WatchGuard Overview

Fabrizio Croce

Novembre 2014

WatchGuard

Riconoscimenti

Nasce nel 1996 a Seattle USA

Firewall appliance pioneer, 18 anni esperienza

Nel 2006 diventa privata

~1,000,000 appliances consegnate nel mondo ad ora

100% canale – 5,000 rivenditori (1,200 con certificazioni avanzate) in 120 nazioni

20

12

2006

Taken private

in October

2007-2009

Re-Engineering

of Product

2010 2011 2012

Launched

re-architected

product with

Best-of-Breed HW

Best-of-Breed SW

Launched

RED / Next

Gen Firewall

Virtual solutions:

XTMv and XCSv,

Hardware

Refresh

2013

Launched

WatchGuard

Dimension™

For more information, contact your New Business Director:

WEST COAST: Nora Uriarte @ (310) 820-0012 or NUriarte@thechannelcompany.com

Facebook.com/crnmag

Facebook.com/TheChannelCompany

CRN

The Channel Company

@CRN

@TheChannelCo

February 2014

CHANNEL CHIEFS

HONORING THE MOST INFLUENTIAL

CHANNEL EXECUTIVES

CRN Channel Chiefs represent the channel elite, those

executives who consistently promote and execute best-

in-class channel partner programs that create and

accelerate revenue.

Solution Providers rely on this

definitive guide to the

“Who’s  Who”  of  the  Channel.

CRN Channel Chiefs Advertorial

Highlight  your  company’s  leadership  in  channel  management,  your  te chnology’s  solution  for  the  

marketplace,  and  your  co m pany’s  exceptional  value  to  partners.    

We’ll  take  care  of  the  he avy  lifting.

Advertorials are written in a journalistic style to convey your key marketing messages. The

Channel  Chiefs  template  is  flexible  so  you  can  highlight  one  or  more  of  your  co m pany’s  

honorees.  Allow  us  to  write  it  for  you  or  we’ll  work  with  your  su p plied  copy  – the choice is yours!

CRN Channel Chiefs Showcase Bundle

Take your message further and add an online showcase. Your co-sponsored portion of the

website provides a platform to showcase your video, downloadable assets and partner

program/portal information.

We drive traffic for you.

We created banner ads to drive traffic to your showcase which remains live for an entire month.

CHANNEL CHIEFS METHODOLOGY

CRN Editors vet and select the top Channel Chiefs – about 200 executives who head up the

most successful channel organizations in the IT industry. Honorees are chosen from a pool of

channel executives who submitted applications online. Decisions factor in experience,

revenue, innovations, and more.

For more information, contact your New Business Director:

WEST COAST: Nora Uriarte @ (310) 820-0012 or NUriarte@thechannelcompany.com

Facebook.com/crnmag

Facebook.com/TheChannelCompany

CRN

The Channel Company

@CRN

@TheChannelCo

February 2014

CHANNEL CHIEFS

HONORING THE MOST INFLUENTIAL

CHANNEL EXECUTIVES

CRN Channel Chiefs represent the channel elite, those

executives who consistently promote and execute best-

in-class channel partner programs that create and

accelerate revenue.

Solution Providers rely on this

definitive guide to the

“Who’s  Who”  of  the  Channel.

CRN Channel Chiefs Advertorial

Highlight  your  company’s  leadership  in  channel  management,  your  te chnology’s  solution  for  the  

marketplace,  and  your  co m pany’s  exceptional  value  to  partners.    

We’ll  take  care  of  the  he avy  lifting.

Advertorials are written in a journalistic style to convey your key marketing messages. The

Channel  Chiefs  template  is  flexible  so  you  can  highlight  one  or  more  of  your  co m pany’s  

honorees.  Allow  us  to  write  it  for  you  or  we’ll  work  with  your  su p plied  copy  – the choice is yours!

CRN Channel Chiefs Showcase Bundle

Take your message further and add an online showcase. Your co-sponsored portion of the

website provides a platform to showcase your video, downloadable assets and partner

program/portal information.

We drive traffic for you.

We created banner ads to drive traffic to your showcase which remains live for an entire month.

CHANNEL CHIEFS METHODOLOGY

CRN Editors vet and select the top Channel Chiefs – about 200 executives who head up the

most successful channel organizations in the IT industry. Honorees are chosen from a pool of

channel executives who submitted applications online. Decisions factor in experience,

revenue, innovations, and more.

For more information, contact your New Business Director:

WEST COAST: Nora Uriarte @ (310) 820-0012 or NUriarte@thechannelcompany.com

Facebook.com/crnmag

Facebook.com/TheChannelCompany

CRN

The Channel Company

@CRN

@TheChannelCo

February 2014

CHANNEL CHIEFS

HONORING THE MOST INFLUENTIAL

CHANNEL EXECUTIVES

CRN Channel Chiefs represent the channel elite, those

executives who consistently promote and execute best-

in-class channel partner programs that create and

accelerate revenue.

