Cyberoam NG series: Future-Ready Security A glimpse into the future of networks… Superfast Internet • Data moving at 10 times current Internet speeds • Google launched a 1000 Mbps ‘Google Fiber’ Internet service • IDNet launched UK 1000 Mbps Leased Line Business Ethernet Service Cloud: Web Applications • Critical business applications and Services moving to the Web • Cloud Computing will generate more than $45.4 billion in revenue by 2015! Device Explosion: Multiple Internet devices per user • Each device with a unique IP address • Employee-owned smart devices to reach 350mn by 2014, up from 150mn Cloud: Explosion of Internet Applications • Infinite applications moving to the cloud How will Organizations Gain? CONNECTIVITY PRODUCTIVITY SECURITY With Network Connectivity & Productivity taking a leap, what about Security? Can your Security keep pace? • The New Network Infrastructure - SOHO /SMB Network Infrastructure is moving to Gigabit! - Anything less than Gigabit is nearly obsolete! - Does your security appliance have Gigabit ports? - Does any security vendor offer network security appliances with Gigabit ports to these segments? • Superfast Internet Speeds - Gigabit Internet speeds to be soon available from ISPs /Telco’s - Can your security appliance match high Internet speeds? - Does it offer Gigabit throughputs? • Device Explosion - More devices per employee connecting to the IT network - Changing approach from ‘Users’ to ‘Devices’ - Can your security appliance support more number of Devices? Can your Security keep pace? • Explosion of Internet applications - Leading to ‘Application Chaos’! - What level of application control granularity does your Security offer? • Critical business applications moving to Cloud - Internet-facing applications face risk of getting hacked - Does your security offer a web application protection? No one wants SECURITY to become a bottleneck in their network! What can SOHO/SMB do to prevent Security from becoming a bottleneck in progress? Expand Security budgets to buy Enterprise security solutions Or IT Manager Move to Future-Ready security appliances Presenting The Cyberoam NG series The ‘Next-Generation’ appliances built for Future-ready Security in networks! Cyberoam NG series offers ‘Future-Ready’ Security • The Fastest ‘UTM’ appliances for SOHO and SMB segments • Offering Next-Generation Firewall protection for Large Enterprises! • Offering Future-Ready security to • SOHO, ROBO • CR15iNG, CR25iNG, CR35iNG • Wi-Fi appliances • CR15wiNG, CR25wiNG, CR35wiNG • Faster performance, broader coverage with 3 x 3 MIMO • Dual band support • SMB • CR50iNG, CR100iNG • Enterprise • CR2500iNG How Cyberoam NG series offers Future-Ready Security? Offering upto 5 times industry average throughput for SOHO /SMB Appliances starting with Gigabit Firewall Throughputs Best in class UTM throughputs * CR15wiNG, CR25wiNG, CR35wiNG have same throughputs as equivalent models above Cyberoam Technologies Pvt. Ltd. Confidential. For internal use only Firewall throughputs Cyberoam CR15iNG UTM throughputs Cyberoam CR15iNG vs. CR15i ONE CR15iNG vs Dell Sonicwall TZ series Cyberoam CR15iNG vs Fortinet FG20C, FG40C Cyberoam CR15iNG vs Watchguard WG XTM25, WG XTM26 Cyberoam Technologies Pvt. Ltd. Fortinet does not publish UTM throughputs in datasheet, shown as Not Available (NA) above Confidential. For internal use only Firewall throughputs Cyberoam CR25iNG UTM throughputs Cyberoam CR25iNG vs. CR25ia CR25iNG vs Dell Sonicwall NSA220, NSA 250M Cyberoam CR25iNG vs Fortinet FG60C Cyberoam CR25iNG vs Watchguard WG XTM33 Cyberoam Technologies Pvt. Ltd. Fortinet does not publish UTM throughputs in datasheet, shown as Not Available (NA) above Confidential. For internal use only Firewall throughputs Cyberoam CR35iNG UTM throughputs Cyberoam CR35iNG vs. CR35ia Power to secure SMB with SOHO appliance! CR35iNG vs Dell Sonicwall NSA2400, Power to secure SMB with SOHO appliance! Cyberoam CR35iNG vs Fortinet FG80C Cyberoam CR35iNG vs Watchguard WG XTM330, XTM 505 Cyberoam Technologies Pvt. Ltd. Fortinet does not publish UTM throughputs in datasheet, shown as Not Available (NA) above Confidential. For internal use only Firewall throughputs Cyberoam CR50iNG UTM throughputs Cyberoam CR50iNG vs. CR50ia Size doesn’t matter! CR50iNG vs Dell Sonicwall NSA2400, NSA 3500 Size doesn’t matter! Cyberoam CR50iNG vs Fortinet FG100D Size doesn’t matter! Cyberoam CR50iNG vs Watchguard XTM505, XTM 515 Cyberoam Technologies Pvt. Ltd. Fortinet does not publish UTM throughputs in datasheet, shown as Not Available (NA) above Confidential. For internal use only Firewall throughputs Cyberoam CR100iNG UTM throughputs Cyberoam CR100iNG vs. CR100ia Size doesn’t matter! CR100iNG vs Dell Sonicwall NSA3500, NSA 4500 Size doesn’t matter! Cyberoam CR100iNG vs Fortinet FG200B, FG300C Size doesn’t matter! Cyberoam CR100iNG vs Watchguard XTM515, XTM 525 Cyberoam Technologies Pvt. Ltd. Fortinet does not publish UTM throughputs in datasheet, shown as Not Available (NA) above Confidential. For internal use only NG series offers Future-Ready Security • Powerful Hardware • Superfast processing speed : A must for Gigabit Internet speeds! – Nano second security processing with multicore Gigahertz processors • Gigabit Ports to enable Gigabit Speeds for SOHO /SMB networks • A complete overhaul of appliance design • Faster, Next-Gen Memory and High Capacity Storage • Superior Quality for High Performance and Robustness – Design & components supporting high speed I/O throughput and withstanding extreme environments NG series offers Future-Ready Security • Increased port density Cyberoam NG series Cyberoam ia series CR15iNG 3 GbE ports CR15i 3 10/100 Ethernet ports CR15wiNG 3 GbE ports CR15wi 3 10/100 Ethernet ports CR25iNG-6P 6 GbE ports CR25ia 4 GbE ports CR25wiNG-6P 6 GbE ports CR25wi 4 GbE ports CR35iNG 6 GbE ports CR35ia 4 GbE ports CR35wiNG 6 GbE ports CR35wi 4 GbE ports CR50iNG 8 GbE ports 2 hardware bypass segment CR50ia 6 GbE ports 1 hardware bypass segment CR100iNG 8 GbE ports 2 hardware bypass segment CR100ia 6 GbE ports 1 hardware bypass segment Intelligent, Powerful firmware • Tightly integrates with Hardware for Network & Crypto Acceleration delivering high performance • Better use of Multicore architecture for Parallel processing • Optimized workload distribution across cores • Lockless path for packet forwarding – A single core handles packets for each connection at any given time to avoid inter-locks • Optimized Interrupt rates for minimum CPU overhead and latency • High rate of interrupts - A bottleneck in high-speed data transfers • Fastpath packets to improve processing speed and reduce CPU overhead Intelligent, Powerful firmware • CyberoamOS offers advance features with entry-level appliances Feature availability Cyberoam appliance SSL-VPN WAF HA CR15i/wi X X X CRR15iNG/wiNG √ X X CR25ia X X X CR25iNG/iNG-6P √ √ √ • CyberoamOS installed on flash and reports are stored in HDD* • Auto flash recovery** • Auto OS failover from flash to HDD in case of flash failure** *available in models above CR15iNG/wiNG **Future implementation Take complete control over applications running on your network Prioritize applications with Cyberoam’s Layer 7 & Layer 8 Visibility & Controls Medium Quality Internet Control over IM Web Bit VoIP ERP CRM Application Torrent mail High Quality Low Quality Granular classification of applications Risk Level Application Characteristics Application Technology Very Low (1) Excessive Bandwidth Browser Based Low (2) Prone to misuse Client Server Medium (3) Transfer files Network Protocol High (4) Tunnel other apps P2P Very High (5) Vulnerabilities Widely used Loss of Productivity Can bypass firewall policy Proactive Protection model: Eliminates the need for manual intervention by administrators to update policies for new applications added to the list On-Appliance Web Application Firewall • No need to buy dedicated WAF appliance • Protect Web Servers and Web Applications from hackers • • • • Prevents hackers from exploiting Web-Application Vulnerabilities Positive protection model and No Signature Tables Intuitive website flow detector automatically adapts to website changes Protects against OWASP top 10 vulnerabilities Cyberoam’s Layer 8 (Identity-based) security Cyberoam Authenticates User Login • User Name • IP Address • MAC Id • Session Id Control over staff network activities • Who can connect to the network • Who can access what • What have they accessed Cyberoam Authorizes Cyberoam Audits • Internet surfing quota • Identity - based • Schedule control Logs + Reports • Security Policies • Compliance Reports • Web Filtering • Application Visibility & Control • QoS / Bandwidth Management • IM Controls Ability to track the user activities; identify attackers /victims Take quick network security decisions Best-in-class Reporting - 1000+ in-depth reports - Real time visibility into user and network activities - Helps with Security & Compliance management, Forensic Analysis - Reports include dynamic and animated reports, in-line graphs, country maps Dual Dashboard - Traffic & Security Dashboard Country maps for Source/ Destination traffic Application Reports Support for new Connectivity Technologies – 4G /LTE • Makes organizations ready for high speed future • Easy deployment for high speed Internet connection • Simple USB modem plug-in into Cyberoam appliance • Ensures business connectivity • Automatic fail-over to 4G/LTE WWAN connection • Gateway failover over VPN • VPN over 4G/LTE 3G 4G Threat Protection Features Intrusion Prevention System - Maximum security against emerging threats - Identity-based IPS policies per user or group - 4500+ signatures – broadest security cover Gateway Anti-Virus, Anti-spyware - Prevents blended threats - 4 million+ signatures - Scans HTTP, FTP, SMTP, POP3, HTTPS, IMAP and IM traffic Gateway Anti-Spam - Real-time, most accurate spam protection - Recurrent Pattern Detection (RPD) technology - Scans SMTP, POP3, IMAP traffic Outbound Spam Protection - Protects service providers against Outbound Spam Other Security Features Fusion Technology driven SI Firewall - Interface for achieving Unified Security Virtual Private Network (VPN) - Threat-free remote access - Threat Free Tunneling (TFT) Technology - IPSec, L2TP, PPTP and SSL-VPN Web & Content Filtering - Complete Visibility & Control over HTTP & HTTPS - 82+ categories and 44 million+ URLs Bandwidth Management - Helps enhance network performance and productivity Create a bandwidth policy on a combination of User, Application, Category (application & web), allowing great flexibility and real L2-L8 visibility and control Securing You 449501 Live NG Series Demo View Demo www.cyberoam.com © Copyright 2012 Elitecore Technologies Pvt. Ltd. All Rights Reserved.