Hide Notes 

Slide 1: Simplifying Email, Web & Network Protection
Slide 2: Topics Astaro Company Profile The Security Struggle Overview of Astaro Security Gateway Security Applications Web Security Email Security Network Security Network Security Web Security Appliances and Software Additional Astaro Products Business Value Email Security © Astaro 2007 Astaro Overview – Page 2
Slide 3: Astaro Company Profile Founded in 2000 Pioneered what is called Unified Threat Management market Profitable, growing 60% Award-Winning Products Astaro Security Gateway – the most flexible solution for integrated email, web, and network protection protects 40.000+ networks in over 60 countries Easy to deploy and manage Global Presence Headquarters in Karlsruhe, Germany and Boston, USA 100+ employees in EMEA, Americas and APAC 24x7 technical support 1000+ partners & reseller worldwidet (700+ in EMEA) © Astaro 2007 Astaro Overview – Page 3
Slide 4: Customers © Astaro 2007 Astaro Overview – Page 4
Slide 5: Recognition Best of the year 2004 Best of the year 2005 Best of the year 2006 Editor's choice (2x) 5/5 Star Review (2x) Best of the year 2004 Best of the year 2005 Editor's choice Recommended product Product of the year 2005 Product of the year 2006 © Astaro 2007 Astaro Overview – Page 5
Slide 6: The Security Struggle THAT ARE DIFFICULT TO INTEGRATE AND MANAGE DEMAND MULTIPLE DEFENSES VPN MULTIPLYING THREATS ∞ Evaluate ∞ Purchase ∞ Train ∞ Install ∞ Integrate ∞ Configure ∞ Manage ∞ Update © Astaro 2007 Firewall Intrusion Detection AntiVirus Spam Blocking URL Filtering -Anti Spyware Astaro Overview – Page 6
Slide 7: The growing demand for Internet Security Firewall VPN URL Filter IDS Email Anti Virus Firewall Central report tool Central config tool Central mgmt tool Signing/encryption VoIP Security VPN Remote access NAC Wireless security P2P filter IM filter Anti Spyware Multi protocol AV IPS VPN URL Filter IDS Email Anti Virus Firewall App 3 App 2 App 1 UTM Gateways Clean pipe 1995 © Astaro 2007 2000 2005 2010 Astaro Overview – Page 7
Slide 8: Astaro Security Gateway Complete Perimeter Security Network Security Web Security Email Security © Astaro 2007 Astaro Overview – Page 8
Slide 9: Integrated Email, Web and Network Protection Firewall IPS VPN Network Protection Web Filtering Content Filter Anti Virus & Spyware IM & P2P Control Email Security Spam Filter Anti Virus & Phishing Encryption © Astaro 2007 Astaro Overview – Page 9
Slide 10: Layered Security Astaro Security Gateway V7 Firewall and VPN External users Internet Internal users LANs Intrusion Protection Content Filtering– Virus/Spam/URL/ Spyware/Phishing Database Email Web Internal Resources © Astaro 2007 Astaro Overview – Page 10
Slide 11: Integrated Management Web Security Network Security Email Security Installation Management Interface © Astaro 2007 Update Logging and Reporting Astaro Overview – Page 11
Slide 12: Web Security Virus Protection Content Filtering Web Security Spyware Protection Network Security IM and P2P Control Email Security © Astaro 2007 Astaro Overview – Page 12
Slide 13: Spyware Protection Blocks downloads of spyware, adware, and other malicious software Prevents infected systems from sending information back to the spyware server Checks against a database of known spyware URLs Gateway spyware blocking complements desktop anti-spyware tools © Astaro 2007 Astaro Overview – Page 13
Slide 14: Virus Protection for the Web Block viruses, worms, trojans, and other “malware” before they reach desktops Scans HTTP and FTP traffic Web & ftp downloads Web-based email (MSN Hotmail, Yahoo! Mail) Dual virus scanners with multiple detection methods Virus signatures, heuristic analysis Database of more than 300,000 virus signatures Frequent automatic updates Flexible management Can specify file formats and text strings to block © Astaro 2007 Astaro Overview – Page 14