Solution Providers rely on this

definitive guide to the

“Who’s  Who”  of  the  Channel.

CRN Channel Chiefs Advertorial

Highlight  your  company’s  leadership  in  channel  management,  your  te chnology’s  solution  for  the  

marketplace,  and  your  co m pany’s  exceptional  value  to  partners.    

We’ll  take  care  of  the  he avy  lifting.

Advertorials are written in a journalistic style to convey your key marketing messages. The

Channel  Chiefs  template  is  flexible  so  you  can  highlight  one  or  more  of  your  co m pany’s  

honorees.  Allow  us  to  write  it  for  you  or  we’ll  work  with  your  su p plied  copy  – the choice is yours!

CRN Channel Chiefs Showcase Bundle

Take your message further and add an online showcase. Your co-sponsored portion of the

website provides a platform to showcase your video, downloadable assets and partner

program/portal information.

We drive traffic for you.

We created banner ads to drive traffic to your showcase which remains live for an entire month.

CHANNEL CHIEFS METHODOLOGY

CRN Editors vet and select the top Channel Chiefs – about 200 executives who head up the

most successful channel organizations in the IT industry. Honorees are chosen from a pool of

channel executives who submitted applications online. Decisions factor in experience,

revenue, innovations, and more.

For more information, contact your New Business Director:

WEST COAST: Nora Uriarte @ (310) 820-0012 or NUriarte@thechannelcompany.com

Facebook.com/crnmag

Facebook.com/TheChannelCompany

CRN

The Channel Company

@CRN

@TheChannelCo

February 2014

CHANNEL CHIEFS

HONORING THE MOST INFLUENTIAL

CHANNEL EXECUTIVES

CRN Channel Chiefs represent the channel elite, those

executives who consistently promote and execute best-

in-class channel partner programs that create and

accelerate revenue.

Solution Providers rely on this

definitive guide to the

“Who’s  Who”  of  the  Channel.

CRN Channel Chiefs Advertorial

Highlight  your  company’s  leadership  in  channel  management,  your  te chnology’s  solution  for  the  

marketplace,  and  your  co m pany’s  exceptional  value  to  partners.    

We’ll  take  care  of  the  he avy  lifting.

Advertorials are written in a journalistic style to convey your key marketing messages. The

Channel  Chiefs  template  is  flexible  so  you  can  highlight  one  or  more  of  your  co m pany’s  

honorees.  Allow  us  to  write  it  for  you  or  we’ll  work  with  your  su p plied  copy  – the choice is yours!

CRN Channel Chiefs Showcase Bundle

Take your message further and add an online showcase. Your co-sponsored portion of the

website provides a platform to showcase your video, downloadable assets and partner

program/portal information.

We drive traffic for you.

We created banner ads to drive traffic to your showcase which remains live for an entire month.

CHANNEL CHIEFS METHODOLOGY

CRN Editors vet and select the top Channel Chiefs – about 200 executives who head up the

most successful channel organizations in the IT industry. Honorees are chosen from a pool of

channel executives who submitted applications online. Decisions factor in experience,

revenue, innovations, and more.

Da 5 anni nominata market leader

Infonetics 2014 Gartner UTM Quadrant 2014

WatchGuard XTM ha

passato TUTTI I test con

score 100% comprese le

tecniche di evasione

avanzata acquistendo la

certificazione ‘NSS

Recomended’!

Test NSS Settembre 2014

Referenze

Products Offering WatchGuard Firbox

WatchGuard Security Solutions combinano firewall, VPNservizi di sicurezza per proteggere le reti da data loss, spam, viruses,

malware e intrusioni

XTM 2520: Large

enterprises e corporate

data centers*

XTMv

Versione virtuale per VmWare e

Microsoft Hyper-V

XTM 2 & 3 Series:

Small offices, branch

offices e wireless hotspots

XTM 5 & 800 Series:

Mid-sized businesses e

distributed enterprises

Software Scalare:

Stessa versione del

WatchGuard

Fireware® su tutte le

macchine compresa la

versione virtuale XTM 1500 Series: Large

distributed enterprises

Wireless Access Points

AP100/200 e AP102

Access Point da collegare

alle macchine UTM e gestiti

centralmente. Prodotti di

livello Enterpise.

