-malware keeps email free of threats • Broadest platform support including hardware, software and cloud based options • Easy-to-use cloud-based administration

WHERE DOES THIS LEAVE US WITH GDPR? May 2018 • What you will still need - Network Access Control User control and education Data Encryption (at rest) Secured Wireless 01 -SSC-3311 36

THANK YOU