Slide 15: Content Filtering (URL Blocking) Enforces policies on appropriate use of the web Administrators can define web use policies based on pre-defined categories of web sites Nudity, gambling, criminal activities, shopping, drugs, job search, sports, entertainment, etc. Sophisticated classification techniques text classification, recognition of symbols and logos Whitelists and blacklists to tailor access for groups of users Measure and report on activities © Astaro 2007 Astaro Overview – Page 15
Slide 16: IM & P2P Control Manage the use of Instant Messaging Clients AOL IM, ICQ, MSN Messenger, Yahoo! Messenger, IRC, Google Talk/Jabber, Skype Manage the use of Peer-to-Peer applications Bittorrent, Edonkey, Gnutella,WinMX, Winny, Manolito, Ares, Direct Connect Flexible control For each application administrator can define, if it should be allowed or blocked and if he should receive a notice about its usage. © Astaro 2007 Astaro Overview – Page 16
Slide 17: Email Security Web Security Network Security Email Email Security Security Virus Protection Phishing Protection Spam Protection © Astaro 2007 Astaro Overview – Page 17
Slide 18: Virus Protection for Email Block viruses, worms, trojans, and other “malware” before they reach email servers of desktops Scans SMTP and POP3 traffic Dual virus scanners with multiple detection methods Virus signatures, heuristic analysis Database of more than 300,000 virus signatures Frequent automatic updates Flexible management Can specify file formats and text strings to block Emails and attachments can be dropped, rejected with message to sender, passed with a warning, quarantined Gateway virus protection supplements desktop virus scanning. © Astaro 2007 Astaro Overview – Page 18
Slide 19: Spam Protection Identifies and disposes unsolicited emails (spam) Scans SMTP and POP emails Multiple methods to identify spam Reputation service with spam outbreak detection using patented Recurrent-Pattern DetectionTM technology Realtime Blackhole Lists, Whitelists/Blacklists, Greylisting, URL scanning, BATV, SPF record checking… Detects spam in every language and format Flexible management Emails and attachments can be rejected with message to sender, passed with a warning or quarantined User can individually release blocked messages via daily spam report or end user portal © Astaro 2007 Astaro Overview – Page 19
Slide 20: Protection Against “Phishing” “Phishing” – Criminals imitate emails from banks, credit card companies, eBay and other sources to obtain confidential user information Email Internet Astaro identifies and blocks phishing emails through several techniques: Virus scanner identifies phishing signatures URL filtering database captures phishing servers in the “suspicious” category Content downloaded from web sites will be blocked if it matches patterns of phishing content Scans for phishing signatures Databases of Phishing Sites Email Server Web Server © Astaro 2007 Astaro Overview – Page 20
Slide 21: Email Security Web Security Network Security Email Email Encryption Security © Astaro 2007 Astaro Overview – Page 21
Slide 22: Email Encryption En-/Decryption and Digital Signatures for Emails supports OpenPGP and S/MIME Email in clear text Internal User ‘snmffdsa g Dsfg sdfgdsfgfdg Fdsg fgsdfgsdfgdsf Sfdgsdfdsfgsdf Fg fdsgdsfgsdfg Dfgdfsgfdsgfdsg dslsgdsfg Completely transparent No additional Software on Client required SMTP Email Server Easy Setup Only three configuration steps to start Central Management of all keys and certificates No key or certificate distribution required Encrypted Email Allows Content/Virus scanning even for encrypted SMTP emails © Astaro 2007 External User Astaro Overview – Page 22
Slide 23: Network Security Firewall Network Network Security Security Web Security VPN Gateway Intrusion Protection Email Security © Astaro 2007 Astaro Overview – Page 23