Core Business Product Line Core Business Product Line

*Firewal UTM 1 rack unit piu’ veloce al mondo

Firebox® T10:

Small office/home office e

piccole realta’. Wired/Wireless e

ADSL Indoor Outdoor

XTM: WatchGuard Security Platform

La piu’ potente e veloce piattaforma esistente come prestazioni UTM

Console di gestione comune e controllo, creazione, monitoraggio policy

Prodotti aderenti agli standard

Insuperabile livello di sicurezza

Best of Breed Technologies da vendor leader di mercato

Modularita’: facilita’ nel aggiungere o modificare la tecnologia WatchGuard XTM Platform

WatchGuard Proxy-based Engine

WatchGuard

Industry Standard Platforms

An

tiV

iru

s

UR

L Fi

lter

ing

VP

N

Rep

uta

tio

n

Enab

led

D

efen

se

An

tiSP

AM

Intr

usi

on

P

reve

nti

on

Ap

p C

on

tro

l

Hyper-V

Dat

a Lo

ss

Pre

ven

tio

n

AP

T B

lock

er

VMware

…

Policy-based Management Console

A differenza della quasi totalita’ dei competitor WatchGuard e’ un Application Firewall ed utilizza i Transparent Application Proxy Layer 7 anziche’ il semplice packet filtering

Gli application proxy si occupano del packet reassembling, content inspection e protocol anomaly detection a standard RFC

Questa tecnologia permette di avere una

maggiore resistenza ad attacchi e Dos

che agiscano a livello di frammentazione

dei pacchetti come Teardrop, Syn flood,

Tcp Split-Handskake, come pure a

comandi malformati o non standard che

sfuttino vulnerabilita’ a livello applicativo

come cross scripting ed altri

XTM: Architettura

XTM: Prestazioni UTM

* Comparison uses AV as representative of full UTM. Fortinet & SonicWALL full UTM performance would be lower.

10000

9000

8000

7000

6000

5000

2000

1600

800

400

0

$0 $1,000 $2,000 $5,000 $7,000 $10,000 $20,000 $30,000 $40,000 $45,000 $50,000 $55,000 $60,000 $65,000 … $100,000

AV Throughput (Mbps) vs. 1 Anno Security Bundle (costo in USD)

P R I C E

TH

RO

UG

HP

UT

(

Mb

ps

) XTM 2520

XTM 870

XTM 1520

NSA E8500 Fortigate 3040B

NSA E10200

NSA E9600 XTM 850

XTM 515

XTM 525

XTM 535 XTM 545

NSA 250M

NSA 2400

NSA 3600

Fortigate 100D

Fortigate 200B

Fortigate 600C NSA 5600

NSA 6600

Fortigate 1000C

WatchGuard XTM e’ il prodotto con le migliori prestazioni con I servizi di

sicurezza attivati rispetto ai propri concorrenti. Rapportato al TCO dei prodotti

dimostra un estremo vantaggio competitivo anche economico

NSA E10400 Fortigate 3600C

Fortigate 800C

AntiVirus AntiVirus

URL Filtering

URL Filtering

AntiSpam AntiSpam

IPS IPS

App Control App Control

Data Loss Prevention Data Loss

Prevention

APT APT

La Piu’ Flessibile Architettura

Progettata per l’UTM

Architettura WatchGuard

3 anni di sviluppo La piu’ flessibile architettura per

UTM

Le piu’ alte performances Le migliori performance UTM al

miglior costo

Management Console WatchGuard Dimension™

potente tool di visualizzazione e

gestione

UTM Firmware Stesso firmware su qualunque

prodottto

Struttura Modulare Strategia ‘Agnostica’ basata

su accordi con Best-Of-

Breed

Hardware: Differenti partners (Intel,

Freescale..) per le migliori

performance su specifico

prodotto

Software: Componenti software allo stato

dell’arte finalizzato alla stabilita’

ed alle migliori prestazioni

Platform Platform

In-House vs. Best-of-Breed Technology

Anti Virus

URL Filtering

Anti Spam

Intrusion Prevention

App ID & Control

Data Loss Prevention

Advanced Malware

Protection

In-house Non Disponibile

✘

✘

✘ ✘ ✘

✘

✘

✘

✘ ✘

Flessibilita’ di gestione XTM:

CLI – WebUI e WatchGuard SM

WatchGuard System Manager (WSM) Software di gestione centralizzata: GRATUITO ed integrato

Tramite il WSM si puo’ creare un SOC senza

investimenti eccessivi tramite il quale monitorare e

configurare i Firewall distributi sul territorio

RapidDeploy

• Una volta connesso il dispositivo riceve una

configurazione di base automaticamente

• La Configurazione e’ salvata on-line

• Il dispositivo si collega e recupera la

configurazione quando attivato

WatchGuard System Manager (WSM) Software di gestione centralizzata: GRATUITO ed integrato

Real Time Monitors Completamente integrati e GRATUITI

Consapevolezza in tempo reale dell’utilizzo del network

WatchGuard Dimension

Reportistica completamente integrata e GRATUITA

installabile in cloud privato o pubblico 70 Report preconfigurati e portale di accesso via web

16

Blocca Viruses, Worms, Trojans, Spyware, Adware in HTTP, HTTPS, FTP, SMTP, POP3, TCP-UDP

Signatures e tecniche euristiche con emulazione di codice in sandbox

Signature aggiornate e controllate ogni ora

Completo scan file compressi anche nidificati ZIP, RAR, TAR, GZIP, ARC, CAB etc.

