how to test high-performance next-generation firewalls

13
How To Evaluate High-Performance Firewalls

Upload: ixia

Post on 25-Jan-2015

503 views

Category:

Technology


0 download

DESCRIPTION

Testing next-generation firewalls necessitates simulating realistic network conditions to help you validate your enterprise firewall performance, attack detection and blocking while increasing stability and reliability under extended attack.

TRANSCRIPT

Page 1: How to Test High-Performance Next-Generation Firewalls

How To Evaluate High-Performance Firewalls

Page 2: How to Test High-Performance Next-Generation Firewalls

About Crossbeam

Deployed in 10 out of top 11 Service Providers in the world

Deployed in 1000+ Global Enterprise Companies

Global operations – 11 Years Strong.

• Headquarters: Outside Boston, MA • Support & services in over 50

countries• 60+ Global Integrators• 50+% International Business• 13 out of 14 Quarters positive

EBITDA

• Crossbeam helps the Global 2000, Service Providers and Government agencies consolidate their security infrastructure.

• Crossbeam’s open platform - the X-Series - scales linearly and offers best-of-breed security

Page 3: How to Test High-Performance Next-Generation Firewalls

The Crossbeam Virtual Infrastructure

Internet

Crossbeam creates a “Network in a Box”• Network Processor Modules• Application Processor Modules• Control Processing Modules

FW

L2

L2

IPS

LB

LB

LB

LB

The X-Series Platform becomes a “Virtual Infrastructure” integrating both Network Processing & Application Processing

Page 4: How to Test High-Performance Next-Generation Firewalls

The Crossbeam X-Series Portfolio

The Most Scalable Open Secure Platforms

X20

X30

X60

X80-S• 4-Slot Flexible

Chassis

• Pre-Configured for one application

• Expandable to 2 applications

• 5Gbps Backplane Performance

• 4-Slot Flexible Chassis

• Pre-Configured for one application

• Expandable to 2 applications

• 10Gbps Backplane Performance

• 7-Slot Modular Chassis

• Expandable to 5 applications

• 80Gbps Backplane Performance

• Single Box HA

• 14-Slot Modular Chassis

• Expandable to 10 applications

• 150Gbps Backplane Performance

• Single Box HA

Page 5: How to Test High-Performance Next-Generation Firewalls

IT Firestorm Threatens Business Performance

Page 6: How to Test High-Performance Next-Generation Firewalls

Does High-Performance = Resilient?

6

Page 7: How to Test High-Performance Next-Generation Firewalls

4 Keys to Evaluating High-Performance Gear: #1

7

Real-World Blended Application Traffic

Page 8: How to Test High-Performance Next-Generation Firewalls

4 Keys to Evaluating High-Performance Gear: #2

8

Enable Rules and Commence Attack

Page 9: How to Test High-Performance Next-Generation Firewalls

4 Keys to Evaluating High-Performance Gear: #3

9

Set-Up, and Tear-Down, Connections

Page 10: How to Test High-Performance Next-Generation Firewalls

4 Keys to Evaluating High-Performance Gear: #4

10

Sustaining Connections, During Load

Page 11: How to Test High-Performance Next-Generation Firewalls

How? Attack Thyself!

Real Attacks• 4,500 live security attacks• 100+ evasions• Malware & Spam• DDoS and Botnet simulation• Custom attacks• Research and frequent updates

Real World Applications• 150+ application protocols• Social media, peer-to-peer, voice, video• Web and enterprise applications, gaming• Custom applications• Frequent updates

Unprecedented Performance with McAfee Firewall Enterprise

• 40 Gbps blended application traffic• 10M concurrent TCP sessions• 160,000 connections/second• 38 Gbps SSL bulk encryption

Page 12: How to Test High-Performance Next-Generation Firewalls

Validating High-Performance Gear

REMEMBER TO EVALUATE:1. Performance with blended applications2. Performance with security rules enabled3. Ability to set-up AND tear-down connections4. Ability to sustain connections, during load

High-Performance Network GearClient

Simulation150+ Blended

Application Traffic (ex: HTTP, MySQL, Oracle)

+ 4500+ Live

Security Strikes+

Millions of Sessions

Page 13: How to Test High-Performance Next-Generation Firewalls

Questions and Answers

13