Slide 24: Firewall Stateful Packet Inspection Packet filtering – inspects packet headers Stateful packet inspection – tracks events across a session to detect violations of normal processes Time-based rules and Policy-based routing Application-Level Deep Packet Filtering Scans packet payloads to enforce protocolspecific rules Security proxies to simplify management HTTP, FTP, POP3, SMTP, DNS, Socks, Ident NAT (Network Address Translation) and masquerading DoS (Denial of Service Attack) protection Transparent mode eases administration © Astaro 2007 Astaro Overview – Page 24
Slide 25: Virtual Private Network (VPN) Gateway Encrypts data to create a secure private communications “tunnel” over the public Internet Supports IPSec, SSL, L2TP, and PPTP VPNs Windows, Linux, Unix and MacOS x clients Advanced encryption Supports all major encryption methods Many authentication methods Internal certificate authority Full Public Key Infrastructure (PKI) support Supports VPN tunnels based on dynamic IP interface addresses (DynDNS) © Astaro 2007 Astaro Overview – Page 25
Slide 26: Intrusion Protection Identifies and blocks application- and protocol- related probes and attacks Database of over 6,000 patterns and rules Probing, port scans, interrogations, host sweeps Attacks on application vulnerabilities Protocol exploitations Intrusion detection and prevention Notify administrator, or block traffic immediately Powerful management interface One click to enable or disable complete rule sets e.g. for email- or webservers © Astaro 2007 Astaro Overview – Page 26
Slide 27: Astaro Security Gateway Appliances Astaro Security Gateway 110/120 Astaro Security Gateway 220 Astaro Security Gateway 320 Astaro Security Gateway 425 Astaro Security Gateway 525/525F Environment Hardware specs Small office/ branch office 3 x 10/100 Base-TX ports integrated HD Small to Medium business 8 x 10/100 Base-TX ports integrated HD Medium business 4 x 10/100 Base-TX ports 4 x Gigabit Base-TX port integrated HD Medium business, enterprise division 4 x Gigabit ports – PCI bus 4 x Gigabit ports – PCI Express bus Hardware acceleration card integrated HD enterprise division Dual Intel Xeon CPU 10 x Gigabit ports – PCI Express bus - 525: 10 x Copper - 525F: 4 x Copper/6 x SFP Hardware acceleration card 2 integrated HD (RAID1) 1) 2 redundant Power supplies) Performance Firewall VPN IPS 100 Mbps 30 Mbps 55 Mbps 260 Mbps 150 Mbps 110 Mbps 420 Mbps 200 Mbps 180 Mbps 1,200 Mbps 265 Mbps 450 Mbps 3,000 Mbps 400 Mbps 750 Mbps 1) hot-swappable Astaro Security Gateway Software Runs on Intel-compatible PCs and servers © Astaro 2007 Astaro Overview – Page 27
Slide 28: Other Astaro Products Astaro Command Center Centralized management and real-time monitoring of installations with multiple ASG appliances Astaro Report Manager Centralized security reporting engine that collects, correlates and analyzes security data and provides a huge portfolio of grafical reports Astaro Secure Client Advanced IPSec VPN client with personal firewall and integrated dialer © Astaro 2007 Astaro Overview – Page 28
Slide 29: Business Value Enhance Security Block threats with complete perimeter security Integrated management reduces human error and increases speed of response Web Security Network Security Increase productivity Keep systems, networks and web sites up and running Increase productivity by blocking spam and inappropriate web surfing Email Security Simplify management A complete perimeter security solution that is easy to deploy, manage and update, and that scales seamlessly from small offices to large headquarters installations. © Astaro 2007 Astaro Overview – Page 29
Slide 30: SC Magazine Awards 2007 ‘Best Network Security’ Solution Voted as finalist by Astaro’s loyal user base Selected as winner by jury of independent industry experts Ceremony organized by the UK’s industry leading security publication Winner of ‘Best Network Security’ Solution category in the 2007 SC Magazine European Awards © Astaro 2007 Astaro Overview – Page 30