WatchGuard GAV & Anti Malaware

• Protezione basata su Signature contro

vulnerabilita’ conosciute

• Signatures aggiornate su schedulazione oraria

• Configurazione globale che protegge tutte le

porte

• Possibile specificare l’azione da prendere

quando una intrusione e’ rilevata

• Mette in blacklist automaticamente un intrusore

• Si possono definire eccezioni nelle signatures

Intrusion Prevention Service

Antispam: SpamBlocker

• Il servizio di SpamBlocker in Partnership con Cyren, leader della protezione Spam

• E’ il miglior servizio nel cloud in merito agli attacchi Spam: puo’ bloccare il 97% delle email indesiderate con solo lo 0,5% di falsi positivi

• Il processo di blocco avviene fuori dalla

appliance: nessun impatto sulle

performances Identifica i componenti

ripetitivi di ogni epidemia e controlla il

DNA delle stesse

• Controlla e blocca messaggi con DNA

spam in tempo reale

Internet traffic analysis

Real Time

Detection Center

DNA

Request

Classification

WebFiltering: WebBlocker

• WebSense Triton nel cloud con aggiornamento ogni 5

minuti

• URL filtering con oltre 100 categorie in 50 diverse lingue

• Eccezioni configurabili(Whitelist / Blacklist)

• Reports dell’accesso web, violazione policy e utilizzo di

Internet

• Incrementa la produttivita’ degli utenti

• Flessibilita’ per bloccare specifiche categorie

• HELP in tempo reale che descrive ogni categoria

• Configurabile cache proxy esterno per aumentare

performances

• Regole configurabili per utenti, gruppi e orario

• Prezzo “Per Box” invece che “Per Utente”

Categoria Esempio di Applicazione

Instant Messaging QQ; MSN; Yahoo; GoogleTalk

Mail Hotmail; Gmail; Yahoo; MS Exchange

Web 2.0/Social Media Facebook; LinkedIn; Twitter

P2P Gnutella, Foxy, Winny; Bittorrent; eMule

Remote Access Terminals TeamViewer; GoToMyPC

Database MS SQL; Oracle

File Transfer Peercast; Megaupload

Voice Over IP Skype

Streaming Media QuickTime; YouTube; Hulu

Network Management MS Update; Adobe; Norton; McAfee

Tunnel (Web bypass proxies) Ultrasurf; Avoidr; Circumventor

Application Control Controllo e Bocco di oltre 1.900 diverse applicazioni

Reputation Enabled Defense (RED)

• Utilizza il servizio Cloud-based

WatchGuard per la URL Reputation

• www.reputationauthority.org

• URL reputation (non solo domini o

indirizzi IP)

• Siti multipli forniscono diverse sorgenti

di informazione come RBL, Spamtrap

• La Reputazione è dinamica e cambia al

cambiare del WEB

Data Loss Prevention

• Blocca l’invio per Email e Web di

dati sensibili

• Carte di Credito

• Codici Fiscali

• Informazioni Conti Bancari

• Informazioni sanitarie

(HIPAA)

• Flessibilita’ e facilita’ d’uso

• Protezione automatica

• Analisi di piu’ di 30 tipi di file

(Excel, Word, Visio…)

Advanced Persistent Threat Blocker

Blocco minacce non ancora descritte nelle signatures AV

o IP (Zero Day)

Analisi effettuata tramite tecnologia con emulazione

dell’intero sistema operativo non la classica sandbox in

ambiente vituale, eseguita nel cloud

APT Blocker verifica file trasmessi tramite HTTP, FTP, e SMTP.

Windows PE (Portable Executable) files.

Include file per Windows XP eWindows 7/8 files

come.cpl, .exe, .dll, .ocx, .sys, .scr, .drv, ed .efi

Adobe PDF

Microsoft Office

Rich Text Format (RTF)

Android executable files (.apk)

APT Blocker puo’ anche esaminare file compressi del tipo:

gzip

tar

zip

Advanced Persistent Threat Blocker

Dove l’antivirus non puo’ arrivare

26

Advanced Persistent Threat Blocker:

Visibilita’

Perche’ scegliere WatchGuard

#1 UTM Performance

in tutti i segmenti di

costo

Top UTM Performance

#1 Migliori servizi UTM

il mercato offre

Best-of-Breed Technology

#1 Facile da installare

e da mantenere

Strong Manageability

Grazie